$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: X+h0AnnANVfuN7LmTBlygg3tRU8fgCWoriN3p/T+dKk= Subject key identifier: 7D:8E:FC:C2:F3:E3:3B:44:8B:D1:68:30:90:88:25:91:7E:9C:47:A1 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0C54 Signing time: Thu 24 Apr 2025 18:20:38 +0000 Manifest this update: Thu 24 Apr 2025 18:20:37 +0000 Manifest next update: Thu 01 May 2025 18:20:37 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: gbcho0NdacT2JSHEYQ0MxQ1A4YIOMHsqkWcvip57PgQ=) 2: E8F85ED4EC5811EFA9B9C618C4F9AE02.roa (hash: ykoz29uCG/11xDnxQBhHvrkmfn5Ejy8eSvfC/XRGcV0=) 3: 47DADED8EC5211EFBF551F6DC4F9AE02.roa (hash: Dq4Ro4BCHubyTM+Puy9Ox1X2qGGmM5W4/l0WmjnI3vE=) 4: 2B633118DF2F11EFAD7BEE6BC4F9AE02.roa (hash: LCBsasgUklncuTCZqxiSNtZe0VPDq700osnXP0sG1fE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Apr 24 18:20:37 2025 GMT Not After : May 1 18:20:37 2025 GMT Subject: CN=680a80f6-84c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:1e:b7:40:c1:82:68:b2:e4:6b:17:93:a3: 11:82:54:f5:b0:73:a8:c3:99:5b:08:7c:87:05:42: e0:f2:76:27:87:71:20:d9:82:13:3f:f1:bd:b6:47: 0a:a1:04:29:f3:38:60:89:27:27:73:96:a5:28:35: 30:92:10:cd:f3:0c:29:00:ee:cd:4b:b2:0f:02:91: b9:b4:56:b8:13:6a:f2:c0:87:bf:7d:95:93:3b:fd: ad:35:55:3a:f2:84:19:f4:10:d3:7a:ba:cf:88:49: 6d:0f:46:5c:9c:df:3e:36:c7:2c:c4:98:9a:55:25: 7e:99:a8:5a:03:df:a9:04:36:0d:3f:58:7f:56:5c: 51:66:ee:b9:d9:50:b8:f9:b2:d3:ce:1f:af:b5:05: 1b:70:5c:86:9a:1c:e0:1b:c2:a1:87:97:ff:8d:d9: 0f:62:56:c0:46:ef:af:58:fb:41:d2:6f:fe:f6:eb: 04:d3:2e:a5:b3:dc:20:74:a2:54:45:4b:61:1f:d3: f1:49:f9:9f:45:58:d8:40:7c:56:fd:a8:3c:72:e1: 8f:5a:a0:09:9e:af:79:7d:62:2d:db:fb:54:70:7d: c7:50:0f:1f:91:1a:45:d4:31:85:f7:a9:07:eb:e1: 3c:3e:92:99:b0:b7:da:cd:55:72:72:66:ae:88:04: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8E:FC:C2:F3:E3:3B:44:8B:D1:68:30:90:88:25:91:7E:9C:47:A1 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:76:cd:16:4d:a7:3c:0b:89:9b:c4:f0:30:88:bc:30:7d:9b: d4:d0:b9:25:e8:aa:0b:96:50:65:09:34:94:48:85:1d:d5:f3: 75:ef:a3:80:97:26:88:a4:60:09:6d:94:8b:cd:1a:ec:bf:be: 7b:e8:84:2f:45:48:aa:2b:73:76:f7:b9:69:ec:d3:fc:22:a4: 0a:99:6e:66:74:9c:9c:42:19:6a:56:22:76:d3:7f:66:47:75: 1c:32:a5:36:3f:34:de:d9:9b:db:5e:f7:55:e4:78:34:ef:32: 43:58:9e:87:c3:d0:a0:55:62:fd:93:a9:0b:6b:19:62:3c:d2: 5f:33:eb:89:c8:a3:b1:a0:76:f8:9a:1e:91:22:9e:e1:04:9e: ae:d3:b7:c0:96:c4:36:bd:66:50:f1:9f:ac:e2:4c:a0:2f:34: 60:6e:d2:1c:10:2e:ef:8c:84:be:f4:5f:94:c6:5c:6f:4a:9a: b2:cc:53:c4:a4:c6:40:2b:a1:86:9e:f3:23:b9:a8:4c:26:53: bd:e2:38:d8:c6:11:aa:25:86:5c:51:de:4b:d1:11:41:bb:06: 44:fa:ec:3a:3d:2c:ce:72:00:49:a9:7e:88:56:c0:f8:f3:dd: 1e:47:5c:c1:ef:eb:75:19:44:fb:5c:c5:f6:57:95:68:71:eb: 90:fe:9c:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUwNDI0MTgyMDM3WhcNMjUwNTAxMTgyMDM3WjAYMRYwFAYD VQQDEw02ODBhODBmNi04NGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/4et0DBgmiy5GsXk6MRglT1sHOow5lbCHyHBULg8nYnh3Eg2YITP/G9tkcK oQQp8zhgiScnc5alKDUwkhDN8wwpAO7NS7IPApG5tFa4E2rywIe/fZWTO/2tNVU6 8oQZ9BDTerrPiEltD0ZcnN8+NscsxJiaVSV+mahaA9+pBDYNP1h/VlxRZu652VC4 +bLTzh+vtQUbcFyGmhzgG8Khh5f/jdkPYlbARu+vWPtB0m/+9usE0y6ls9wgdKJU RUthH9PxSfmfRVjYQHxW/ag8cuGPWqAJnq95fWIt2/tUcH3HUA8fkRpF1DGF96kH 6+E8PpKZsLfazVVycmauiASxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2O/MLz 4ztEi9FoMJCIJZF+nEehMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcds0WTac8C4mbxPAwiLwwfZvU0Lkl6KoLllBlCTSUSIUd1fN176OA lyaIpGAJbZSLzRrsv7576IQvRUiqK3N297lp7NP8IqQKmW5mdJycQhlqViJ2039m R3UcMqU2PzTe2ZvbXvdV5Hg07zJDWJ6Hw9CgVWL9k6kLaxliPNJfM+uJyKOxoHb4 mh6RIp7hBJ6u07fAlsQ2vWZQ8Z+s4kygLzRgbtIcEC7vjIS+9F+UxlxvSpqyzFPE pMZAK6GGnvMjuahMJlO94jjYxhGqJYZcUd5L0RFBuwZE+uw6PSzOcgBJqX6IVsD4 890eR1zB7+t1GUT7XMX2V5VoceuQ/pyP -----END CERTIFICATE-----Generated at Sat Apr 26 12:40:44 2025 by rpki-client