$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: QRDQ2KCVXNRcnLrQ0QetYvlwC9Xu8z68qtXVD3394fA= Subject key identifier: ED:14:C6:62:C0:79:76:2E:9F:B2:72:AB:36:3C:10:E3:1F:5D:6F:9E Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 09A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 099F Signing time: Thu 24 Apr 2025 19:58:05 +0000 Manifest this update: Thu 24 Apr 2025 19:58:04 +0000 Manifest next update: Thu 01 May 2025 19:58:04 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: 42nof70ylh3Vf6M4uQ8IS8U27YSkEO2iVQ1EFxdk6s4=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: uCKaTzHSq8roKOND3QIAWtaboT0I2xNDmaN9cosgyvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2468 (0x9a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Apr 24 19:58:04 2025 GMT Not After : May 1 19:58:04 2025 GMT Subject: CN=680a97cc-04f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:cc:9e:c3:58:48:f2:6d:74:ba:b1:08:7f: fa:53:8b:8e:a8:39:bf:94:af:50:c5:ff:3d:7c:9a: 40:d8:8d:d5:b9:20:7e:d3:fa:bf:60:10:b8:9a:3a: 01:62:e6:bb:36:e8:73:c1:09:2b:2a:0f:68:76:b5: 43:90:21:44:23:4d:bd:15:eb:d1:da:bf:27:6c:c1: 1f:d7:df:da:69:b4:cb:41:fa:b8:7c:91:fa:3f:7b: 46:8f:44:2a:0b:d0:94:9c:8d:a0:30:fc:31:40:1d: 0f:ef:76:d3:a3:f5:20:43:f4:89:0f:1f:a0:72:36: ea:f8:dd:ef:af:c2:31:1e:11:f2:3b:f5:ab:62:ab: 46:2a:6a:c7:c6:e6:cc:76:72:2b:07:99:9a:db:16: 23:5f:9e:7d:1f:0c:f1:b0:dd:92:ed:1c:21:aa:35: 15:54:18:5a:14:e0:09:98:06:b7:02:56:cb:9c:32: f4:b1:69:28:29:bc:83:65:84:23:ee:74:42:8c:1c: ca:fb:82:ea:35:34:18:a8:65:09:7f:a1:6d:43:c9: 3e:a9:4b:58:74:ad:2b:a0:f1:7d:3c:0e:d0:f6:29: 88:a2:3d:17:f0:2e:5f:46:f3:d6:c4:f3:cb:2e:af: e4:a5:73:b9:99:5c:17:cb:92:2d:ad:27:b6:60:5b: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:14:C6:62:C0:79:76:2E:9F:B2:72:AB:36:3C:10:E3:1F:5D:6F:9E X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ff:b2:e9:1b:ad:01:74:ca:21:d2:17:bc:cb:92:fb:d3:04: d9:2a:8d:69:8c:bf:f9:01:1e:2a:68:71:73:45:c6:9a:2c:a9: 1d:7c:2a:0e:6b:ca:12:3c:52:81:22:6b:31:8b:35:78:68:d1: 53:e1:a5:5c:5a:dd:7a:32:47:5b:3a:8a:ee:5f:3c:5b:81:7e: 89:2a:e0:f8:94:e7:42:c7:5b:86:7a:a8:de:a4:e4:a9:c7:3b: 2c:d2:db:82:9d:ea:bc:ef:51:a1:b3:86:3d:e7:c6:ae:bd:59: 51:64:ae:b0:b5:00:7b:69:1d:dd:1e:11:a3:82:6c:f4:5e:86: 96:36:d4:91:4c:78:c1:16:96:7b:f3:28:cd:8e:cd:d3:bc:82: 44:82:13:c1:e2:38:3b:44:dc:14:92:8a:eb:0e:2f:ff:b0:d0: 7e:2f:6c:ef:36:8a:3d:9a:ab:4c:2f:2c:f4:57:e3:cd:19:f8: d7:7f:1f:e4:b0:92:6a:5d:05:db:7c:5d:ce:de:3b:92:3a:f9: 0a:d9:8b:a7:e2:4a:ea:14:86:40:5c:1c:ad:a5:ae:88:6e:56: 35:4b:ae:73:b0:c9:96:af:0e:6c:20:73:00:3b:55:66:76:3d: 14:d5:0d:d0:61:36:ea:73:59:92:1b:e6:a5:2c:77:df:3d:85: cf:4d:33:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjUwNDI0MTk1ODA0WhcNMjUwNTAxMTk1ODA0WjAYMRYwFAYD VQQDEw02ODBhOTdjYy0wNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp3MnsNYSPJtdLqxCH/6U4uOqDm/lK9Qxf89fJpA2I3VuSB+0/q/YBC4mjoB Yua7NuhzwQkrKg9odrVDkCFEI029FevR2r8nbMEf19/aabTLQfq4fJH6P3tGj0Qq C9CUnI2gMPwxQB0P73bTo/UgQ/SJDx+gcjbq+N3vr8IxHhHyO/WrYqtGKmrHxubM dnIrB5ma2xYjX559HwzxsN2S7RwhqjUVVBhaFOAJmAa3AlbLnDL0sWkoKbyDZYQj 7nRCjBzK+4LqNTQYqGUJf6FtQ8k+qUtYdK0roPF9PA7Q9imIoj0X8C5fRvPWxPPL Lq/kpXO5mVwXy5ItrSe2YFvlnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0UxmLA eXYun7JyqzY8EOMfXW+eMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS/7LpG60BdMoh0he8y5L70wTZKo1pjL/5AR4qaHFzRcaaLKkdfCoO a8oSPFKBImsxizV4aNFT4aVcWt16MkdbOoruXzxbgX6JKuD4lOdCx1uGeqjepOSp xzss0tuCneq871Ghs4Y958auvVlRZK6wtQB7aR3dHhGjgmz0XoaWNtSRTHjBFpZ7 8yjNjs3TvIJEghPB4jg7RNwUkorrDi//sNB+L2zvNoo9mqtMLyz0V+PNGfjXfx/k sJJqXQXbfF3O3juSOvkK2Yun4krqFIZAXBytpa6IblY1S65zsMmWrw5sIHMAO1Vm dj0U1Q3QYTbqc1mSG+alLHffPYXPTTNU -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:41 2025 by rpki-client