$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json) Hash identifier: TEOMegWIKaFS7Mfz5Dsp5jUgE9Ye3H39YHyKo53lGKk= Subject key identifier: 96:29:03:D5:62:95:84:E8:E3:E4:F7:B3:05:87:A5:D8:2B:C4:85:74 Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft Manifest number: 23 Signing time: Fri 25 Apr 2025 06:51:41 +0000 Manifest this update: Fri 25 Apr 2025 06:51:40 +0000 Manifest next update: Fri 02 May 2025 06:51:40 +0000 Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: jMjuE3SpXXZH2Qk6MSpVHfFgWlfx5Seo49Tw/k7HmMc=) 2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA Validity Not Before: Apr 25 06:51:40 2025 GMT Not After : May 2 06:51:40 2025 GMT Subject: CN=680b30fc-aae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:78:9c:9e:56:0e:2f:5a:ce:be:8b:61:4a: 94:9b:b7:2e:f4:7f:fa:65:9f:7a:61:38:68:c9:c3: e6:c4:1f:87:37:51:63:25:bb:ed:82:e6:10:94:af: 36:a3:50:c0:54:84:ce:cd:75:35:63:3d:39:06:7f: 2b:d9:cd:79:d8:fa:4a:18:0d:b4:a7:f3:8f:41:0d: 38:c0:ef:d6:3d:d3:71:97:6d:d5:0d:a4:8b:8d:59: 47:32:26:6a:03:5a:a6:0d:09:33:bf:62:41:d8:1e: 92:be:06:90:0f:0e:c4:0c:fc:69:d4:38:e0:70:c2: 5c:1e:a6:c7:3f:2b:37:c7:88:1f:13:19:86:d4:94: bf:57:3d:13:53:7a:2c:87:db:0c:11:33:77:06:af: 44:f1:e5:eb:78:74:50:0d:9d:25:e6:69:64:db:03: b8:d6:89:18:1a:1f:68:69:bd:f7:08:9c:b5:9b:2f: 91:4c:f3:67:59:dc:9a:ca:01:44:93:e1:ba:d4:3b: a4:60:ed:1d:c0:95:01:65:6d:81:1d:54:f4:dc:61: f3:b4:cf:6c:bc:c8:57:0c:63:e9:95:e0:b3:45:02: b7:f6:f2:09:7f:63:b5:01:ba:1b:2e:d4:c2:a5:bb: 94:5b:a0:a0:56:e7:76:3d:9b:cb:ea:b6:00:fc:9b: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:29:03:D5:62:95:84:E8:E3:E4:F7:B3:05:87:A5:D8:2B:C4:85:74 X509v3 Authority Key Identifier: keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:de:30:b5:c2:b0:33:bc:c3:be:71:17:28:c3:f7:3e:ef:3d: 8f:e3:84:64:12:fa:e1:84:22:f8:ca:94:74:38:21:f4:ac:84: 08:d6:4d:18:96:36:dc:ca:1c:87:f7:20:b5:de:50:41:e5:32: 67:36:67:95:dd:20:1c:b5:a3:f7:6b:4e:39:b3:e9:eb:4d:96: dd:53:4a:19:d5:6d:59:78:00:65:d4:db:fe:9e:f2:e6:91:6f: a6:53:ba:69:b7:09:73:0e:18:6c:9f:f1:93:9b:14:37:00:19: 18:b1:51:7f:e0:1f:c9:54:cb:77:b6:c2:ff:a4:5d:2a:a1:a8: 8e:40:ac:95:d5:de:a7:8e:f2:4c:5b:05:bc:50:35:b1:36:65: b7:07:1c:03:3d:21:59:7d:3a:6e:26:13:ee:35:80:51:2d:6b: d0:c1:ff:20:a1:ef:9c:9b:2a:26:7b:89:f1:6b:56:43:0f:0f: 1d:0e:49:62:07:00:e2:3e:8b:82:c8:4e:a7:61:01:c3:e9:84: b2:bf:aa:fd:81:95:df:ad:f2:eb:55:de:45:70:4a:9d:d2:19: 79:70:08:ec:6b:7e:32:f6:ae:d7:b0:fb:41:da:e1:f0:22:52: d3:5b:b1:15:02:45:b8:5d:13:42:ef:94:a7:ad:4b:7a:55:c8: 80:c6:ec:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNEU2OEIwNDhERDNEREJBNUY0NzhGMUZEMjg4QTg2MThC QTlGQUJBQTAeFw0yNTA0MjUwNjUxNDBaFw0yNTA1MDIwNjUxNDBaMBgxFjAUBgNV BAMTDTY4MGIzMGZjLWFhZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7u3icnlYOL1rOvothSpSbty70f/pln3phOGjJw+bEH4c3UWMlu+2C5hCUrzaj UMBUhM7NdTVjPTkGfyvZzXnY+koYDbSn849BDTjA79Y903GXbdUNpIuNWUcyJmoD WqYNCTO/YkHYHpK+BpAPDsQM/GnUOOBwwlwepsc/KzfHiB8TGYbUlL9XPRNTeiyH 2wwRM3cGr0Tx5et4dFANnSXmaWTbA7jWiRgaH2hpvfcInLWbL5FM82dZ3JrKAUST 4brUO6Rg7R3AlQFlbYEdVPTcYfO0z2y8yFcMY+mV4LNFArf28gl/Y7UBuhsu1MKl u5RboKBW53Y9m8vqtgD8mwV3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlikD1WKV hOjj5PezBYel2CvEhXQwHwYDVR0jBBgwFoAUTmiwSN0926X0ePH9KIqGGLqfq6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzNDQjc3OUUwRjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG1pd1NOMDkyNlgwZVBIOUtJcUdHTHFmcTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzNDQjc3OUUwRjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZY MGVQSDlLSXFHR0xxZnE2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDeMLXCsDO8w75xFyjD9z7vPY/jhGQS+uGEIvjKlHQ4IfSshAjWTRiW NtzKHIf3ILXeUEHlMmc2Z5XdIBy1o/drTjmz6etNlt1TShnVbVl4AGXU2/6e8uaR b6ZTumm3CXMOGGyf8ZObFDcAGRixUX/gH8lUy3e2wv+kXSqhqI5ArJXV3qeO8kxb BbxQNbE2ZbcHHAM9IVl9Om4mE+41gFEta9DB/yCh75ybKiZ7ifFrVkMPDx0OSWIH AOI+i4LITqdhAcPphLK/qv2Bld+t8utV3kVwSp3SGXlwCOxrfjL2rtew+0Ha4fAi UtNbsRUCRbhdE0LvlKetS3pVyIDG7NI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:50 2025 by rpki-client