$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: x/vzzFojG9b8KGmlRIaz3bgDy0573SR1ZLM9Jxx6M68= Subject key identifier: ED:86:E6:EC:C6:F2:81:A7:36:D7:F7:BD:0A:18:C2:44:77:32:22:78 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0C2F Signing time: Thu 24 Apr 2025 18:25:42 +0000 Manifest this update: Thu 24 Apr 2025 18:25:41 +0000 Manifest next update: Thu 01 May 2025 18:25:41 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: KR1BXTpx5lGCWAlwdWuEJ3SkdTShIIge5rVIoHYMDUY=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Apr 24 18:25:41 2025 GMT Not After : May 1 18:25:41 2025 GMT Subject: CN=680a8225-c784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:8d:e1:8a:83:ac:5b:67:20:c7:1f:30:f2: 6b:d5:24:d1:02:c3:60:21:84:05:ec:23:c9:71:c6: 19:3f:60:83:60:20:bc:13:71:00:34:b8:a1:54:43: ff:01:66:5b:49:66:fb:f9:a1:8f:b7:ca:94:0c:b5: e8:ce:64:72:6c:94:f5:0d:ad:36:3a:de:74:45:38: fd:f5:c8:fe:19:e4:e9:48:84:79:5d:3c:68:97:07: b9:b1:93:6a:f9:8c:86:c4:7f:a8:43:7d:68:c5:e4: cd:ea:c2:0a:bd:da:2c:49:13:2a:44:b0:d8:ad:49: 5b:b3:e7:c4:24:31:32:77:dd:e2:d7:05:1c:75:14: 0f:a2:8d:9b:98:13:6b:02:9c:cf:71:07:f7:5c:67: 02:8a:5b:cf:e8:5a:ef:1a:81:c3:fc:80:85:f1:a9: 10:6b:03:b7:bd:bb:14:b9:f5:1e:bf:10:67:d5:80: b0:ac:23:0d:85:d6:88:06:22:2f:02:68:5f:d8:8a: 9b:1c:84:39:34:99:7a:af:11:e3:7d:55:bc:e0:07: 1d:dc:63:b8:2c:68:b6:89:b8:2a:2e:c2:5b:b6:57: 44:da:fb:0c:eb:6c:39:74:2c:6e:01:0a:aa:3b:f1: 87:cc:89:5b:9e:37:b3:54:34:f0:82:b3:7f:26:9a: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:86:E6:EC:C6:F2:81:A7:36:D7:F7:BD:0A:18:C2:44:77:32:22:78 X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ec:51:68:86:c5:9f:58:17:e0:84:7b:55:b7:4d:17:01:ee: 14:b0:2e:f1:ec:10:08:c3:99:ad:84:53:1b:d4:98:ca:01:12: 16:ad:cc:ec:29:21:33:e1:1e:55:b6:b5:0e:24:a7:ee:e5:00: d2:a7:90:c2:c9:5a:b0:65:23:c8:fa:47:a3:3d:c9:f8:5b:4e: 19:d1:08:df:27:c1:c1:21:af:91:33:94:dc:20:ac:8b:55:05: 1e:d8:d6:66:df:d5:0f:b1:36:ab:c2:53:4d:e2:80:fa:de:79: fc:e0:23:9a:0a:3b:ca:af:23:7b:34:d9:c8:d5:be:fe:34:35: 52:c2:76:78:2a:55:29:f6:c2:64:b3:a3:c7:5e:c2:f3:b9:b7: d7:f1:42:4b:92:22:32:58:a8:bd:05:ce:5d:dc:64:50:87:32: 8b:b9:58:3f:e3:e1:0b:70:28:66:e9:96:1b:6b:e6:53:61:3d: 06:ff:d4:a1:70:5e:67:8a:8d:0f:40:24:de:a6:9c:6c:5e:76: 79:8f:4a:2f:c8:bc:e4:44:61:33:68:bd:4a:71:63:94:d2:99: 11:3c:7f:f6:f6:e0:b9:3c:08:e6:c9:14:9e:18:d2:41:6e:33: 04:75:25:15:65:0d:aa:50:df:aa:a5:79:cd:d1:db:7b:09:d4: 05:3d:d1:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUwNDI0MTgyNTQxWhcNMjUwNTAxMTgyNTQxWjAYMRYwFAYD VQQDEw02ODBhODIyNS1jNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBCN4YqDrFtnIMcfMPJr1STRAsNgIYQF7CPJccYZP2CDYCC8E3EANLihVEP/ AWZbSWb7+aGPt8qUDLXozmRybJT1Da02Ot50RTj99cj+GeTpSIR5XTxolwe5sZNq +YyGxH+oQ31oxeTN6sIKvdosSRMqRLDYrUlbs+fEJDEyd93i1wUcdRQPoo2bmBNr ApzPcQf3XGcCilvP6FrvGoHD/ICF8akQawO3vbsUufUevxBn1YCwrCMNhdaIBiIv Amhf2IqbHIQ5NJl6rxHjfVW84Acd3GO4LGi2ibgqLsJbtldE2vsM62w5dCxuAQqq O/GHzIlbnjezVDTwgrN/Jpro0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2G5uzG 8oGnNtf3vQoYwkR3MiJ4MB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP7FFohsWfWBfghHtVt00XAe4UsC7x7BAIw5mthFMb1JjKARIWrczs KSEz4R5VtrUOJKfu5QDSp5DCyVqwZSPI+kejPcn4W04Z0QjfJ8HBIa+RM5TcIKyL VQUe2NZm39UPsTarwlNN4oD63nn84COaCjvKryN7NNnI1b7+NDVSwnZ4KlUp9sJk s6PHXsLzubfX8UJLkiIyWKi9Bc5d3GRQhzKLuVg/4+ELcChm6ZYba+ZTYT0G/9Sh cF5nio0PQCTeppxsXnZ5j0ovyLzkRGEzaL1KcWOU0pkRPH/29uC5PAjmyRSeGNJB bjMEdSUVZQ2qUN+qpXnN0dt7CdQFPdHB -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:59 2025 by rpki-client