$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: e75zdyzJED/zd1ACsP1vTMPYlUH8GhwEt/Ka2Natm5c= Subject key identifier: D6:1A:B8:7E:9D:A5:C0:E6:DA:7D:A2:49:68:9E:FA:8A:D4:C5:6B:9B Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 01B6 Signing time: Sat 05 Apr 2025 02:36:58 +0000 Manifest this update: Sat 05 Apr 2025 02:36:58 +0000 Manifest next update: Sat 12 Apr 2025 02:36:58 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: 4G3KUA3IVGKGoLxz7tnwBdf2sguNgl653kP5F84vtP4=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4 Validity Not Before: Apr 5 02:36:58 2025 GMT Not After : Apr 12 02:36:58 2025 GMT Subject: CN=67f0974a-81fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:b3:d3:91:58:48:9e:48:28:83:d1:1e:a9: 2c:0e:0d:8f:01:06:e6:6f:bb:41:27:2c:23:2f:2f: 93:23:d1:b2:20:9c:79:b5:41:89:3f:93:66:2c:1a: c2:05:4c:9a:f2:c4:d6:76:e2:54:92:e1:ae:ea:2c: f6:94:f8:cd:98:e6:b3:ec:c7:63:d6:d6:29:c5:0b: 42:4e:21:eb:ae:65:76:5e:fc:b2:fa:1b:59:49:1e: 6f:2b:f7:83:52:21:d6:5f:a6:fc:60:e3:a8:07:80: 70:86:80:c4:1b:b3:27:9d:28:c5:a5:cb:f8:40:e6: f7:a2:42:ac:48:81:63:a8:9c:47:1e:b1:03:1c:6c: 7d:e4:05:82:34:4b:50:4f:a9:db:62:25:67:43:e8: b7:ee:ed:b6:82:6d:e0:c1:2e:6c:f8:db:c5:57:fd: cb:73:dd:2b:57:5a:8d:f4:40:67:b8:aa:1e:ec:e6: 1d:ea:df:34:69:23:35:83:5e:a9:f1:05:1c:01:35: 71:62:04:cb:57:93:19:44:c1:62:ad:e6:0c:06:4e: 83:72:fe:cc:d7:ef:8e:a0:99:b7:6c:0b:2d:da:ad: 42:93:14:07:a9:16:6d:70:c9:b0:fd:47:27:09:a4: fc:ca:ca:6f:8d:0b:62:05:b0:34:b3:e4:69:77:2e: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1A:B8:7E:9D:A5:C0:E6:DA:7D:A2:49:68:9E:FA:8A:D4:C5:6B:9B X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:82:41:76:56:1a:c9:45:be:d7:64:b7:67:76:ed:a8:53:cc: b1:6f:7c:d7:b3:c4:c1:80:6b:40:7b:f4:6e:02:dd:7a:8e:7e: 89:02:8d:fb:d3:7b:26:50:06:3d:27:6d:32:94:d6:dd:28:af: 45:c9:e5:c8:a2:60:54:da:01:88:44:38:a6:99:a9:99:69:dc: fd:b0:5d:dc:95:69:79:63:15:d5:ce:a5:95:71:48:97:c7:2e: 34:30:4d:36:15:1c:72:4d:5a:58:cc:1a:74:b0:21:85:98:1f: 78:ac:d4:ea:24:72:53:7d:f7:af:d4:07:06:ed:a5:f2:a4:41: 9c:e4:ea:a3:01:d5:4d:bb:8c:af:54:c3:a5:8d:2d:0d:25:0d: 40:26:91:10:a8:6d:b5:57:d4:56:6f:cf:fc:04:9a:b1:f4:2f: 7d:7f:80:a2:e6:76:59:ec:cc:01:fe:3e:1e:d1:d0:48:87:0e: 99:a1:41:09:81:95:04:34:13:77:86:7e:67:cc:ed:1f:ad:d7: ad:72:6f:58:31:aa:2f:af:53:b2:d5:91:30:21:92:f2:49:4b: 5c:b3:98:88:c7:46:71:0d:9d:75:ec:1b:af:17:7f:42:01:35: 5f:24:f6:5c:a5:37:cb:67:37:d9:78:5a:2e:e5:8d:a7:5b:7d: 61:33:85:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjUwNDA1MDIzNjU4WhcNMjUwNDEyMDIzNjU4WjAYMRYwFAYD VQQDEw02N2YwOTc0YS04MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn92z05FYSJ5IKIPRHqksDg2PAQbmb7tBJywjLy+TI9GyIJx5tUGJP5NmLBrC BUya8sTWduJUkuGu6iz2lPjNmOaz7Mdj1tYpxQtCTiHrrmV2Xvyy+htZSR5vK/eD UiHWX6b8YOOoB4BwhoDEG7MnnSjFpcv4QOb3okKsSIFjqJxHHrEDHGx95AWCNEtQ T6nbYiVnQ+i37u22gm3gwS5s+NvFV/3Lc90rV1qN9EBnuKoe7OYd6t80aSM1g16p 8QUcATVxYgTLV5MZRMFireYMBk6Dcv7M1++OoJm3bAst2q1CkxQHqRZtcMmw/Ucn CaT8yspvjQtiBbA0s+Rpdy5BtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYauH6d pcDm2n2iSWie+orUxWubMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAigkF2VhrJRb7XZLdndu2oU8yxb3zXs8TBgGtAe/RuAt16jn6JAo37 03smUAY9J20ylNbdKK9FyeXIomBU2gGIRDimmamZadz9sF3clWl5YxXVzqWVcUiX xy40ME02FRxyTVpYzBp0sCGFmB94rNTqJHJTffev1AcG7aXypEGc5OqjAdVNu4yv VMOljS0NJQ1AJpEQqG21V9RWb8/8BJqx9C99f4Ci5nZZ7MwB/j4e0dBIhw6ZoUEJ gZUENBN3hn5nzO0frdetcm9YMaovr1Oy1ZEwIZLySUtcs5iIx0ZxDZ117BuvF39C ATVfJPZcpTfLZzfZeFou5Y2nW31hM4X7 -----END CERTIFICATE-----Generated at Sat Apr 5 16:25:20 2025 by rpki-client