$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft File: TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json) Hash identifier: NSiUzXScSZqRUqTNxCOZ287xa2S+lJsZ3yHUgUk/CwM= Subject key identifier: C8:57:5D:CA:03:E0:9A:C5:61:C8:CC:7F:ED:F9:BE:47:44:FB:A5:DB Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft Manifest number: 0593 Signing time: Wed 02 Apr 2025 23:15:09 +0000 Manifest this update: Wed 02 Apr 2025 23:15:08 +0000 Manifest next update: Wed 09 Apr 2025 23:15:08 +0000 Files and hashes: 1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: baquaVIAiTT2fzg/TV72N9/YLzSglBN32izGzrA9x0A=) 2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: nlbZwdmWCR0rCntJsOjXUzxC/iQIDD9NG+5T6R9ZlqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383D8 Validity Not Before: Apr 2 23:15:08 2025 GMT Not After : Apr 9 23:15:08 2025 GMT Subject: CN=67edc4fd-6c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b4:f9:5e:43:26:0d:5d:4c:1a:9a:8d:08:45: 9c:4d:90:2f:7c:d4:52:ed:82:0a:16:50:75:27:4f: 51:ec:c6:3f:c1:ab:ea:75:ac:03:04:54:55:f4:85: fe:fc:64:b3:fc:9d:8d:5c:72:73:b2:f2:73:c8:f9: e3:ab:a9:49:8a:3a:69:e0:a5:36:2c:e0:78:77:80: 8b:17:cc:00:52:99:42:d1:45:94:69:3b:7f:ff:9d: 0f:66:40:15:18:d3:2d:4b:a4:ed:1a:1f:1a:8d:cb: 68:62:eb:b0:2a:8f:b3:e5:49:e1:88:d0:2e:34:ad: bf:f5:fa:7a:6b:4d:02:ae:d4:f1:79:2b:8d:02:e9: df:88:77:88:29:e9:9a:e5:64:b5:fa:a4:b0:b0:4a: 6b:d9:6b:88:98:38:02:38:a1:14:96:52:6d:42:8e: 67:6a:a0:76:1e:1b:e0:c4:e6:38:ce:74:cc:b0:04: c1:63:44:20:8c:56:d5:5e:a6:63:9f:36:06:5a:ee: e2:80:06:96:c0:9e:12:d9:db:99:79:03:b8:63:0b: e0:1c:c2:38:d8:d1:5c:a7:a8:96:57:00:67:ea:74: 81:af:7f:8f:a4:6f:71:e4:0d:f3:e7:cd:1f:ff:0f: 39:d6:64:09:93:03:4a:61:d3:33:f3:e2:f7:fe:8b: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:5D:CA:03:E0:9A:C5:61:C8:CC:7F:ED:F9:BE:47:44:FB:A5:DB X509v3 Authority Key Identifier: keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:92:01:a7:eb:5e:9d:56:b3:d3:ff:af:5b:2f:f1:c4:1e:fc: 3d:f0:f5:89:77:27:66:a6:04:44:3f:23:8b:06:db:88:53:fe: a4:b3:88:44:00:09:b4:35:0f:32:47:d5:b7:7c:52:36:ba:bb: ff:36:1b:b7:57:0b:2d:69:6d:96:3a:fd:a6:e6:e5:76:7a:b3: ef:11:8c:1d:d1:2a:d2:e9:fd:e0:d2:1d:57:cf:35:a0:03:d7: aa:a1:05:9d:d9:e0:7b:57:4d:02:91:aa:77:02:20:19:65:db: 3d:c5:2b:cb:c4:3d:9c:8e:49:64:b3:d1:84:54:ac:94:95:d6: 29:ae:22:1e:69:a7:80:28:99:f3:79:9e:d7:b4:26:7e:0b:1c: 62:ad:ef:89:44:fb:3c:91:cd:59:14:bf:73:d9:72:61:2e:45: 69:8a:44:b9:4d:fb:84:7a:f1:55:d1:65:54:99:82:a2:d3:c7: da:fe:4d:2a:35:4e:33:ab:8e:36:06:e7:87:43:c1:00:5b:ca: 53:a6:9a:7b:9f:d4:78:08:c4:95:8a:39:57:33:af:38:e5:f4: 94:c3:61:b9:9e:28:c6:e3:9a:69:b0:94:94:ea:34:3d:ef:c7: a4:6e:6b:13:e5:f7:c0:64:98:d9:55:db:e3:24:1e:38:6d:98: 8f:12:85:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2 MUYyNDEwNTEwHhcNMjUwNDAyMjMxNTA4WhcNMjUwNDA5MjMxNTA4WjAYMRYwFAYD VQQDEw02N2VkYzRmZC02YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bT5XkMmDV1MGpqNCEWcTZAvfNRS7YIKFlB1J09R7MY/wavqdawDBFRV9IX+ /GSz/J2NXHJzsvJzyPnjq6lJijpp4KU2LOB4d4CLF8wAUplC0UWUaTt//50PZkAV GNMtS6TtGh8ajctoYuuwKo+z5UnhiNAuNK2/9fp6a00CrtTxeSuNAunfiHeIKema 5WS1+qSwsEpr2WuImDgCOKEUllJtQo5naqB2HhvgxOY4znTMsATBY0QgjFbVXqZj nzYGWu7igAaWwJ4S2duZeQO4YwvgHMI42NFcp6iWVwBn6nSBr3+PpG9x5A3z580f /w851mQJkwNKYdMz8+L3/ouSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhXXcoD 4JrFYcjMf+35vkdE+6XbMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5 WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGkgGn616dVrPT/69bL/HEHvw98PWJdydmpgREPyOLBtuIU/6ks4hE AAm0NQ8yR9W3fFI2urv/Nhu3VwstaW2WOv2m5uV2erPvEYwd0SrS6f3g0h1XzzWg A9eqoQWd2eB7V00Ckap3AiAZZds9xSvLxD2cjklks9GEVKyUldYpriIeaaeAKJnz eZ7XtCZ+Cxxire+JRPs8kc1ZFL9z2XJhLkVpikS5TfuEevFV0WVUmYKi08fa/k0q NU4zq442BueHQ8EAW8pTppp7n9R4CMSVijlXM6845fSUw2G5nijG45ppsJSU6jQ9 78ekbmsT5ffAZJjZVdvjJB44bZiPEoVr -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:46 2025 by rpki-client