$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft File: TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft (raw, json) Hash identifier: vhrNfMBcESGAGz7oGZyp2BehErXVUzuxRm5AKtggbZQ= Subject key identifier: A5:9F:71:7F:4A:E2:A0:3D:AA:5E:E5:D6:5D:47:E5:7A:F8:33:7E:3D Authority key identifier: 4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE Certificate issuer: /CN=A912BE49/serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE Certificate serial: 1AD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft Manifest number: 1ABF Signing time: Fri 04 Apr 2025 16:22:30 +0000 Manifest this update: Fri 04 Apr 2025 16:22:30 +0000 Manifest next update: Fri 11 Apr 2025 16:22:30 +0000 Files and hashes: 1: TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl (hash: 4xStB44kMnOi+JoXsXEDcSM3gkVPizhOyzTfcJmFAZE=) 2: BF3B175867E811E9ABCD3663C4F9AE02.roa (hash: CDqJA1l2Ft8VQvZ3aTnQLhFYZjqUpyc1KrNz8ugEy2g=) 3: BE3E903C67E811E9ABCD3663C4F9AE02.roa (hash: ulosbB6PQg/itOLlwpZC8IHr9zDYLOCMEdSYMNOI5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6867 (0x1ad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE49 Validity Not Before: Apr 4 16:22:30 2025 GMT Not After : Apr 11 16:22:30 2025 GMT Subject: CN=67f00746-7e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:e7:d9:c6:27:21:4e:7f:30:db:1b:a7:7f: 7b:e6:4b:9d:0a:f2:f3:b3:35:fc:53:4b:8c:f8:4c: 69:98:14:ad:e2:25:a3:90:24:fd:d1:2e:fd:9f:63: f7:45:b1:04:99:78:48:e8:b4:67:fa:6d:01:b2:f0: b1:60:8a:82:25:f7:61:8a:19:1a:47:8a:00:1c:a0: e0:35:b8:68:9c:f6:41:b1:32:41:4a:b6:40:28:4d: 8d:c4:7e:fc:a8:eb:94:90:31:b6:18:ca:91:87:fb: a6:3e:57:12:3c:66:e5:36:8b:5d:8a:9b:51:a0:d7: e5:ef:2f:99:7f:27:46:e1:d6:85:13:b4:a2:5f:86: 30:85:91:82:c6:dc:d2:f6:e3:d1:54:c3:ab:bd:ce: e5:db:e5:12:f5:dc:cd:65:44:aa:74:e3:75:9e:d1: 37:47:e7:cb:7b:71:d7:74:af:cc:bc:b8:1c:8f:7f: 8c:c4:9a:d5:6c:60:50:b9:12:91:94:56:b4:e4:6f: e2:c0:aa:02:ff:14:0f:76:37:e4:cf:b0:09:53:d8: 4d:76:cc:5c:57:f6:b2:8e:6f:47:6e:f5:2a:68:7b: 96:97:b7:5d:20:70:1a:e2:aa:ba:0d:48:18:b9:41: e5:05:92:35:ce:e9:ec:11:27:7b:cb:bb:83:15:54: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9F:71:7F:4A:E2:A0:3D:AA:5E:E5:D6:5D:47:E5:7A:F8:33:7E:3D X509v3 Authority Key Identifier: keyid:4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:1b:70:c5:24:38:25:ff:ab:fe:bd:bb:b8:07:92:3f:0d:4d: a9:2d:d9:0b:d0:20:03:97:d1:bf:3a:11:7e:1c:0d:1b:07:ab: 98:42:5d:d9:2e:ca:31:80:9a:cd:7a:8d:fa:c8:58:03:43:f6: 74:df:b4:f1:96:c1:7a:3a:b2:eb:8b:8a:df:96:96:f0:ff:42: 12:a1:fc:57:f8:0f:e9:98:00:2c:24:2e:62:06:4b:c7:50:86: f3:0e:be:84:cc:e7:de:b5:c1:e3:20:9e:e5:8f:38:49:1b:b3: d8:cd:4a:2f:7a:18:2c:77:5b:5f:8e:a8:9c:30:bb:c9:e1:0e: ac:6b:45:c8:aa:7f:50:b7:87:29:e7:b1:30:55:1c:b7:94:4b: df:04:66:cf:e9:87:b7:66:ae:c5:e8:09:af:7e:5b:fc:5f:19: ce:02:d7:7a:41:79:7e:6a:ad:7f:c4:5e:7a:77:26:6b:f2:99: 50:a9:df:7f:e1:e4:78:d4:07:72:c3:48:85:55:c6:1a:69:db: 99:73:28:15:c0:08:51:ed:96:00:a1:6b:61:52:8e:b0:60:71: 9d:61:9f:d9:a1:55:86:4e:a9:05:2d:63:cb:7a:2e:fd:54:a2: 92:d6:0e:62:dd:e4:b7:3a:d2:dd:71:88:f3:21:51:a5:98:d7: b2:a7:7f:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNDkxMTAvBgNVBAUTKDRGMTc4MkU5OTU2NEMyOEEzNkVFREMxOUY5NzNEMUQ5 Mjc0NzgxRkUwHhcNMjUwNDA0MTYyMjMwWhcNMjUwNDExMTYyMjMwWjAYMRYwFAYD VQQDEw02N2YwMDc0Ni03ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrvn2cYnIU5/MNsbp3975kudCvLzszX8U0uM+ExpmBSt4iWjkCT90S79n2P3 RbEEmXhI6LRn+m0BsvCxYIqCJfdhihkaR4oAHKDgNbhonPZBsTJBSrZAKE2NxH78 qOuUkDG2GMqRh/umPlcSPGblNotdiptRoNfl7y+ZfydG4daFE7SiX4YwhZGCxtzS 9uPRVMOrvc7l2+US9dzNZUSqdON1ntE3R+fLe3HXdK/MvLgcj3+MxJrVbGBQuRKR lFa05G/iwKoC/xQPdjfkz7AJU9hNdsxcV/ayjm9HbvUqaHuWl7ddIHAa4qq6DUgY uUHlBZI1zunsESd7y7uDFVR2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWfcX9K 4qA9ql7l1l1H5Xr4M349MB8GA1UdIwQYMBaAFE8XgumVZMKKNu7cGflz0dknR4H+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0OS9DM0M4QjlGQTI4 Q0IxMUU3OUJFNDMwMzZDNEY5QUUwMi9UeGVDNlpWa3dvbzI3dHdaLVhQUjJTZEhn ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R4ZUM2WlZrd29vMjd0d1otWFBSMlNkSGdmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0OS9DM0M4QjlGQTI4Q0IxMUU3OUJFNDMwMzZDNEY5QUUwMi9UeGVDNlpWa3dv bzI3dHdaLVhQUjJTZEhnZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGG3DFJDgl/6v+vbu4B5I/DU2pLdkL0CADl9G/OhF+HA0bB6uYQl3Z LsoxgJrNeo36yFgDQ/Z037TxlsF6OrLri4rflpbw/0ISofxX+A/pmAAsJC5iBkvH UIbzDr6EzOfetcHjIJ7ljzhJG7PYzUovehgsd1tfjqicMLvJ4Q6sa0XIqn9Qt4cp 57EwVRy3lEvfBGbP6Ye3Zq7F6Amvflv8XxnOAtd6QXl+aq1/xF56dyZr8plQqd9/ 4eR41Adyw0iFVcYaaduZcygVwAhR7ZYAoWthUo6wYHGdYZ/ZoVWGTqkFLWPLei79 VKKS1g5i3eS3OtLdcYjzIVGlmNeyp384 -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:20 2025 by rpki-client