$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: hiE1ZGls4bDMbCzmyLcVVF23BBRefxHl33NawUL/zy4= Subject key identifier: 66:80:3A:87:68:32:39:D3:EE:E1:9F:F7:36:47:5C:7C:FB:62:5B:AC Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0C85 Signing time: Sun 20 Apr 2025 18:04:13 +0000 Manifest this update: Sun 20 Apr 2025 18:04:12 +0000 Manifest next update: Sun 27 Apr 2025 18:04:12 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: 5BwQ2Oxe2d2BpVC2VS1m8bRaYXfWzxTEvH2DID7rZhY=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Apr 20 18:04:12 2025 GMT Not After : Apr 27 18:04:12 2025 GMT Subject: CN=6805371d-b558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:3d:17:dc:20:e5:81:b6:2e:e1:62:17:06: 9e:84:c6:79:81:31:77:21:dc:51:e4:83:9c:86:18: c2:69:1c:e6:15:4e:2c:78:ab:36:c9:0d:1a:22:1b: 22:d7:4e:6d:a3:6e:84:7b:bf:0e:80:20:f0:ad:65: 2b:71:9e:ac:aa:ce:56:71:6a:c0:b3:fb:81:b8:eb: a2:5d:1b:0e:ea:3f:08:a3:b6:2b:b4:b8:22:95:68: ec:83:23:80:29:1c:f4:6d:22:f3:07:ab:39:cb:a6: 96:25:77:4c:fb:24:b9:f1:fe:4a:c2:da:c7:e4:00: d3:c2:6a:bc:2b:f5:81:6b:b0:cd:ec:29:a4:ee:85: 7d:39:82:4e:b4:7c:b2:49:a3:e4:32:9d:80:11:b2: 54:b8:a6:a1:bc:21:07:17:7d:ba:ad:e6:b4:07:d8: 61:0f:57:8f:d0:03:21:33:5f:6d:ad:d4:6e:94:76: 35:19:8a:3d:9e:5e:8c:73:60:9f:cf:fa:29:02:3b: 60:ad:98:ce:33:3c:41:0a:bb:a7:97:96:7c:09:37: 26:00:4b:08:0b:65:6f:48:85:12:e5:eb:80:19:21: 8c:8a:9f:1c:56:c8:fa:21:96:a9:59:21:57:72:d6: 02:ae:b7:d0:ef:90:eb:37:bf:5c:0f:7d:80:f8:04: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:80:3A:87:68:32:39:D3:EE:E1:9F:F7:36:47:5C:7C:FB:62:5B:AC X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f8:bb:09:b7:f5:63:42:e4:8f:cb:2b:d6:6f:80:24:50:2e: 9d:35:ef:13:3f:c9:ed:ee:d1:99:66:49:02:e3:ce:d8:b5:c8: 0f:45:3f:5b:ef:62:a4:cd:d6:1b:3e:85:85:d0:5e:fa:f1:b3: 46:af:12:fc:71:33:2e:d1:0a:f7:99:10:00:d6:12:30:9a:1e: b9:49:a1:c0:e9:ba:fe:67:ee:e9:e8:4b:f9:4f:ba:ac:83:89: 44:e3:44:8d:73:3c:0e:3c:45:6f:63:0f:34:8f:7c:87:9c:15: ae:7e:52:c1:a0:e4:71:e1:6e:91:58:11:46:f9:8c:46:c6:bb: c5:45:70:b7:a7:4c:dd:d1:7a:41:ec:64:2e:f3:4f:91:27:3f: 8f:01:4f:67:58:52:4a:42:86:22:2d:ef:cc:08:de:b3:8f:b8: 9d:cc:13:67:a4:7c:ae:e4:2a:38:59:93:1f:be:b6:ba:3e:43: 05:e4:70:d4:8a:f8:97:7d:d8:7f:a8:76:e6:c0:ac:e6:07:84: 97:71:93:1f:e1:3e:72:9b:cc:53:e9:78:d6:b5:6d:dc:37:c8: e2:3f:6b:e7:6a:13:47:15:50:d6:f3:52:fa:aa:b3:ba:08:51: 46:91:dd:44:29:d8:99:d1:2f:b7:ab:f6:91:e8:b9:85:60:a3: 88:b0:1e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjUwNDIwMTgwNDEyWhcNMjUwNDI3MTgwNDEyWjAYMRYwFAYD VQQDEw02ODA1MzcxZC1iNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZI9F9wg5YG2LuFiFwaehMZ5gTF3IdxR5IOchhjCaRzmFU4seKs2yQ0aIhsi 105to26Ee78OgCDwrWUrcZ6sqs5WcWrAs/uBuOuiXRsO6j8Io7YrtLgilWjsgyOA KRz0bSLzB6s5y6aWJXdM+yS58f5KwtrH5ADTwmq8K/WBa7DN7Cmk7oV9OYJOtHyy SaPkMp2AEbJUuKahvCEHF326rea0B9hhD1eP0AMhM19trdRulHY1GYo9nl6Mc2Cf z/opAjtgrZjOMzxBCrunl5Z8CTcmAEsIC2VvSIUS5euAGSGMip8cVsj6IZapWSFX ctYCrrfQ75DrN79cD32A+AS8ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaAOodo MjnT7uGf9zZHXHz7YlusMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW+LsJt/VjQuSPyyvWb4AkUC6dNe8TP8nt7tGZZkkC487YtcgPRT9b 72KkzdYbPoWF0F768bNGrxL8cTMu0Qr3mRAA1hIwmh65SaHA6br+Z+7p6Ev5T7qs g4lE40SNczwOPEVvYw80j3yHnBWuflLBoORx4W6RWBFG+YxGxrvFRXC3p0zd0XpB 7GQu80+RJz+PAU9nWFJKQoYiLe/MCN6zj7idzBNnpHyu5Co4WZMfvra6PkMF5HDU iviXfdh/qHbmwKzmB4SXcZMf4T5ym8xT6XjWtW3cN8jiP2vnahNHFVDW81L6qrO6 CFFGkd1EKdiZ0S+3q/aR6LmFYKOIsB48 -----END CERTIFICATE-----Generated at Tue Apr 22 19:39:24 2025 by rpki-client