$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json) Hash identifier: 3JtECxegz+mRMFA+VPVK4ONrydcfRehOrGTfgvPxbbw= Subject key identifier: F7:B3:CA:71:5E:B3:2A:1D:A6:E4:3B:F4:DF:E9:D4:73:54:7C:69:26 Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft Manifest number: 070B Signing time: Thu 24 Apr 2025 21:42:09 +0000 Manifest this update: Thu 24 Apr 2025 21:42:09 +0000 Manifest next update: Thu 01 May 2025 21:42:09 +0000 Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: ZP5EGrKXG6v8P6rRjGApdFk9ciJe6oZtq3SMkA8GhZU=) 2: E9573898390E11EBAC72036BC4F9AE02.roa (hash: 4/D7OWEWvpNqKmmHeJpyUpKKKiBuiIw+IrPZ5+9nq6A=) 3: E9E53D64390E11EBAC72036BC4F9AE02.roa (hash: /vqrkkBMkYSu1OpGYGktQRyNIb8KIlTV2u6tTj1RSqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: Apr 24 21:42:09 2025 GMT Not After : May 1 21:42:09 2025 GMT Subject: CN=680ab031-b93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:37:be:3d:cb:e6:8d:a7:42:73:77:98:50: a0:12:54:0c:dd:d3:d7:3e:dd:64:bf:24:a8:9d:c2: fa:bc:e7:06:9f:53:19:91:f6:16:fa:a2:bb:f8:63: 1c:8d:f5:50:d0:51:9e:62:2e:73:a1:ee:af:71:2d: 55:7e:79:72:e0:d8:5d:e7:a7:34:24:e5:7f:1f:37: e8:66:05:e3:42:75:20:cb:23:5f:ca:1f:ac:cf:65: 51:a3:c0:35:5f:35:5d:58:c3:6c:fe:11:61:4b:8c: ab:31:c6:12:8b:fe:49:09:62:89:de:7a:60:38:1a: a7:32:d8:38:6c:e5:fc:19:86:05:e6:e1:d0:0b:37: de:2c:68:b4:bd:f9:fd:ab:a6:24:21:14:f8:da:0f: f4:24:02:b9:4d:90:ac:b5:ba:35:d8:cd:45:ef:e0: a2:2e:9d:f8:28:ae:db:b0:4f:e1:e1:82:ba:d5:4f: a5:61:fd:e6:c1:85:96:f9:51:5a:a7:d3:b7:2a:82: e1:c9:52:29:11:26:7d:3b:6e:ba:48:ae:a1:b9:f4: a6:e9:92:ba:0b:83:18:2a:08:a5:15:67:27:82:83: e9:9d:10:e2:5c:8f:d7:59:a1:4f:76:4c:5c:09:b4: ee:f7:7c:87:19:da:e0:6a:2c:f4:96:79:19:b0:29: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B3:CA:71:5E:B3:2A:1D:A6:E4:3B:F4:DF:E9:D4:73:54:7C:69:26 X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:bd:68:fa:6f:53:a3:2e:46:e7:af:11:59:68:0a:cf:55:d1: bd:2d:df:f3:98:c2:a5:7a:bc:df:3e:4e:ae:a0:41:50:ca:bf: a8:c7:ba:6b:91:d5:7a:d3:88:6d:a1:fd:57:8d:73:4f:70:43: 67:14:d3:84:64:29:f5:f7:11:10:b9:8a:85:4a:31:90:bf:f6: 4f:03:9c:a6:c9:0f:39:2e:2b:16:e2:4a:8a:aa:1e:c8:78:d1: 79:8e:0c:0f:a7:62:1a:c0:94:a7:3c:fc:34:2a:9f:f6:f2:f1: 47:60:8d:ec:f4:c9:64:ff:90:6c:98:46:8f:19:8a:9c:03:62: ff:68:f9:6d:f2:cc:1a:0a:c4:53:c8:b5:e3:5e:3e:bf:39:21: b0:d9:fc:86:ac:4c:df:17:6b:32:ee:dc:fd:8f:6f:50:58:f3: 59:42:36:37:39:9b:1c:54:c8:09:51:f9:ee:5f:ce:db:84:9b: 82:5f:06:af:5d:f3:8f:fe:89:55:64:ab:b8:de:3b:81:55:00: 2a:8c:05:a5:1f:1b:74:59:71:b5:47:d8:fe:00:8a:e7:da:e1: e3:95:3a:3b:0f:85:28:f5:4e:58:8a:64:88:17:69:aa:00:4c: 1e:aa:ec:67:0d:7c:ee:b4:fb:c6:cc:bc:b5:d8:91:12:5a:cb: 43:af:4a:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjUwNDI0MjE0MjA5WhcNMjUwNTAxMjE0MjA5WjAYMRYwFAYD VQQDEw02ODBhYjAzMS1iOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM03vj3L5o2nQnN3mFCgElQM3dPXPt1kvySoncL6vOcGn1MZkfYW+qK7+GMc jfVQ0FGeYi5zoe6vcS1Vfnly4Nhd56c0JOV/HzfoZgXjQnUgyyNfyh+sz2VRo8A1 XzVdWMNs/hFhS4yrMcYSi/5JCWKJ3npgOBqnMtg4bOX8GYYF5uHQCzfeLGi0vfn9 q6YkIRT42g/0JAK5TZCstbo12M1F7+CiLp34KK7bsE/h4YK61U+lYf3mwYWW+VFa p9O3KoLhyVIpESZ9O266SK6hufSm6ZK6C4MYKgilFWcngoPpnRDiXI/XWaFPdkxc CbTu93yHGdrgaiz0lnkZsClH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPezynFe syodpuQ79N/p1HNUfGkmMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmvWj6b1OjLkbnrxFZaArPVdG9Ld/zmMKlerzfPk6uoEFQyr+ox7pr kdV604htof1XjXNPcENnFNOEZCn19xEQuYqFSjGQv/ZPA5ymyQ85LisW4kqKqh7I eNF5jgwPp2IawJSnPPw0Kp/28vFHYI3s9Mlk/5BsmEaPGYqcA2L/aPlt8swaCsRT yLXjXj6/OSGw2fyGrEzfF2sy7tz9j29QWPNZQjY3OZscVMgJUfnuX87bhJuCXwav XfOP/olVZKu43juBVQAqjAWlHxt0WXG1R9j+AIrn2uHjlTo7D4Uo9U5YimSIF2mq AEwequxnDXzutPvGzLy12JESWstDr0qq -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:01 2025 by rpki-client