$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: Ip63Nt/4EtvNGEGa/uBP8nywNhpRxcB8nvkOcU7J0Lk= Subject key identifier: BE:82:66:8C:6F:8A:E1:66:11:E3:A1:97:D5:C3:D2:A2:46:84:EA:7B Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 0558 Signing time: Thu 24 Apr 2025 23:12:29 +0000 Manifest this update: Thu 24 Apr 2025 23:12:29 +0000 Manifest next update: Thu 01 May 2025 23:12:29 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: rslxVJCJK77mL4ijBx+A3jrenS1cHK62kQWTvsHQQdo=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: RnZIX4eAVGz1Xn3dLIUYAfAKiqDL/KMhFsyHyDWlN4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Apr 24 23:12:29 2025 GMT Not After : May 1 23:12:29 2025 GMT Subject: CN=680ac55d-67f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:2b:a3:03:90:ea:8b:c1:51:06:b9:7a:cb: 6d:24:24:53:b8:95:f1:58:33:e0:bf:01:6e:46:98: d3:d0:4a:2c:e2:ee:9f:31:2f:b1:cf:3c:9a:fa:d3: 12:bc:15:7a:36:3b:30:e9:55:8d:11:6f:7a:ac:ba: 71:d1:5f:5b:e5:1e:c4:2a:7d:bd:40:02:07:01:71: f0:6f:19:d8:3a:ec:f3:ff:06:51:c9:3e:3e:63:d7: be:d8:29:d6:90:0a:68:2f:43:07:0a:1b:54:fd:14: d8:3a:46:fa:80:15:b7:19:a6:92:53:1e:b7:23:a9: a0:35:6f:b3:ac:47:85:8f:57:fc:48:95:fc:29:9a: 31:29:cd:45:7f:fc:16:d8:a6:33:39:e9:0b:f1:73: 39:bc:9a:b5:a7:2a:d7:9c:2c:7b:42:fc:7e:fd:0a: 8e:74:b2:f1:6a:f3:96:da:07:6c:62:c0:dd:a3:3d: 4a:20:e4:36:a3:82:90:7b:c2:51:32:dd:53:c3:b8: e2:98:8e:58:75:b9:90:be:4f:4b:70:17:13:9f:f0: d4:84:dd:4e:6e:a6:04:66:1b:86:d7:74:16:b7:c0: 0e:46:20:57:0e:2e:46:99:9f:56:64:30:d9:1e:ba: 97:aa:af:c2:f7:a9:a2:8f:b0:d2:11:5b:7f:5c:10: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:82:66:8C:6F:8A:E1:66:11:E3:A1:97:D5:C3:D2:A2:46:84:EA:7B X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:f6:aa:33:b5:ca:1c:4f:3d:82:83:7b:af:22:0d:80:3a:b1: 69:77:d5:13:e3:ef:11:1f:ab:e0:a7:34:7c:ad:d4:c2:ba:bd: c7:c7:26:63:ab:10:9e:5c:bf:0b:59:2d:40:75:2e:aa:6b:82: c9:12:7d:20:42:d6:a0:4f:50:70:22:79:b9:36:4c:b7:7c:1a: dc:29:fd:7d:21:58:22:90:b7:1b:02:54:58:16:c5:23:53:40: de:43:9c:fc:be:4b:e2:da:b2:2c:18:18:17:b7:74:1f:f8:be: 98:e3:06:78:79:1a:77:30:df:7d:dd:33:cf:14:80:1b:ac:c8: 99:6d:f0:3f:46:8f:c6:83:50:4c:02:c1:9d:89:66:f2:e7:e5: f2:d5:7c:18:6b:5e:c3:0f:d9:03:c2:82:e1:e9:1f:9b:be:c8: 85:8f:43:c1:76:a6:8e:29:8a:99:18:fb:1d:c9:f8:ca:90:63: c9:68:53:3d:64:56:80:7c:54:12:6e:af:09:79:7a:e6:de:20: e4:6a:5b:5f:d3:ff:18:8d:4a:f0:b4:e4:db:a0:57:14:19:af: e4:f4:00:3d:f5:d2:67:77:df:76:1e:6b:30:b8:6a:17:5d:70: 81:db:6e:e3:e3:f3:ce:5b:a5:fa:98:7e:68:dc:b5:56:a8:d6: 91:4f:1a:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUwNDI0MjMxMjI5WhcNMjUwNTAxMjMxMjI5WjAYMRYwFAYD VQQDEw02ODBhYzU1ZC02N2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4ArowOQ6ovBUQa5esttJCRTuJXxWDPgvwFuRpjT0Eos4u6fMS+xzzya+tMS vBV6Njsw6VWNEW96rLpx0V9b5R7EKn29QAIHAXHwbxnYOuzz/wZRyT4+Y9e+2CnW kApoL0MHChtU/RTYOkb6gBW3GaaSUx63I6mgNW+zrEeFj1f8SJX8KZoxKc1Ff/wW 2KYzOekL8XM5vJq1pyrXnCx7Qvx+/QqOdLLxavOW2gdsYsDdoz1KIOQ2o4KQe8JR Mt1Tw7jimI5YdbmQvk9LcBcTn/DUhN1ObqYEZhuG13QWt8AORiBXDi5GmZ9WZDDZ HrqXqq/C96mij7DSEVt/XBDG7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6CZoxv iuFmEeOhl9XD0qJGhOp7MB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC99qoztcocTz2Cg3uvIg2AOrFpd9UT4+8RH6vgpzR8rdTCur3HxyZj qxCeXL8LWS1AdS6qa4LJEn0gQtagT1BwInm5Nky3fBrcKf19IVgikLcbAlRYFsUj U0DeQ5z8vkvi2rIsGBgXt3Qf+L6Y4wZ4eRp3MN993TPPFIAbrMiZbfA/Ro/Gg1BM AsGdiWby5+Xy1XwYa17DD9kDwoLh6R+bvsiFj0PBdqaOKYqZGPsdyfjKkGPJaFM9 ZFaAfFQSbq8JeXrm3iDkaltf0/8YjUrwtOTboFcUGa/k9AA99dJnd992HmswuGoX XXCB227j4/POW6X6mH5o3LVWqNaRTxo/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:35 2025 by rpki-client