$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: GjhQB6TKmFsMAHq/I7Gz0lHTnehiBdp+ynk+OWPkDII= Subject key identifier: 03:01:BB:FC:76:5A:D0:15:88:DB:82:F8:08:28:F5:93:7A:9C:7F:4F Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0A63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0A52 Signing time: Thu 24 Apr 2025 19:36:55 +0000 Manifest this update: Thu 24 Apr 2025 19:36:55 +0000 Manifest next update: Thu 01 May 2025 19:36:55 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: ljupToRceYaBnlZam0bR2KL1FqwbVPn9pYmMo6Buhfg=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Apr 24 19:36:55 2025 GMT Not After : May 1 19:36:55 2025 GMT Subject: CN=680a92d7-d1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:e8:3a:c8:be:5e:11:36:9c:87:d1:70:5a: c7:84:69:59:f7:a7:43:b5:26:65:e2:79:e1:18:a3: fb:e4:c8:21:ee:63:45:cd:ce:7f:f6:ae:c3:d2:c2: d6:6f:e2:13:8b:e1:ae:bd:be:8c:bf:ab:58:7e:41: ec:63:36:58:0b:2c:11:22:c8:76:3e:26:46:61:01: 4c:f9:3a:3e:db:79:f1:29:81:de:18:57:f3:7b:fd: 30:1e:5b:18:e1:7f:46:81:57:b8:9b:51:36:69:7b: d8:ad:62:11:91:4e:a8:d7:66:b0:ee:5e:3b:bc:94: b7:79:17:ea:a8:25:2c:a3:9f:18:d8:f3:e3:06:0e: f3:85:38:1a:de:b2:e1:9b:e3:2b:36:6a:c7:99:05: 4a:37:e7:23:cd:89:58:8b:26:5d:16:2d:26:e0:78: a7:5a:fb:9d:73:bd:62:14:c9:a5:e5:89:c1:31:3f: ab:1a:33:cd:99:83:8b:da:51:b7:37:75:5a:92:94: 03:80:da:91:db:09:68:25:ec:49:c4:9b:d4:61:16: d2:17:8d:8e:67:a1:63:03:1c:eb:fe:a7:16:18:ac: 02:27:65:ab:02:b0:48:ac:eb:47:cb:e4:cc:2f:8f: 51:19:fc:27:14:d0:e6:61:26:33:44:81:10:ed:3c: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:BB:FC:76:5A:D0:15:88:DB:82:F8:08:28:F5:93:7A:9C:7F:4F X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b1:41:6f:61:1a:29:04:3b:88:18:3f:91:8e:f3:25:c5:0d: d1:19:2f:00:21:db:05:e4:57:23:e1:f6:ed:d5:94:62:58:22: a7:51:3e:0a:85:3a:42:df:b4:2c:2d:00:30:92:99:45:3f:7b: 53:cf:66:41:90:1e:91:a1:38:7a:31:cb:98:34:2a:46:c8:25: aa:39:b4:2d:46:5a:a5:0a:1d:4f:a3:cf:b3:ab:b3:63:c5:8b: 63:3b:f8:7d:d0:da:88:1c:24:41:3c:e7:b6:62:fa:a6:7c:1b: f9:58:20:f5:eb:4d:39:14:d5:ab:66:de:67:2d:9c:af:58:5d: 8c:2c:17:5e:8c:3d:10:5e:5e:55:53:f6:c5:04:74:b7:04:90: 75:63:51:b5:71:d5:15:a1:5f:5f:c2:7d:db:2f:2e:7b:a9:b7: ed:c0:21:7d:62:8f:35:02:c1:15:08:4d:f7:3d:e7:b1:8a:2c: 8c:10:67:ca:64:05:f7:1f:fe:3d:b3:6f:d7:68:08:bf:93:23: fc:b9:7f:52:06:97:47:12:36:b0:7e:2a:07:62:09:16:64:94: c9:69:13:fa:fb:57:8c:53:0a:5d:90:32:13:10:98:34:1c:02: a3:18:09:7b:1b:45:31:dc:80:c5:3c:52:85:f6:f2:d4:41:95: 9f:40:56:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUwNDI0MTkzNjU1WhcNMjUwNTAxMTkzNjU1WjAYMRYwFAYD VQQDEw02ODBhOTJkNy1kMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+7oOsi+XhE2nIfRcFrHhGlZ96dDtSZl4nnhGKP75Mgh7mNFzc5/9q7D0sLW b+ITi+Guvb6Mv6tYfkHsYzZYCywRIsh2PiZGYQFM+To+23nxKYHeGFfze/0wHlsY 4X9GgVe4m1E2aXvYrWIRkU6o12aw7l47vJS3eRfqqCUso58Y2PPjBg7zhTga3rLh m+MrNmrHmQVKN+cjzYlYiyZdFi0m4HinWvudc71iFMml5YnBMT+rGjPNmYOL2lG3 N3VakpQDgNqR2wloJexJxJvUYRbSF42OZ6FjAxzr/qcWGKwCJ2WrArBIrOtHy+TM L49RGfwnFNDmYSYzRIEQ7TzPYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMBu/x2 WtAViNuC+Ago9ZN6nH9PMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWsUFvYRopBDuIGD+RjvMlxQ3RGS8AIdsF5Fcj4fbt1ZRiWCKnUT4K hTpC37QsLQAwkplFP3tTz2ZBkB6RoTh6McuYNCpGyCWqObQtRlqlCh1Po8+zq7Nj xYtjO/h90NqIHCRBPOe2YvqmfBv5WCD16005FNWrZt5nLZyvWF2MLBdejD0QXl5V U/bFBHS3BJB1Y1G1cdUVoV9fwn3bLy57qbftwCF9Yo81AsEVCE33PeexiiyMEGfK ZAX3H/49s2/XaAi/kyP8uX9SBpdHEjawfioHYgkWZJTJaRP6+1eMUwpdkDITEJg0 HAKjGAl7G0Ux3IDFPFKF9vLUQZWfQFad -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:41 2025 by rpki-client