$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: u9r48KSj4RFhoTfpCh2BanN1bhsMPJ5QnlzB8oloPS8= Subject key identifier: 61:36:80:4B:F7:80:CC:3B:CE:A6:F8:59:8E:B2:DB:94:88:34:53:71 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 27DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 27C7 Signing time: Thu 24 Apr 2025 15:38:26 +0000 Manifest this update: Thu 24 Apr 2025 15:38:25 +0000 Manifest next update: Thu 01 May 2025 15:38:25 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: c2rsPOVm8ItlxuHHI+WKGGhhmUwHQH6ySvThStolLho=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10205 (0x27dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Apr 24 15:38:25 2025 GMT Not After : May 1 15:38:25 2025 GMT Subject: CN=680a5af1-7daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:b7:cc:01:ed:54:58:b0:01:7a:8e:d1:ca: e6:30:3d:6b:3d:c5:ce:04:7f:2d:d1:df:6f:b9:7b: 7e:10:11:5d:c2:e9:2c:2c:fe:f3:d5:15:76:d8:e6: 3c:c8:90:68:3a:6f:f3:53:c3:97:9b:d1:58:1a:1c: 40:32:e0:ef:1e:73:bf:e7:88:21:46:ee:d7:92:c8: 7a:89:3a:14:1a:6b:d8:6a:a6:4a:60:b1:c2:af:c8: a1:af:1a:f1:2a:60:5f:ab:1b:b4:c2:d7:69:5a:47: e0:e5:31:73:52:5a:84:9d:22:0a:95:79:c2:cf:33: 83:b0:aa:0f:9e:e3:4f:26:a6:47:8f:eb:73:65:56: 58:5b:04:1e:e5:4a:52:df:fc:06:6f:a9:49:0e:05: c2:50:f2:a1:27:2d:de:5b:dd:d3:12:6a:8b:f4:9e: 34:c8:60:2b:c2:6f:17:21:4b:dc:46:73:6b:d5:e6: 6e:09:5b:2c:fd:0f:b0:71:c7:6d:56:60:bd:da:93: f9:e6:d5:25:59:b6:af:56:dd:9c:8f:23:91:80:03: b6:dc:34:9a:c3:2b:b7:21:06:f8:74:5d:91:13:a5: 75:91:12:87:11:87:2f:4e:7e:0f:d5:fb:8a:5a:f7: ad:c3:df:36:b4:12:f7:07:2b:c9:a6:02:fc:54:60: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:80:4B:F7:80:CC:3B:CE:A6:F8:59:8E:B2:DB:94:88:34:53:71 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:e3:35:a1:49:fb:f8:4c:ca:28:ce:23:6d:bd:59:2f:41: bd:ef:96:5b:69:4f:3c:61:d8:50:2d:c4:50:d4:c0:e2:5b:ca: 05:95:bc:8a:e5:eb:e2:02:be:49:ff:46:26:06:82:0b:5e:9a: 82:ef:1d:97:56:7d:f1:58:54:61:95:8e:c6:45:ea:09:cb:73: 4d:47:1a:df:6b:26:65:65:f5:ed:d1:44:81:ba:c7:30:1a:95: 68:50:b6:77:3e:84:94:1b:a1:92:1e:00:98:43:f7:a2:0a:e5: 11:b8:7b:b0:40:ec:db:34:d4:cd:56:4d:97:6c:b9:e1:98:8b: 3a:96:d1:23:60:18:83:28:b5:05:f0:30:73:f3:c0:86:3b:61: 52:0b:84:a5:c3:9f:c1:ac:1b:b9:cd:51:6b:36:68:9c:09:b7: 47:97:a1:a7:3c:01:46:d3:91:8c:dd:c7:a2:9c:a3:4f:82:a6: e0:cd:2b:39:08:87:c3:b5:c1:54:aa:eb:9b:b5:49:84:6f:c6: f8:e6:e4:e2:0b:4b:b7:7a:50:03:96:d5:5b:ca:8c:31:a7:02: 98:fb:c2:8e:83:1c:f2:50:d2:de:08:23:56:c9:66:eb:64:f2: 7c:8d:82:17:c5:93:3e:c5:60:b0:a7:6c:10:4c:55:b0:9f:ab: 04:3c:b0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUwNDI0MTUzODI1WhcNMjUwNTAxMTUzODI1WjAYMRYwFAYD VQQDEw02ODBhNWFmMS03ZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M23zAHtVFiwAXqO0crmMD1rPcXOBH8t0d9vuXt+EBFdwuksLP7z1RV22OY8 yJBoOm/zU8OXm9FYGhxAMuDvHnO/54ghRu7Xksh6iToUGmvYaqZKYLHCr8ihrxrx KmBfqxu0wtdpWkfg5TFzUlqEnSIKlXnCzzODsKoPnuNPJqZHj+tzZVZYWwQe5UpS 3/wGb6lJDgXCUPKhJy3eW93TEmqL9J40yGArwm8XIUvcRnNr1eZuCVss/Q+wccdt VmC92pP55tUlWbavVt2cjyORgAO23DSawyu3IQb4dF2RE6V1kRKHEYcvTn4P1fuK Wvetw982tBL3ByvJpgL8VGB8eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE2gEv3 gMw7zqb4WY6y25SINFNxMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAL+M1oUn7+EzKKM4jbb1ZL0G975ZbaU88YdhQLcRQ1MDiW8oFlbyK 5eviAr5J/0YmBoILXpqC7x2XVn3xWFRhlY7GReoJy3NNRxrfayZlZfXt0USBuscw GpVoULZ3PoSUG6GSHgCYQ/eiCuURuHuwQOzbNNTNVk2XbLnhmIs6ltEjYBiDKLUF 8DBz88CGO2FSC4Slw5/BrBu5zVFrNmicCbdHl6GnPAFG05GM3ceinKNPgqbgzSs5 CIfDtcFUquubtUmEb8b45uTiC0u3elADltVbyowxpwKY+8KOgxzyUNLeCCNWyWbr ZPJ8jYIXxZM+xWCwp2wQTFWwn6sEPLCG -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:33 2025 by rpki-client