$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft File: TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json) Hash identifier: mbMEDwZn+qUqH/LHyL7gP14ie8u0sVoSoZudWatdfFM= Subject key identifier: 96:89:6B:BC:97:2D:BA:29:6A:A5:A9:7A:0C:72:29:C1:DC:3A:4C:C7 Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC Certificate issuer: /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft Manifest number: 0939 Signing time: Thu 24 Apr 2025 20:08:21 +0000 Manifest this update: Thu 24 Apr 2025 20:08:20 +0000 Manifest next update: Thu 01 May 2025 20:08:20 +0000 Files and hashes: 1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: BxhqyMllHsLyFNnQyXTuCLYJU7/2SEFqJEhai4h8xSg=) 2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: rZTxgnVXWMDQsg0oTYE7f4kyKGpDxh1zgyaFzYbZkqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Validity Not Before: Apr 24 20:08:20 2025 GMT Not After : May 1 20:08:20 2025 GMT Subject: CN=680a9a34-db08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:bc:e9:f3:ac:3e:6e:0e:e9:9f:37:28:d8: 77:ac:4a:3f:b8:d8:bc:49:31:7c:5c:92:30:1c:99: 76:8f:1a:c7:2e:c1:5f:72:0a:30:c4:3f:3a:3d:d8: a4:11:97:e1:b0:d0:79:a4:47:15:2b:1a:5f:98:81: 7e:fc:03:aa:bb:60:3c:35:e6:62:41:e6:6d:91:79: aa:a0:9a:09:8c:7b:f1:1f:cd:6e:00:49:6b:89:79: a4:7a:32:a1:01:77:43:4e:39:2b:68:15:9b:43:39: 14:ed:69:3c:c8:36:4e:fa:b7:a4:75:ce:cf:8e:ed: 19:11:ba:6b:7d:89:f7:b9:02:db:90:27:45:f9:02: 14:1b:8d:e3:68:2d:e9:13:98:31:90:14:90:9b:2e: 8f:7c:8f:9b:96:4a:83:72:1a:d9:c9:45:9e:6b:10: 4b:83:3a:35:8f:c2:be:cb:a6:6e:7a:c2:57:d5:27: a2:80:0c:43:51:6c:a3:8a:8f:0c:33:7c:28:8d:97: 16:37:93:89:67:f9:19:6e:79:93:1d:7e:45:c7:28: 93:bd:07:b2:20:5f:f6:27:46:5c:d4:8a:19:38:09: b6:a0:23:4b:d5:7f:9b:66:a0:c9:14:6b:59:d9:c6: 6b:e9:54:ae:a1:f2:27:27:85:d9:54:ff:52:bb:1a: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:89:6B:BC:97:2D:BA:29:6A:A5:A9:7A:0C:72:29:C1:DC:3A:4C:C7 X509v3 Authority Key Identifier: keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a3:5a:80:02:bc:42:c3:8e:5e:27:67:c4:39:81:c5:0b:62: 18:62:1e:29:a6:00:64:96:95:df:6d:45:3e:51:bb:3f:fc:56: c7:7e:d9:8d:17:b1:f1:bf:5f:0b:df:8b:d6:b6:2c:dc:03:72: 16:c6:86:10:a4:04:ef:0d:31:7b:9e:5b:da:9a:e5:2a:3f:cc: 5f:58:2d:79:1d:61:47:af:64:79:a0:2d:43:7d:9e:dc:31:2d: 14:bf:f8:9d:a8:25:68:0a:44:c6:9d:08:09:4b:b5:db:1a:a7: 2f:d2:b7:48:d6:fc:d6:cd:44:60:ec:6c:dc:db:de:9e:2e:d2: 1a:85:3c:92:65:88:e8:fa:8b:9d:45:08:c7:af:a4:d5:a4:aa: 81:db:2c:9e:5a:c5:2e:1d:ad:6e:3f:9e:01:a5:64:fe:71:ba: 7d:64:94:63:24:78:f5:d7:0b:e0:95:9b:a6:39:e3:23:f0:2b: 73:58:14:4d:24:af:6f:6e:c6:64:b5:ad:d2:b1:a3:da:22:43: e5:13:6b:8b:d0:f2:9b:6d:12:a2:c8:a3:ee:0d:3d:91:0f:0d: 82:f2:f7:fd:3a:72:14:a7:df:9c:60:2f:b9:7d:46:e6:4e:0c: de:68:17:0e:77:d2:38:8f:b4:2f:65:24:a0:d0:ff:a3:d4:a1: 54:ab:a0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0QzMxMTAvBgNVBAUTKDRFRjk0NzNCNTU0QUUxQTcyQkEwOTgxRkZFRkUxMzhF MkQ0ODBFQ0MwHhcNMjUwNDI0MjAwODIwWhcNMjUwNTAxMjAwODIwWjAYMRYwFAYD VQQDEw02ODBhOWEzNC1kYjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+S86fOsPm4O6Z83KNh3rEo/uNi8STF8XJIwHJl2jxrHLsFfcgowxD86Pdik EZfhsNB5pEcVKxpfmIF+/AOqu2A8NeZiQeZtkXmqoJoJjHvxH81uAElriXmkejKh AXdDTjkraBWbQzkU7Wk8yDZO+rekdc7Pju0ZEbprfYn3uQLbkCdF+QIUG43jaC3p E5gxkBSQmy6PfI+blkqDchrZyUWeaxBLgzo1j8K+y6ZuesJX1SeigAxDUWyjio8M M3wojZcWN5OJZ/kZbnmTHX5FxyiTvQeyIF/2J0Zc1IoZOAm2oCNL1X+bZqDJFGtZ 2cZr6VSuofInJ4XZVP9SuxoiNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaJa7yX LbopaqWpegxyKcHcOkzHMB8GA1UdIwQYMBaAFE75RztVSuGnK6CYH/7+E44tSA7M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRDMy9DMjNGNzY3Qzk5 ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRhY3JvSmdmX3Y0VGppMUlE c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2bEhPMVZLNGFjcm9KZ2ZfdjRUamkxSURzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRDMy9DMjNGNzY3Qzk5ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRh Y3JvSmdmX3Y0VGppMUlEc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoo1qAArxCw45eJ2fEOYHFC2IYYh4ppgBklpXfbUU+Ubs//FbHftmN F7Hxv18L34vWtizcA3IWxoYQpATvDTF7nlvamuUqP8xfWC15HWFHr2R5oC1DfZ7c MS0Uv/idqCVoCkTGnQgJS7XbGqcv0rdI1vzWzURg7Gzc296eLtIahTySZYjo+oud RQjHr6TVpKqB2yyeWsUuHa1uP54BpWT+cbp9ZJRjJHj11wvglZumOeMj8CtzWBRN JK9vbsZkta3SsaPaIkPlE2uL0PKbbRKiyKPuDT2RDw2C8vf9OnIUp9+cYC+5fUbm TgzeaBcOd9I4j7QvZSSg0P+j1KFUq6Ao -----END CERTIFICATE-----Generated at Sat Apr 26 03:45:30 2025 by rpki-client