$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json) Hash identifier: m3WV8+cB3zhDk5ICr5fPfaTEK3rnFURbxPBgDuaVEY8= Subject key identifier: 69:34:B9:B5:3C:B1:8F:65:66:36:E7:8E:1F:D3:C6:CB:90:2C:86:99 Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft Manifest number: 011B Signing time: Fri 25 Apr 2025 03:52:12 +0000 Manifest this update: Fri 25 Apr 2025 03:52:12 +0000 Manifest next update: Fri 02 May 2025 03:52:12 +0000 Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: 2cUw0TFFqiga0yVlBjnqhTVSgd3PXlUbql/JEH0YDbs=) 2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: f/jpE5cHuMY3Uawe+lXgAaJQ4nT2A65yBQRPGfiONwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Validity Not Before: Apr 25 03:52:12 2025 GMT Not After : May 2 03:52:12 2025 GMT Subject: CN=680b06ec-c4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:6c:60:16:f6:0c:02:63:5b:66:f0:5b:47: a4:13:9c:29:fc:98:df:a9:48:43:94:83:ad:55:ce: 3d:d2:4e:84:ff:77:cf:8e:1f:3a:69:c8:6c:98:2f: 8c:a0:dd:a7:11:d9:2d:a0:06:9f:48:50:90:58:fe: d2:09:8e:7c:04:e6:64:08:51:67:c4:ff:81:13:66: 54:5e:65:cb:96:63:d8:33:4a:0d:5d:1f:a1:83:05: 66:2b:e9:fe:0a:de:b1:5e:10:9f:85:a0:4f:43:55: 53:d5:bb:3c:71:27:2c:97:71:e3:18:43:b5:52:89: e6:5f:70:5c:a0:fa:40:f9:de:21:57:63:03:07:6a: 22:43:46:7a:fe:e2:57:0f:56:30:bc:85:d1:5f:38: 71:8a:50:72:57:25:a4:59:76:b4:ff:8d:ef:85:ef: 86:a7:10:b2:23:b7:f0:2a:d0:04:cb:d5:f6:e7:1d: ac:6d:5f:da:18:f5:c8:04:d8:d6:3d:e4:84:ab:3d: 24:87:d6:9c:15:2a:69:94:99:63:6c:11:6f:91:ab: 6d:a9:cb:a6:62:22:98:d5:0a:f7:42:ca:c7:af:f3: c4:18:43:06:a2:0f:b7:73:47:75:14:da:18:11:41: b4:4e:40:7e:d5:1e:f9:74:98:2c:6d:48:ed:bb:cf: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:B9:B5:3C:B1:8F:65:66:36:E7:8E:1F:D3:C6:CB:90:2C:86:99 X509v3 Authority Key Identifier: keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:cb:c5:3e:1b:fa:d1:3a:a1:b6:74:5b:8b:21:9d:0b:bf: c4:33:65:0c:e7:fd:a3:c7:22:5a:f0:e2:87:c9:df:f7:e0:aa: 94:b8:23:e0:cc:27:ab:37:b1:93:ad:21:a5:b4:b6:b6:fe:b8: 3c:68:a2:49:af:42:d2:d0:92:c6:35:45:7a:e4:a4:1d:61:d1: 88:69:3d:33:9b:74:cc:22:bb:7f:48:7b:a6:21:c2:ed:4d:5c: 56:a9:7c:48:f4:58:69:3e:88:5a:68:cb:81:7d:e3:ef:1e:de: 32:d4:b9:87:9a:8d:76:94:73:7d:78:fc:ff:4c:61:9d:23:53: a1:29:a2:b9:44:ba:1d:54:91:cf:ee:b4:bd:b9:e6:3f:3f:6e: 53:30:f5:4a:36:94:b7:e6:4e:b5:17:39:ea:40:61:80:7e:06: 5f:8f:24:77:8a:f3:a0:36:b3:4a:95:14:ae:4b:52:61:90:4d: b5:26:4e:8a:cc:5e:b6:31:b8:0a:30:af:83:63:84:69:c5:17: cd:fd:16:ab:0c:ca:d5:0e:e3:b7:0a:99:62:0b:52:5b:27:c6: a9:e1:ca:01:da:14:15:10:35:b2:9f:44:44:b6:e3:72:a7:02: b5:d9:95:2c:7c:a3:c8:6e:53:00:0e:96:34:c2:c0:17:e7:db: 5d:e2:58:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz QURBNEZFMTAwHhcNMjUwNDI1MDM1MjEyWhcNMjUwNTAyMDM1MjEyWjAYMRYwFAYD VQQDEw02ODBiMDZlYy1jNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyotsYBb2DAJjW2bwW0ekE5wp/JjfqUhDlIOtVc490k6E/3fPjh86achsmC+M oN2nEdktoAafSFCQWP7SCY58BOZkCFFnxP+BE2ZUXmXLlmPYM0oNXR+hgwVmK+n+ Ct6xXhCfhaBPQ1VT1bs8cScsl3HjGEO1UonmX3BcoPpA+d4hV2MDB2oiQ0Z6/uJX D1YwvIXRXzhxilByVyWkWXa0/43vhe+GpxCyI7fwKtAEy9X25x2sbV/aGPXIBNjW PeSEqz0kh9acFSpplJljbBFvkattqcumYiKY1Qr3QsrHr/PEGEMGog+3c0d1FNoY EUG0TkB+1R75dJgsbUjtu89brwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk0ubU8 sY9lZjbnjh/TxsuQLIaZMB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMwNi8xNzE3OTIwRTcxNkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndR eG4zZXE3b09NMTQ2MmtfaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmZcvFPhv60TqhtnRbiyGdC7/EM2UM5/2jxyJa8OKHyd/34KqUuCPg zCerN7GTrSGltLa2/rg8aKJJr0LS0JLGNUV65KQdYdGIaT0zm3TMIrt/SHumIcLt TVxWqXxI9FhpPohaaMuBfePvHt4y1LmHmo12lHN9ePz/TGGdI1OhKaK5RLodVJHP 7rS9ueY/P25TMPVKNpS35k61FznqQGGAfgZfjyR3ivOgNrNKlRSuS1JhkE21Jk6K zF62MbgKMK+DY4RpxRfN/RarDMrVDuO3CpliC1JbJ8ap4coB2hQVEDWyn0REtuNy pwK12ZUsfKPIblMADpY0wsAX59td4lj5 -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:42 2025 by rpki-client