$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: KGvF5C25pMGupu4FWLbH06ryYWDyI9ekEm8MJXee8zc= Subject key identifier: 9F:7D:0E:D5:5F:4A:A0:17:B0:A9:19:34:24:C9:08:17:B7:C4:F7:CF Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 022D Signing time: Mon 07 Apr 2025 01:33:16 +0000 Manifest this update: Mon 07 Apr 2025 01:33:15 +0000 Manifest next update: Mon 14 Apr 2025 01:33:15 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: 5OkIvBh20O11Mm9RFKfuhpXfXiLH5XJSJr3fkrtURaU=) 2: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 01:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7 Validity Not Before: Apr 7 01:33:15 2025 GMT Not After : Apr 14 01:33:15 2025 GMT Subject: CN=67f32b5c-ea87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:10:ad:42:18:46:5f:1c:85:a3:07:1b:fc: bd:7d:c3:10:80:7d:d9:2a:75:ca:2b:97:8a:e7:0d: 3f:82:ad:25:66:db:4c:b3:f3:3d:5d:66:a1:03:69: 72:49:48:8f:0f:b0:42:54:9f:0d:8f:f9:ba:c6:e6: 98:f8:88:a3:52:fd:0c:b2:8d:6c:47:66:38:0b:9a: 78:98:dc:58:d0:31:d5:4f:b2:24:8c:c6:e4:0b:36: 82:6d:53:fa:4f:bf:8e:86:3f:48:49:c6:8b:50:2a: 3c:ce:c0:36:d0:31:35:44:a8:03:b7:d8:16:c7:ed: 83:ab:bc:6c:26:79:c6:73:5a:3b:7b:44:fc:9a:b3: 10:17:3c:d3:27:21:a2:de:46:6f:07:b9:4b:4a:f2: e2:4c:15:87:8c:e9:68:94:9c:23:46:f4:90:44:ca: 25:83:83:f4:e2:fa:56:cb:63:17:5e:75:fa:91:9b: 08:60:08:7a:11:bd:0e:6d:e3:0f:ca:83:cb:34:e5: 1f:ad:96:8a:db:09:a8:37:9b:5f:38:2f:d7:0c:05: b7:fe:ef:cf:9c:c3:8e:4c:98:1c:01:d4:bb:cd:70: ea:73:d8:97:79:5d:ce:50:6f:1e:e2:84:f4:60:3b: 8e:ca:00:05:44:78:87:d1:53:e1:aa:92:5f:f2:20: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7D:0E:D5:5F:4A:A0:17:B0:A9:19:34:24:C9:08:17:B7:C4:F7:CF X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c6:b6:a2:dd:d7:ea:c3:ed:ec:93:0d:22:89:c1:39:7c:28: 81:6e:43:ae:69:50:ae:40:f1:b7:ba:58:39:79:ed:40:8c:e6: b4:b5:e3:ca:1f:92:80:a8:9a:12:77:56:5b:38:f5:5d:fa:ed: a7:e2:e5:40:28:ef:7d:64:07:12:82:66:21:bf:a4:a5:5d:0b: 96:9d:be:c3:14:9d:fd:97:27:a1:5f:9a:b0:0d:08:89:e4:e3: d4:55:15:47:fc:5f:6c:99:ab:3f:2f:cf:c7:60:10:f4:ed:2c: 71:1f:a6:5d:81:46:e8:35:fd:ff:37:fa:a9:54:02:25:f5:4f: d8:8a:c1:87:83:8a:14:11:89:0e:d2:89:33:05:2d:2b:a3:5b: 03:e8:1d:62:da:ad:f9:23:b9:ef:26:bb:24:99:8e:85:97:2c: 40:bd:cc:3e:2c:b0:01:91:80:19:a3:d1:2b:78:c8:cb:64:9f: c8:64:95:a9:00:19:91:43:97:5a:35:4d:ce:86:e1:ea:a4:56: 39:ef:fd:af:46:23:6f:d2:72:7c:4b:a2:0b:ad:88:55:41:1b: 4b:ef:d0:d6:b3:47:a6:16:89:a6:8d:aa:3f:15:96:83:6b:0e: 58:25:51:5d:cb:91:a3:04:5f:96:c2:cf:6a:a7:82:5e:b2:ae: a8:1b:72:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjUwNDA3MDEzMzE1WhcNMjUwNDE0MDEzMzE1WjAYMRYwFAYD VQQDEw02N2YzMmI1Yy1lYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy8QrUIYRl8chaMHG/y9fcMQgH3ZKnXKK5eK5w0/gq0lZttMs/M9XWahA2ly SUiPD7BCVJ8Nj/m6xuaY+IijUv0Mso1sR2Y4C5p4mNxY0DHVT7IkjMbkCzaCbVP6 T7+Ohj9IScaLUCo8zsA20DE1RKgDt9gWx+2Dq7xsJnnGc1o7e0T8mrMQFzzTJyGi 3kZvB7lLSvLiTBWHjOlolJwjRvSQRMolg4P04vpWy2MXXnX6kZsIYAh6Eb0ObeMP yoPLNOUfrZaK2wmoN5tfOC/XDAW3/u/PnMOOTJgcAdS7zXDqc9iXeV3OUG8e4oT0 YDuOygAFRHiH0VPhqpJf8iCVgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ99DtVf SqAXsKkZNCTJCBe3xPfPMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOxrai3dfqw+3skw0iicE5fCiBbkOuaVCuQPG3ulg5ee1AjOa0tePK H5KAqJoSd1ZbOPVd+u2n4uVAKO99ZAcSgmYhv6SlXQuWnb7DFJ39lyehX5qwDQiJ 5OPUVRVH/F9smas/L8/HYBD07SxxH6ZdgUboNf3/N/qpVAIl9U/YisGHg4oUEYkO 0okzBS0ro1sD6B1i2q35I7nvJrskmY6FlyxAvcw+LLABkYAZo9EreMjLZJ/IZJWp ABmRQ5daNU3OhuHqpFY57/2vRiNv0nJ8S6ILrYhVQRtL79DWs0emFommjao/FZaD aw5YJVFdy5GjBF+Wws9qp4Jesq6oG3IK -----END CERTIFICATE-----Generated at Mon Apr 7 04:52:30 2025 by rpki-client