$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: tuo1ZMNK00W8lbwl+bxGEyfdPNHQy+drqigj4YFxZ6Y= Subject key identifier: BE:2D:14:1E:C7:FB:B0:0E:90:30:17:56:71:94:9B:23:E0:2E:8E:37 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 17F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 17E8 Signing time: Thu 24 Apr 2025 16:34:22 +0000 Manifest this update: Thu 24 Apr 2025 16:34:21 +0000 Manifest next update: Thu 01 May 2025 16:34:21 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: KPf+geWMQkKj/80n2ORaMSwGqpIsFuKb48+edBvFaDI=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: 10aXr/v+1/g6rLOfgsT16qisBW6bzI99/6nvUNzz75M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6129 (0x17f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: Apr 24 16:34:21 2025 GMT Not After : May 1 16:34:21 2025 GMT Subject: CN=680a680d-5a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:3d:be:b1:d3:5e:fd:3d:b2:de:dc:63:e6: 6a:fc:1e:7b:d3:21:5e:e5:69:40:60:a0:e5:c5:cc: 16:80:14:0a:2a:f4:76:f2:1d:9f:37:2b:30:4a:bd: 19:eb:73:4d:5c:dd:74:f8:86:83:56:0a:2f:b2:be: bb:81:d6:39:56:51:e7:55:fc:a2:23:f4:7e:e5:e0: c7:01:65:2c:12:7b:37:80:7a:bb:5f:7d:0a:40:b0: af:b8:c9:10:f1:4b:21:b1:50:e6:d6:88:8a:0f:b3: 57:55:c9:50:98:f3:89:4d:49:3f:39:41:7f:92:5d: 25:e2:d2:38:51:7f:7e:e6:2c:b0:b6:27:28:47:b2: 49:ec:09:6d:a3:f0:a7:c7:77:e3:01:16:59:84:d7: 0b:02:c4:3c:d5:5b:26:bf:5d:5e:24:07:9d:ab:fd: f5:3a:28:19:73:83:95:ea:e3:6e:e2:ab:51:64:2a: 8c:b6:fc:85:ef:86:81:ac:70:48:69:e2:38:7b:7d: c3:0d:c9:cd:08:c0:08:cc:e2:c8:2a:3f:cf:5a:72: fd:e5:6a:bc:69:91:d6:bf:0d:05:7b:15:98:f0:39: 2e:41:0c:f2:32:6c:fe:6b:8c:63:f9:e2:a4:9b:0b: 12:48:58:43:3c:56:b7:36:eb:02:1b:26:52:58:33: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:14:1E:C7:FB:B0:0E:90:30:17:56:71:94:9B:23:E0:2E:8E:37 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:44:ac:a2:e6:8d:c7:e0:db:10:4a:b7:3e:05:5e:b4:e8:72: 81:fd:df:22:7a:23:4d:a4:12:1b:d0:9b:8d:ea:eb:4a:7d:52: db:50:82:c2:40:53:19:67:a7:a3:c2:91:9b:8d:eb:34:ee:13: f0:f0:6b:fe:25:5b:15:8a:5a:92:0d:0f:50:84:ba:35:5e:00: 0c:e8:ce:24:39:ae:c7:f7:35:0c:d0:ac:5e:32:ad:27:81:63: c3:10:97:76:6f:e2:a2:ec:a8:03:c4:af:9d:01:b5:11:33:ac: 6e:06:f8:88:1f:4c:30:c9:c7:69:b9:0b:c6:5a:89:d4:4f:cb: f7:73:47:56:cd:37:75:a2:2b:81:81:8d:1f:1f:0b:91:46:29: ad:4f:b4:2f:69:ee:5a:5d:a7:f7:58:0c:95:1f:4d:f5:9d:34: f6:71:1d:3f:2e:b3:7e:86:4d:e9:d0:5e:02:e4:d0:75:31:5e: ec:b6:04:2f:89:ca:1b:a2:e3:21:01:83:b0:ce:8b:25:9e:73: 1f:8d:b9:2a:df:4b:29:d0:40:bb:62:ab:be:22:0f:f8:40:9f: 8d:05:91:81:16:51:41:02:36:3d:59:9d:67:93:76:5e:54:d5: 07:3c:9b:40:78:d7:a5:46:9c:c7:d0:4c:56:d8:64:12:d3:7d: f2:17:bd:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjUwNDI0MTYzNDIxWhcNMjUwNTAxMTYzNDIxWjAYMRYwFAYD VQQDEw02ODBhNjgwZC01YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uw9vrHTXv09st7cY+Zq/B570yFe5WlAYKDlxcwWgBQKKvR28h2fNyswSr0Z 63NNXN10+IaDVgovsr67gdY5VlHnVfyiI/R+5eDHAWUsEns3gHq7X30KQLCvuMkQ 8UshsVDm1oiKD7NXVclQmPOJTUk/OUF/kl0l4tI4UX9+5iywticoR7JJ7Alto/Cn x3fjARZZhNcLAsQ81Vsmv11eJAedq/31OigZc4OV6uNu4qtRZCqMtvyF74aBrHBI aeI4e33DDcnNCMAIzOLIKj/PWnL95Wq8aZHWvw0FexWY8DkuQQzyMmz+a4xj+eKk mwsSSFhDPFa3NusCGyZSWDMuawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4tFB7H +7AOkDAXVnGUmyPgLo43MB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBURKyi5o3H4NsQSrc+BV606HKB/d8ieiNNpBIb0JuN6utKfVLbUILC QFMZZ6ejwpGbjes07hPw8Gv+JVsVilqSDQ9QhLo1XgAM6M4kOa7H9zUM0KxeMq0n gWPDEJd2b+Ki7KgDxK+dAbURM6xuBviIH0wwycdpuQvGWonUT8v3c0dWzTd1oiuB gY0fHwuRRimtT7Qvae5aXaf3WAyVH031nTT2cR0/LrN+hk3p0F4C5NB1MV7stgQv icobouMhAYOwzoslnnMfjbkq30sp0EC7Yqu+Ig/4QJ+NBZGBFlFBAjY9WZ1nk3Ze VNUHPJtAeNelRpzH0ExW2GQS033yF71U -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:17 2025 by rpki-client