$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: 9TnC/DkYEfV0BbLDMXN6kt1eaGCCD1JLmgh0qYAvwWk= Subject key identifier: E5:8E:9A:3B:B3:8C:CC:E4:7E:9D:E1:A8:9E:7B:AB:8F:8A:4C:5C:17 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 348C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 347C Signing time: Sat 12 Apr 2025 14:53:43 +0000 Manifest this update: Sat 12 Apr 2025 14:53:42 +0000 Manifest next update: Sat 19 Apr 2025 14:53:42 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: +wZ837p8qnBZ25uNJihXycDlujYYgkbg2emXaQfyQS0=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13452 (0x348c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Apr 12 14:53:42 2025 GMT Not After : Apr 19 14:53:42 2025 GMT Subject: CN=67fa7e77-ce72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:e2:4f:9f:40:2f:bc:77:ac:72:c0:04:02: b9:f0:ae:e0:54:46:bc:cb:c1:87:4a:94:ac:a8:46: 39:68:82:67:a1:e6:e2:fc:63:0d:45:a5:74:32:23: e6:3c:3e:68:ea:03:2d:5c:b8:e4:6e:2c:b8:22:31: fc:76:26:bb:cb:26:06:41:11:89:ed:c0:64:28:94: 68:df:1b:dd:a0:27:3a:a1:85:64:1d:89:f2:04:b5: 5b:d2:49:46:95:c9:7e:32:41:e4:a3:61:30:d2:4c: 90:da:2d:c0:b6:49:f8:b3:ba:8e:00:5c:04:06:6c: e1:45:56:d5:ab:35:bf:1f:2c:51:e0:04:d0:cf:5e: 3a:4d:29:33:48:66:6f:62:a1:f8:b3:6e:3b:78:ac: 37:8f:59:21:24:22:90:da:fc:49:6d:7d:35:a4:f1: bf:6f:ff:3d:1c:09:2e:9c:b0:be:b0:7d:95:e6:a3: a1:7b:74:2e:f0:3c:3e:8d:96:f0:87:1c:bb:c0:19: aa:e9:da:32:62:4e:41:10:6e:ae:f9:53:28:a7:6d: 64:dd:ca:e3:5d:b3:45:3b:a9:b0:7f:c4:20:c0:02: 62:e3:d6:a5:11:57:f6:d1:b8:f4:cf:94:ea:c5:7c: ad:e7:32:6c:af:3b:7b:f8:c3:46:47:9d:d9:c7:75: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8E:9A:3B:B3:8C:CC:E4:7E:9D:E1:A8:9E:7B:AB:8F:8A:4C:5C:17 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9a:cd:da:73:7a:78:b6:8c:e1:0a:03:1b:d6:cc:c4:94:6f: 63:3c:88:e1:28:f9:83:2b:08:31:99:97:eb:ad:85:37:28:c1: 30:86:5c:40:da:78:46:8f:23:d7:32:3b:17:cc:24:8a:b2:5c: f8:97:2e:10:66:a6:da:94:18:0b:28:35:f5:7a:b6:b0:d6:93: 09:e5:c8:a1:6e:84:dd:df:2a:f2:ac:55:65:2a:3a:b9:0b:7e: 4c:8e:03:bd:20:1d:a1:62:a0:b8:ae:7f:f4:b5:b4:7d:33:02: 87:e4:0f:2f:be:75:6a:a1:a9:e8:78:90:36:95:49:02:05:80: 4c:94:70:83:5c:80:47:84:7a:6d:c9:ae:22:17:ad:af:26:fa: 6b:fe:f3:7e:c3:9a:66:cc:ac:e6:38:1d:12:73:26:27:e1:12: 4f:83:04:de:30:2e:3e:5b:d1:bd:3c:51:06:db:91:7e:ba:a0: ec:d2:0f:bc:58:66:83:09:7a:2f:d5:87:94:40:f8:bb:df:d7: d1:f5:97:90:43:64:56:ec:16:23:70:56:df:21:f6:c6:e1:32: e4:db:72:f4:3a:3b:39:3e:63:46:1b:41:d9:b3:7a:69:04:9f: f1:ce:6c:fa:1f:e5:29:90:73:7b:50:c4:66:37:a2:b0:0a:42: 62:d0:f8:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwNDEyMTQ1MzQyWhcNMjUwNDE5MTQ1MzQyWjAYMRYwFAYD VQQDEw02N2ZhN2U3Ny1jZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0k7iT59AL7x3rHLABAK58K7gVEa8y8GHSpSsqEY5aIJnoebi/GMNRaV0MiPm PD5o6gMtXLjkbiy4IjH8dia7yyYGQRGJ7cBkKJRo3xvdoCc6oYVkHYnyBLVb0klG lcl+MkHko2Ew0kyQ2i3Atkn4s7qOAFwEBmzhRVbVqzW/HyxR4ATQz146TSkzSGZv YqH4s247eKw3j1khJCKQ2vxJbX01pPG/b/89HAkunLC+sH2V5qOhe3Qu8Dw+jZbw hxy7wBmq6doyYk5BEG6u+VMop21k3crjXbNFO6mwf8QgwAJi49alEVf20bj0z5Tq xXyt5zJsrzt7+MNGR53Zx3UCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWOmjuz jMzkfp3hqJ57q4+KTFwXMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdms3ac3p4tozhCgMb1szElG9jPIjhKPmDKwgxmZfrrYU3KMEwhlxA 2nhGjyPXMjsXzCSKslz4ly4QZqbalBgLKDX1eraw1pMJ5cihboTd3yryrFVlKjq5 C35MjgO9IB2hYqC4rn/0tbR9MwKH5A8vvnVqoanoeJA2lUkCBYBMlHCDXIBHhHpt ya4iF62vJvpr/vN+w5pmzKzmOB0ScyYn4RJPgwTeMC4+W9G9PFEG25F+uqDs0g+8 WGaDCXov1YeUQPi739fR9ZeQQ2RW7BYjcFbfIfbG4TLk23L0Ojs5PmNGG0HZs3pp BJ/xzmz6H+UpkHN7UMRmN6KwCkJi0Phl -----END CERTIFICATE-----Generated at Sat Apr 12 23:52:55 2025 by rpki-client