$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: gIY/URai/uDLiIrC3AerY8tTQ97+AeaO+q1TSKSBfH8= Subject key identifier: 7A:9A:FA:6A:CB:C5:E4:7A:CA:E9:EF:7F:38:E1:F5:1D:19:4B:0C:08 Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 09EB Signing time: Fri 04 Apr 2025 20:02:54 +0000 Manifest this update: Fri 04 Apr 2025 20:02:54 +0000 Manifest next update: Fri 11 Apr 2025 20:02:54 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: OYDJB8Ywnf0dAbLXG3xghecnwi64zwENwez0tYVupiM=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C Validity Not Before: Apr 4 20:02:54 2025 GMT Not After : Apr 11 20:02:54 2025 GMT Subject: CN=67f03aee-88ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:7c:36:13:57:94:bf:c7:3c:73:18:e2:66: 2c:67:8c:2e:19:6a:33:8e:9a:ff:9d:22:5e:48:45: 56:7b:a4:36:7e:f8:e9:52:6f:c4:78:a7:1d:09:66: 0a:b8:fd:a9:a8:d6:b5:d9:6e:af:93:b9:69:50:4a: ee:38:3f:02:29:79:d0:a9:b6:cc:77:12:ec:49:b5: 9d:f9:7e:b2:05:ce:35:f3:be:27:4d:e2:8b:a4:96: 2e:52:52:0b:43:fb:0e:2c:53:5d:99:6e:23:79:3e: c8:df:b5:70:67:e3:45:42:d6:37:4d:34:da:f6:cd: f8:21:8f:d0:7f:5a:73:83:ee:0c:7f:5b:a7:c9:85: df:3b:e8:f8:5b:6b:d6:f1:1e:10:e3:ce:c3:2f:7b: e5:6d:11:79:be:6e:71:a8:fd:ca:d2:4b:df:6b:10: 97:8b:cc:e5:22:ee:5c:22:ff:a7:7f:5b:e7:ff:37: b5:37:ec:12:09:5e:07:77:ff:3a:d6:b7:54:f2:2f: a2:0b:4b:62:e0:2e:35:9a:35:46:bf:96:49:f4:93: 68:56:df:3a:c1:ec:29:1a:a8:fb:64:04:6a:67:ac: 66:ab:5d:2c:dd:84:6f:12:3f:34:de:5b:2c:16:2e: 90:90:3d:00:49:56:b5:88:71:a2:9b:8c:59:ac:91: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:FA:6A:CB:C5:E4:7A:CA:E9:EF:7F:38:E1:F5:1D:19:4B:0C:08 X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:f9:62:3d:ff:7f:d8:a2:6a:b8:ba:09:1b:2b:d0:f0:cb:c9: f9:87:4d:5e:16:7e:49:b0:26:51:56:58:8e:0b:2e:98:15:ad: f9:41:13:6d:b1:47:6e:00:ab:74:86:08:fa:e6:28:ae:22:30: 1e:81:73:5d:f1:0a:9f:76:25:5f:5c:12:e4:73:2c:18:2f:5b: 89:3f:62:16:be:20:23:39:f2:97:f7:8d:d0:b3:b6:4f:c2:5f: 8b:25:ea:e2:05:1e:06:2d:b4:98:67:49:fe:c7:1d:ff:df:e3: c6:22:00:ef:e7:c9:c4:0b:4f:a2:df:23:7e:78:d7:73:28:74: f7:fe:be:c2:99:62:8d:77:e1:40:ae:4d:6e:57:15:8e:65:39: a1:71:84:7a:dc:1e:95:35:c8:08:b1:ac:e1:4a:49:17:83:96: 3f:b9:4c:28:32:f4:f0:be:21:6f:09:de:c7:fa:04:d4:d4:11: 8b:ee:66:e8:d7:0b:47:67:54:17:fb:ca:df:7b:df:4e:f7:63: 6e:b8:e6:f8:41:b5:cd:72:2f:46:cf:f2:27:f6:59:30:d0:74: b1:14:b8:f4:f1:1e:a2:ff:b9:e1:58:b9:6c:5c:c7:81:d0:50: cd:0f:c1:fc:cb:d4:73:55:3a:5f:11:78:29:1a:7e:5a:41:7c: 15:f2:31:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjUwNDA0MjAwMjU0WhcNMjUwNDExMjAwMjU0WjAYMRYwFAYD VQQDEw02N2YwM2FlZS04OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45t8NhNXlL/HPHMY4mYsZ4wuGWozjpr/nSJeSEVWe6Q2fvjpUm/EeKcdCWYK uP2pqNa12W6vk7lpUEruOD8CKXnQqbbMdxLsSbWd+X6yBc41874nTeKLpJYuUlIL Q/sOLFNdmW4jeT7I37VwZ+NFQtY3TTTa9s34IY/Qf1pzg+4Mf1unyYXfO+j4W2vW 8R4Q487DL3vlbRF5vm5xqP3K0kvfaxCXi8zlIu5cIv+nf1vn/ze1N+wSCV4Hd/86 1rdU8i+iC0ti4C41mjVGv5ZJ9JNoVt86wewpGqj7ZARqZ6xmq10s3YRvEj803lss Fi6QkD0ASVa1iHGim4xZrJE94QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqa+mrL xeR6yunvfzjh9R0ZSwwIMB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP+WI9/3/Yomq4ugkbK9Dwy8n5h01eFn5JsCZRVliOCy6YFa35QRNt sUduAKt0hgj65iiuIjAegXNd8QqfdiVfXBLkcywYL1uJP2IWviAjOfKX943Qs7ZP wl+LJeriBR4GLbSYZ0n+xx3/3+PGIgDv58nEC0+i3yN+eNdzKHT3/r7CmWKNd+FA rk1uVxWOZTmhcYR63B6VNcgIsazhSkkXg5Y/uUwoMvTwviFvCd7H+gTU1BGL7mbo 1wtHZ1QX+8rfe99O92NuuOb4QbXNci9Gz/In9lkw0HSxFLj08R6i/7nhWLlsXMeB 0FDND8H8y9RzVTpfEXgpGn5aQXwV8jFt -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:36 2025 by rpki-client