$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json) Hash identifier: YpM9jOTcoYA80OG2RKs7udxoAWpbviRdZsBxNn2A5ow= Subject key identifier: 76:5B:F3:D9:50:AA:A2:DA:C5:C0:32:C5:F4:46:D3:FE:B9:01:43:D6 Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft Manifest number: 17 Signing time: Sat 05 Apr 2025 07:15:30 +0000 Manifest this update: Sat 05 Apr 2025 07:15:29 +0000 Manifest next update: Sat 12 Apr 2025 07:15:29 +0000 Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: Ql2NfxaGpZtrU9N5yrWc5iS5byeb4qxGva755TpMV4Y=) 2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: cI8Rp+uDdJ361Bt2iDuipm5XRt6w/fm/O6/Pc4tHNDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91466E8 Validity Not Before: Apr 5 07:15:29 2025 GMT Not After : Apr 12 07:15:29 2025 GMT Subject: CN=67f0d892-57ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:86:33:c6:cb:1d:17:0a:81:cf:b2:7d:c6: 01:13:be:a5:b1:0e:47:d3:89:22:25:fa:9e:54:26: 58:19:be:e0:53:cb:3f:2c:5a:85:98:58:af:10:f9: 88:2c:d8:9f:24:fd:2b:ba:ea:76:fc:5e:f3:eb:92: b7:fb:b1:5e:af:3b:62:c5:34:ab:f3:df:2c:17:32: 81:21:27:84:5a:b4:d8:a4:5a:8c:4d:1c:99:1a:68: e7:68:88:13:b3:e8:69:bc:c2:b6:c8:04:69:ed:3d: de:a4:70:64:f7:cb:89:45:83:0e:88:51:1c:46:a5: c8:fa:0e:e5:13:d0:bb:b6:79:61:ec:67:fc:b6:70: b6:28:d6:03:ab:60:a9:81:16:1e:e3:5a:13:9f:2d: 0a:ce:6a:02:92:7b:97:70:5d:e3:10:9f:f3:c8:cb: 4c:5f:15:4f:8e:46:c1:f1:44:5c:33:09:5f:a2:c7: 82:4e:5a:f3:0a:f3:5e:a0:4c:98:0b:36:a6:92:b3: b4:89:e1:38:31:4b:8b:72:8e:3f:26:c8:81:40:c9: 00:93:7a:1a:9b:fd:f6:a0:20:a0:68:46:d7:12:97: 20:dd:ab:2d:60:cb:f1:20:de:a2:4c:85:46:8c:f2: c8:a0:4a:4f:3d:6e:ad:67:e5:63:fe:57:1c:29:35: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5B:F3:D9:50:AA:A2:DA:C5:C0:32:C5:F4:46:D3:FE:B9:01:43:D6 X509v3 Authority Key Identifier: keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e0:8d:37:f5:b1:b1:77:f2:94:08:75:57:0c:7c:e3:ac:a7: 28:d4:4c:e2:2e:62:e5:0f:61:e0:97:04:9f:b6:16:f8:80:32: 75:32:41:2c:8f:00:d8:a0:f2:e1:ad:1a:a9:24:9d:89:27:b3: aa:30:15:5f:8e:70:3d:a1:22:cd:fe:3d:66:ea:4d:e3:88:4f: 50:25:84:e5:b5:d3:73:96:6d:5b:7a:9b:20:c0:2a:1c:7c:e5: 62:c0:cd:95:bf:d8:5e:34:72:da:7e:2f:0c:0b:69:4b:eb:45: 91:88:6f:b5:4d:41:ff:51:4d:6d:7f:2a:8d:3b:8a:d3:d9:b7: 4a:0e:93:c4:4c:b6:44:db:5b:bc:ce:7b:6a:c9:cf:63:7e:11: 85:ee:2b:90:89:31:7d:78:75:0f:3a:9b:e3:78:a1:e9:ca:0d: 19:a0:1f:6d:94:7b:cd:1b:45:9f:ac:6e:7b:8a:e2:ab:b6:24: 77:ca:1a:31:63:c1:36:5e:a3:77:3e:a9:48:ee:83:bc:f1:6e: 5f:ed:73:ea:d2:b2:c1:87:e8:2e:c9:88:04:ce:9d:5c:ef:16: 9b:b6:d2:96:25:8d:3a:9f:a8:bc:bf:3c:30:c7:c0:73:ea:c2: f5:c6:47:54:b9:19:13:30:5d:b8:cb:d9:fc:9a:17:fd:37:b6: aa:f0:fc:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjZFODExMC8GA1UEBRMoNEMyMjEyMUFERkFFM0Y1NzUyODAxNjUxNTFDM0ZEMzBF M0FBRkQwMTAeFw0yNTA0MDUwNzE1MjlaFw0yNTA0MTIwNzE1MjlaMBgxFjAUBgNV BAMTDTY3ZjBkODkyLTU3ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPloYzxssdFwqBz7J9xgETvqWxDkfTiSIl+p5UJlgZvuBTyz8sWoWYWK8Q+Ygs 2J8k/Su66nb8XvPrkrf7sV6vO2LFNKvz3ywXMoEhJ4RatNikWoxNHJkaaOdoiBOz 6Gm8wrbIBGntPd6kcGT3y4lFgw6IURxGpcj6DuUT0Lu2eWHsZ/y2cLYo1gOrYKmB Fh7jWhOfLQrOagKSe5dwXeMQn/PIy0xfFU+ORsHxRFwzCV+ix4JOWvMK816gTJgL NqaSs7SJ4TgxS4tyjj8myIFAyQCTehqb/fagIKBoRtcSlyDdqy1gy/Eg3qJMhUaM 8sigSk89bq1n5WP+VxwpNSs3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdlvz2VCq otrFwDLF9EbT/rkBQ9YwHwYDVR0jBBgwFoAUTCISGt+uP1dSgBZRUcP9MOOq/QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2NkU4L0Q4Mzg4RDM0RjNG QzExRUY5MjZDRTYzMEM0RjlBRTAyL1RDSVNHdC11UDFkU2dCWlJVY1A5TU9PcV9R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVENJU0d0LXVQMWRTZ0JaUlVjUDlNT09xX1FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 NkU4L0Q4Mzg4RDM0RjNGQzExRUY5MjZDRTYzMEM0RjlBRTAyL1RDSVNHdC11UDFk U2dCWlJVY1A5TU9PcV9RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7gjTf1sbF38pQIdVcMfOOspyjUTOIuYuUPYeCXBJ+2FviAMnUyQSyP ANig8uGtGqkknYkns6owFV+OcD2hIs3+PWbqTeOIT1AlhOW103OWbVt6myDAKhx8 5WLAzZW/2F40ctp+LwwLaUvrRZGIb7VNQf9RTW1/Ko07itPZt0oOk8RMtkTbW7zO e2rJz2N+EYXuK5CJMX14dQ86m+N4oenKDRmgH22Ue80bRZ+sbnuK4qu2JHfKGjFj wTZeo3c+qUjug7zxbl/tc+rSssGH6C7JiATOnVzvFpu20pYljTqfqLy/PDDHwHPq wvXGR1S5GRMwXbjL2fyaF/03tqrw/JM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:35:32 2025 by rpki-client