$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: XagejjiPqv7BHV3ezkWKIZgswSvsH5IFKJXcN/mpAlQ= Subject key identifier: EF:1E:BF:10:C6:A4:31:94:2F:6C:B5:12:70:30:8B:C9:C4:33:9B:2E Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 05A3 Signing time: Wed 16 Apr 2025 22:50:48 +0000 Manifest this update: Wed 16 Apr 2025 22:50:48 +0000 Manifest next update: Wed 23 Apr 2025 22:50:48 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: rRRCat90YNvTg9a58+N1/VrEgAnKG+aiITHA8OlNQI4=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: RVfGnSNi7Gc2NDwMnGvANcouUDMPNtTfLB5zmPwCbz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 22:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Apr 16 22:50:48 2025 GMT Not After : Apr 23 22:50:48 2025 GMT Subject: CN=68003448-822d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:82:28:ee:dd:8e:a7:72:4a:ed:ef:21:e2: 67:e9:83:53:d9:4f:d3:ee:1e:02:c9:4b:ac:28:26: 11:cd:ac:8e:08:85:e6:f5:24:45:03:72:23:a1:9a: 4c:a8:4e:0d:9e:83:3a:52:0c:b1:cd:16:b7:17:94: 22:ec:dd:c6:a3:32:ae:e9:92:47:3b:d7:91:d1:88: bb:5b:d3:11:5d:39:5e:68:7e:09:9c:e6:32:bd:8e: 8c:23:2b:00:c8:75:f5:53:2f:b4:6f:11:c9:48:45: 14:ba:bb:70:15:81:87:e3:54:00:d9:a5:d5:65:41: 0c:99:4d:7d:5d:0b:8c:bd:75:70:7b:4b:99:4d:6a: 77:d8:f6:85:0e:f9:89:b9:ae:57:b2:89:f9:40:cf: a2:ab:de:5c:9a:c9:e5:0c:bc:c4:af:36:98:e0:61: ce:bc:13:c4:b9:b9:23:14:1f:5b:22:33:aa:dc:05: 8f:dc:11:07:89:12:c9:1c:be:54:c1:6a:26:80:7d: c6:60:0f:ba:b1:fb:a4:1e:84:a0:9d:9a:a8:d8:9a: da:00:59:7f:b4:30:64:94:0d:7f:fe:af:fc:20:25: 13:8f:8a:1a:fd:91:8a:ef:15:a1:f9:10:b2:96:3f: 33:c5:bf:12:0e:cd:9c:6b:b2:ec:bb:5e:8e:0e:bf: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1E:BF:10:C6:A4:31:94:2F:6C:B5:12:70:30:8B:C9:C4:33:9B:2E X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c0:e1:08:71:1c:7a:68:33:85:68:c4:e4:e7:80:15:5a:3a: 54:5a:4f:fc:6e:d5:6f:bb:d6:b8:d9:27:05:63:04:f2:3c:6c: 35:b6:8c:8c:b4:ff:6d:7c:2f:6c:1e:e2:9d:45:97:83:36:06: 68:71:83:bd:21:94:25:bb:42:5f:5d:9b:0c:46:78:bf:16:21: b4:aa:45:d6:15:55:0a:55:9a:50:f7:0b:19:9b:16:74:ae:df: 11:5b:a4:61:cb:3a:65:10:2b:de:4d:af:16:6a:85:bf:dc:26: 95:e0:b9:96:7b:45:53:87:43:4a:e9:83:96:61:ee:69:08:4f: a3:f8:54:fd:e8:7d:12:73:d5:31:6b:a8:e9:92:86:dd:5a:74: 1b:f9:3f:0f:b8:89:67:25:4e:bb:1c:4e:e6:7e:bd:91:82:e8: 24:2b:22:99:67:0b:03:10:a6:d3:28:4e:68:b0:0b:94:82:e4: 9c:ae:a3:16:8e:23:b3:92:49:a1:9a:d3:f8:ac:51:47:bc:2f: 01:c8:cb:1a:a8:79:cc:f4:2e:2a:37:5c:ff:2d:64:62:5e:16: 3c:7f:76:c8:2f:66:c7:99:3e:c5:cf:49:92:e0:34:31:be:f0: ba:36:15:79:b5:2a:08:b7:07:7b:01:4a:86:53:4e:84:e0:10: 39:9a:fc:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUwNDE2MjI1MDQ4WhcNMjUwNDIzMjI1MDQ4WjAYMRYwFAYD VQQDEw02ODAwMzQ0OC04MjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV6CKO7djqdySu3vIeJn6YNT2U/T7h4CyUusKCYRzayOCIXm9SRFA3IjoZpM qE4NnoM6UgyxzRa3F5Qi7N3GozKu6ZJHO9eR0Yi7W9MRXTleaH4JnOYyvY6MIysA yHX1Uy+0bxHJSEUUurtwFYGH41QA2aXVZUEMmU19XQuMvXVwe0uZTWp32PaFDvmJ ua5Xson5QM+iq95cmsnlDLzErzaY4GHOvBPEubkjFB9bIjOq3AWP3BEHiRLJHL5U wWomgH3GYA+6sfukHoSgnZqo2JraAFl/tDBklA1//q/8ICUTj4oa/ZGK7xWh+RCy lj8zxb8SDs2ca7Lsu16ODr/XYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8evxDG pDGUL2y1EnAwi8nEM5suMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlwOEIcRx6aDOFaMTk54AVWjpUWk/8btVvu9a42ScFYwTyPGw1toyM tP9tfC9sHuKdRZeDNgZocYO9IZQlu0JfXZsMRni/FiG0qkXWFVUKVZpQ9wsZmxZ0 rt8RW6RhyzplECveTa8WaoW/3CaV4LmWe0VTh0NK6YOWYe5pCE+j+FT96H0Sc9Ux a6jpkobdWnQb+T8PuIlnJU67HE7mfr2RgugkKyKZZwsDEKbTKE5osAuUguScrqMW jiOzkkmhmtP4rFFHvC8ByMsaqHnM9C4qN1z/LWRiXhY8f3bIL2bHmT7Fz0mS4DQx vvC6NhV5tSoItwd7AUqGU06E4BA5mvyf -----END CERTIFICATE-----Generated at Fri Apr 18 21:06:00 2025 by rpki-client