$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: ns/LdNr7vNDouLyZCiCXTGF06WEtQvxzQP5+O/JFjJ4= Subject key identifier: 74:0F:85:4E:52:9D:D8:5E:21:C0:C6:0A:BA:32:49:65:E0:83:3E:8A Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 1F9D Signing time: Thu 24 Apr 2025 16:41:29 +0000 Manifest this update: Thu 24 Apr 2025 16:41:28 +0000 Manifest next update: Thu 01 May 2025 16:41:28 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: LgjGScL4hjZQYX5n3xJip/IxIuttQR85RocCtaOg8oY=) 2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: Lmn08n30AiKaOdta7GpDKIWNdyU/iej42lU+unei0xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Apr 24 16:41:28 2025 GMT Not After : May 1 16:41:28 2025 GMT Subject: CN=680a69b9-353d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:50:46:16:35:5b:bf:57:f3:74:cd:b3:d3: 2d:ee:6d:01:38:81:bf:7f:8e:55:ef:10:ce:b3:48: ea:bb:be:e0:f4:61:9d:b2:e2:70:99:c9:7d:34:1a: 68:6d:8e:eb:81:4f:fa:ef:93:67:dd:7e:6f:27:e7: 1e:46:91:96:c2:2d:81:43:3b:04:8e:73:3a:38:6e: 8c:22:fe:fe:49:43:55:a2:00:dd:3b:35:06:48:db: e6:dd:66:82:ed:13:af:55:ed:d8:3a:87:05:f1:83: 68:41:6c:8b:e1:7e:5f:f1:79:7b:9e:13:f5:25:80: d4:43:fc:03:ef:5c:73:29:54:18:87:55:bf:a2:d1: dc:cc:7c:d7:c2:ae:bf:23:2a:5f:8b:07:d6:1b:f4: e9:dd:5d:d5:dd:fa:6b:5d:67:13:3a:21:bc:c0:c4: 30:d0:3f:6f:83:f4:b4:ff:a3:c4:1d:75:4a:5f:78: a9:36:a2:1a:ca:13:0b:a0:e6:2e:5e:ee:1c:54:b3: e1:54:e2:c4:ac:49:9e:68:4a:aa:6e:5c:b1:db:48: 6d:b6:dd:08:7b:89:95:6a:fd:b4:b5:35:6c:de:da: 4a:42:0b:e6:12:dc:4a:4f:68:82:5b:7d:57:6e:95: 90:51:58:8f:32:76:d1:2f:9d:97:4f:7e:2c:29:7a: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:85:4E:52:9D:D8:5E:21:C0:C6:0A:BA:32:49:65:E0:83:3E:8A X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:80:a4:29:19:b4:ee:c3:43:cf:67:04:14:86:2a:30:17:78: 90:10:61:a1:25:37:55:85:aa:69:d0:69:d3:3b:3b:e1:97:3b: d3:8d:f4:31:62:2f:80:d2:ea:4b:d3:1a:1d:a8:13:6c:60:38: 2a:85:36:8f:c4:ba:24:65:d9:e1:77:4f:8d:9b:d4:24:62:5f: f9:d7:08:4f:e0:93:d6:97:b8:47:4a:59:5b:d2:09:1a:c5:c4: 42:de:16:bd:96:14:90:c6:05:f2:c1:7e:1e:5d:5d:26:c3:dd: 47:5d:77:93:aa:54:86:0b:c6:5a:62:be:11:db:cd:fc:37:76: dc:b7:75:d7:fa:14:15:e9:e8:98:a7:e2:ae:0f:f6:7a:1c:08: 17:5d:f0:81:7f:ec:2a:46:ac:dd:62:ab:9d:23:2f:94:1d:62: 6a:37:40:0b:24:97:27:59:1e:71:8c:a1:46:25:99:c9:79:02: f7:eb:26:5b:52:d8:8c:38:4c:65:3f:e6:79:5a:12:67:a0:5b: b4:49:43:68:5e:a7:39:e3:53:19:a1:10:6f:18:6e:4b:b2:7b: c3:3b:56:ee:57:61:65:ae:c4:2a:4c:58:b9:b5:d1:53:c3:a4: 4e:6d:86:ae:32:e1:20:3d:24:e8:82:15:d4:f8:6a:8f:2e:cf: c2:c6:ad:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjUwNDI0MTY0MTI4WhcNMjUwNTAxMTY0MTI4WjAYMRYwFAYD VQQDEw02ODBhNjliOS0zNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fJQRhY1W79X83TNs9Mt7m0BOIG/f45V7xDOs0jqu77g9GGdsuJwmcl9NBpo bY7rgU/675Nn3X5vJ+ceRpGWwi2BQzsEjnM6OG6MIv7+SUNVogDdOzUGSNvm3WaC 7ROvVe3YOocF8YNoQWyL4X5f8Xl7nhP1JYDUQ/wD71xzKVQYh1W/otHczHzXwq6/ IypfiwfWG/Tp3V3V3fprXWcTOiG8wMQw0D9vg/S0/6PEHXVKX3ipNqIayhMLoOYu Xu4cVLPhVOLErEmeaEqqblyx20httt0Ie4mVav20tTVs3tpKQgvmEtxKT2iCW31X bpWQUViPMnbRL52XT34sKXpHvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQPhU5S ndheIcDGCroySWXggz6KMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDgKQpGbTuw0PPZwQUhiowF3iQEGGhJTdVhapp0GnTOzvhlzvTjfQx Yi+A0upL0xodqBNsYDgqhTaPxLokZdnhd0+Nm9QkYl/51whP4JPWl7hHSllb0gka xcRC3ha9lhSQxgXywX4eXV0mw91HXXeTqlSGC8ZaYr4R2838N3bct3XX+hQV6eiY p+KuD/Z6HAgXXfCBf+wqRqzdYqudIy+UHWJqN0ALJJcnWR5xjKFGJZnJeQL36yZb UtiMOExlP+Z5WhJnoFu0SUNoXqc541MZoRBvGG5LsnvDO1buV2FlrsQqTFi5tdFT w6RObYauMuEgPSToghXU+GqPLs/Cxq0s -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:20 2025 by rpki-client