$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: UVPRxPGg2tGp5Tl51IyETF5s4ck+vTg0YG0cPD917RM= Subject key identifier: 10:B2:96:7B:38:DB:D7:08:02:8E:44:DD:F0:3D:0C:F4:DE:80:E5:0B Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 09EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 18F4 Signing time: Fri 04 Apr 2025 17:45:30 +0000 Manifest this update: Fri 04 Apr 2025 17:45:29 +0000 Manifest next update: Fri 11 Apr 2025 17:45:29 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: YzPX+Zm+idEhQDPqBj27eiYf51xaaZP99/irKQjb228=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2540 (0x9ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C Validity Not Before: Apr 4 17:45:29 2025 GMT Not After : Apr 11 17:45:29 2025 GMT Subject: CN=67f01ab9-1d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:6b:cd:51:b7:bf:d6:49:8c:ad:dd:72:d7: b1:e2:48:21:0a:82:d7:c8:ca:42:ff:c0:b8:b2:0b: fb:3d:f1:1a:36:ac:2e:c9:84:c8:e5:a6:e8:34:12: 0b:60:d0:77:c4:13:fb:5b:40:17:c4:fe:f6:52:86: f8:e1:d7:22:91:ac:b7:b4:99:59:5a:dd:8b:3f:48: b5:bb:b5:68:a1:a4:3c:1a:77:78:b3:e4:d9:a9:6a: 21:92:05:a0:c7:ee:61:36:d7:fb:b1:10:a4:9d:4a: 9a:af:ce:96:37:35:83:a0:db:54:48:c0:4b:a9:82: e4:4f:12:ae:47:4d:91:f3:bd:49:32:41:ff:29:57: 33:26:08:2d:9d:28:5b:ed:c3:ff:2f:23:c2:5f:89: ad:59:f6:fe:2d:c2:ed:fb:aa:f7:de:b3:20:56:41: 90:9a:2a:f2:34:42:8f:2d:1d:19:01:8e:41:3e:87: 57:01:85:21:1b:8d:0f:bb:cc:7f:7c:e4:c7:89:fd: d9:7e:1a:dc:04:f4:a3:6e:44:d7:9d:37:bf:c0:02: d5:80:e8:3f:bd:04:9b:2e:f5:71:ed:33:9d:6e:e6: 27:20:b5:2e:39:58:a5:49:5f:3d:bd:78:d2:7e:ec: 8e:03:d8:1c:2e:4c:db:19:c0:c3:f4:79:16:08:6e: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:96:7B:38:DB:D7:08:02:8E:44:DD:F0:3D:0C:F4:DE:80:E5:0B X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2f:38:11:38:ed:a0:13:88:9c:b4:cd:f1:46:d0:27:91:45: 8e:5a:4a:e4:7a:cd:ce:fc:a1:0e:0c:7f:bf:99:3c:2d:6b:c6: 4c:d0:75:b1:52:76:71:19:2c:6f:fc:c5:c7:06:6b:e7:7c:19: aa:67:ed:be:a1:e7:80:3d:2c:f8:93:26:fa:ae:f6:2e:f2:bf: 77:0f:9e:c2:2b:bd:7a:c9:21:08:06:45:4e:58:6b:b9:9d:7b: bd:d2:73:bd:41:63:48:c2:4f:ff:80:65:1f:4d:66:b3:11:c7: a2:78:74:52:92:c9:a3:f1:4d:c0:1f:86:0c:66:de:45:f7:37: ce:70:8a:a7:59:ba:ff:ee:a3:36:03:39:95:c0:36:e7:18:48: fe:07:d5:c2:0d:14:80:ec:ea:1e:20:61:7e:16:02:2a:f1:8f: 1e:d2:7c:ac:e4:3e:eb:cb:ac:39:98:60:98:1f:fe:60:92:e5: 5c:1b:ef:63:86:e0:aa:2a:35:ff:1c:cd:65:49:13:07:82:61: 81:33:b7:b2:67:f7:c3:d2:0d:ec:a5:09:18:86:84:a5:24:db: 6c:e9:bc:23:25:7f:ce:9e:1c:4c:c2:eb:03:0f:68:c9:db:5a: e5:d3:52:4d:2a:2e:23:ba:df:cc:48:55:5a:53:89:81:7a:24: 90:c6:fd:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwNDA0MTc0NTI5WhcNMjUwNDExMTc0NTI5WjAYMRYwFAYD VQQDEw02N2YwMWFiOS0xZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1RrzVG3v9ZJjK3dctex4kghCoLXyMpC/8C4sgv7PfEaNqwuyYTI5aboNBIL YNB3xBP7W0AXxP72Uob44dcikay3tJlZWt2LP0i1u7VooaQ8Gnd4s+TZqWohkgWg x+5hNtf7sRCknUqar86WNzWDoNtUSMBLqYLkTxKuR02R871JMkH/KVczJggtnShb 7cP/LyPCX4mtWfb+LcLt+6r33rMgVkGQmiryNEKPLR0ZAY5BPodXAYUhG40Pu8x/ fOTHif3ZfhrcBPSjbkTXnTe/wALVgOg/vQSbLvVx7TOdbuYnILUuOVilSV89vXjS fuyOA9gcLkzbGcDD9HkWCG7eewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCylns4 29cIAo5E3fA9DPTegOULMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKLzgROO2gE4ictM3xRtAnkUWOWkrkes3O/KEODH+/mTwta8ZM0HWx UnZxGSxv/MXHBmvnfBmqZ+2+oeeAPSz4kyb6rvYu8r93D57CK716ySEIBkVOWGu5 nXu90nO9QWNIwk//gGUfTWazEceieHRSksmj8U3AH4YMZt5F9zfOcIqnWbr/7qM2 AzmVwDbnGEj+B9XCDRSA7OoeIGF+FgIq8Y8e0nys5D7ry6w5mGCYH/5gkuVcG+9j huCqKjX/HM1lSRMHgmGBM7eyZ/fD0g3spQkYhoSlJNts6bwjJX/OnhxMwusDD2jJ 21rl01JNKi4jut/MSFVaU4mBeiSQxv0e -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:13 2025 by rpki-client