$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: MvHd02K3kg4YdXTM6AuBxK5MZQvaaBOia8g8OnWTB/s= Subject key identifier: 36:95:65:A2:B6:D4:68:1C:B1:28:B5:77:E9:C0:6B:F2:08:B8:4B:73 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 19 Signing time: Fri 25 Apr 2025 06:56:54 +0000 Manifest this update: Fri 25 Apr 2025 06:56:54 +0000 Manifest next update: Fri 02 May 2025 06:56:54 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: F7JAxy0k/MBu66/TjPNIz8DXPzrpPUwmsYT3MUipr5s=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: BP/bzVM/wZbrOI0ezn03B2cwqDCG358EDLnvWAZLbmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Apr 25 06:56:54 2025 GMT Not After : May 2 06:56:54 2025 GMT Subject: CN=680b3236-6b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:93:7a:5f:79:61:76:63:fc:58:a2:0a:7c:6f: 36:eb:8e:c6:df:f2:e5:03:5f:75:cb:4e:6f:8b:05: be:53:13:3d:01:8a:4f:e8:2f:f0:99:5c:00:2b:ba: 74:98:c9:af:bd:eb:fa:af:98:78:1a:31:39:67:22: 0b:60:bc:38:9c:9c:36:e0:22:b4:82:09:b6:f5:9b: bb:4a:27:56:dd:cb:31:53:36:81:f1:aa:96:c2:57: d9:aa:d1:2e:25:7e:6c:25:47:13:3c:83:46:78:6e: 05:7c:67:eb:39:59:00:cc:44:98:5f:98:ce:83:99: aa:c9:76:f9:92:e4:44:ed:91:93:e3:25:67:a0:38: b1:57:e8:ee:77:48:11:1e:fc:ba:03:4c:43:35:57: 6e:79:ef:78:d6:b6:9d:5d:f1:0a:6e:3b:f9:34:2b: e1:94:da:53:fb:e6:8c:30:b0:ff:3c:ae:86:19:75: 9b:5b:8f:53:31:4a:3b:b7:62:b8:a8:51:22:8f:8a: 75:77:18:a9:e8:32:6e:53:96:45:c9:fa:42:6a:36: cb:6c:c1:d9:ec:43:80:f9:3b:cb:92:26:00:68:19: fc:1c:90:79:a3:e4:c2:d3:3c:7f:be:ed:76:24:e6: 6b:c6:64:d0:d4:8f:f8:98:d7:f4:24:e8:9b:00:60: 67:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:95:65:A2:B6:D4:68:1C:B1:28:B5:77:E9:C0:6B:F2:08:B8:4B:73 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:db:a7:f4:b8:07:54:71:15:67:ad:03:1a:3e:3d:02:29:5a: e1:06:4a:ad:81:97:1c:e3:e2:97:20:99:49:21:3c:79:90:2a: 9d:9b:10:4a:02:2e:d4:a4:93:0e:8a:44:d9:10:20:e0:0f:54: c4:bb:0f:be:bf:f2:94:c7:e6:39:96:35:7a:a6:78:0e:4a:1e: f3:13:78:6f:93:96:3d:b4:04:49:78:20:89:e7:02:ca:ad:12: 98:7f:a5:0f:d1:e1:1f:2c:cc:cf:03:16:65:12:5a:9f:8d:3a: bb:55:25:c9:26:77:6c:c0:b3:3a:ee:41:69:e8:c7:9b:a3:0f: 04:f2:88:b4:6e:65:17:eb:c3:c0:53:16:d0:16:6f:34:d8:c5: 01:58:51:b5:e2:f4:93:39:e0:25:34:9c:cb:f1:92:94:5f:e2: c5:07:c2:09:db:72:bf:d3:d6:e2:66:e7:14:83:10:7a:83:a9: 3b:2f:41:e1:52:0f:a2:62:e7:bb:14:34:06:7a:b5:43:25:17: ee:c3:32:3a:87:dc:06:93:a8:d8:29:92:01:9a:21:f1:b6:58: 17:4e:ac:46:61:f0:20:cc:1e:f9:37:6b:e9:c1:21:0f:91:ef: 4c:b4:9c:93:24:30:17:97:1d:c3:0e:bd:22:9f:ee:c0:87:1a: 12:43:69:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0FERTExMC8GA1UEBRMoRDkzMjBCRkRBQzBDOTBCMzQyOEE0NEZDN0RDQTBFMkY3 OTA5Nzc0MTAeFw0yNTA0MjUwNjU2NTRaFw0yNTA1MDIwNjU2NTRaMBgxFjAUBgNV BAMTDTY4MGIzMjM2LTZiMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3k3pfeWF2Y/xYogp8bzbrjsbf8uUDX3XLTm+LBb5TEz0Bik/oL/CZXAArunSY ya+96/qvmHgaMTlnIgtgvDicnDbgIrSCCbb1m7tKJ1bdyzFTNoHxqpbCV9mq0S4l fmwlRxM8g0Z4bgV8Z+s5WQDMRJhfmM6DmarJdvmS5ETtkZPjJWegOLFX6O53SBEe /LoDTEM1V25573jWtp1d8QpuO/k0K+GU2lP75owwsP88roYZdZtbj1MxSju3Yrio USKPinV3GKnoMm5TlkXJ+kJqNstswdnsQ4D5O8uSJgBoGfwckHmj5MLTPH++7XYk 5mvGZNDUj/iY1/Qk6JsAYGc3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNpVlorbU aByxKLV36cBr8gi4S3MwHwYDVR0jBBgwFoAU2TIL/awMkLNCikT8fcoOL3kJd0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QURFLzg5QTQ5M0UyRkU0 RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRJTF9hd01rTE5DaWtUOGZjb09MM2tKZDBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QURFLzg5QTQ5M0UyRkU0RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xO Q2lrVDhmY29PTDNrSmQwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzbp/S4B1RxFWetAxo+PQIpWuEGSq2Blxzj4pcgmUkhPHmQKp2bEEoC LtSkkw6KRNkQIOAPVMS7D76/8pTH5jmWNXqmeA5KHvMTeG+Tlj20BEl4IInnAsqt Eph/pQ/R4R8szM8DFmUSWp+NOrtVJckmd2zAszruQWnox5ujDwTyiLRuZRfrw8BT FtAWbzTYxQFYUbXi9JM54CU0nMvxkpRf4sUHwgnbcr/T1uJm5xSDEHqDqTsvQeFS D6Ji57sUNAZ6tUMlF+7DMjqH3AaTqNgpkgGaIfG2WBdOrEZh8CDMHvk3a+nBIQ+R 70y0nJMkMBeXHcMOvSKf7sCHGhJDabs= -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client