$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: qiHqS+Zq42b5T+OQ4DS1jLPRTlPv3s4fngBFwjT21ak= Subject key identifier: 0B:4B:40:7B:7F:45:84:B2:BE:FB:7C:9C:E1:C7:90:06:1F:25:C3:97 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 0730 Signing time: Thu 10 Apr 2025 21:41:42 +0000 Manifest this update: Thu 10 Apr 2025 21:41:41 +0000 Manifest next update: Thu 17 Apr 2025 21:41:41 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: o1TpXwxl90Byhb7oq9TOIgjoCPoeKBB6AAvKEZ9ySGU=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: l0d5U/HukOAxqR+/ThmuC5REmFDut/5BnvDM1762AlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Apr 10 21:41:41 2025 GMT Not After : Apr 17 21:41:41 2025 GMT Subject: CN=67f83b15-6bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:79:33:21:a2:c5:8a:d3:c0:6a:13:f8:fb: d8:a2:45:22:ad:d8:39:d4:cb:17:f8:81:1d:15:86: 00:f4:1a:08:f7:0d:c0:07:c3:bd:c3:8f:9a:16:ca: 33:77:38:73:a3:83:f0:2c:13:b0:2d:90:4b:8c:7a: dd:2a:64:5e:37:08:c5:33:0e:eb:94:b1:3a:06:e4: aa:89:d9:bb:c7:1f:de:99:f4:33:00:b5:cb:37:8a: ea:3f:bc:71:17:1f:32:46:6d:d7:59:a0:83:4a:6c: e6:84:71:da:d5:40:c9:22:3c:04:54:b5:81:0f:95: 76:07:73:9b:d9:0f:1e:46:7d:70:df:21:d7:91:93: f1:58:da:f0:03:d6:ea:91:bc:d0:aa:32:17:0f:ea: 67:68:8f:c3:f6:83:2e:27:2c:05:fb:f2:a9:a4:ab: 54:59:14:01:f5:62:c8:6c:ab:40:d3:3a:31:74:38: ce:81:ce:6a:16:77:0b:3a:5d:45:02:4a:0f:34:ee: d9:cc:13:59:d3:83:5b:9b:07:6b:e8:e1:48:21:c5: 46:3a:c2:a0:6d:69:9d:e0:28:7d:14:b0:51:07:b8: 4c:e1:02:63:41:17:2c:b2:5b:1f:93:d5:f4:62:a3: 17:73:72:f3:b8:03:c5:ad:5a:ee:10:81:70:bc:87: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4B:40:7B:7F:45:84:B2:BE:FB:7C:9C:E1:C7:90:06:1F:25:C3:97 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:6a:6f:1c:a5:ac:f5:74:b7:d1:22:c6:47:e3:8f:2b:c9:61: f8:01:d2:17:68:12:be:8d:3c:9f:00:2f:b0:cd:d6:dd:04:4a: 26:06:fe:97:ed:16:52:f1:37:16:6c:46:7b:fa:ec:3e:fd:dc: 40:46:2d:44:4f:5a:28:70:b7:80:7f:96:40:35:f8:b6:c5:7c: 81:8d:35:71:bf:52:a8:98:69:70:ca:05:53:3d:55:72:4e:78: 79:12:b9:68:7a:0f:72:61:f0:df:f8:bd:11:8a:21:af:50:71: 54:18:7c:a4:60:bc:3a:58:10:98:1c:01:17:0c:6f:c6:55:0b: a9:5a:20:c4:d0:53:43:d1:0f:76:d3:49:56:0c:e4:4c:75:13: a3:72:e5:07:9e:be:da:88:76:d2:96:4c:a0:ba:8f:d1:88:92: ae:9b:4e:2b:20:09:2a:78:93:c7:b6:72:e3:99:c7:93:95:2f: fe:6b:a1:f6:4b:d5:e2:39:c7:9b:84:6c:05:2c:4f:77:66:7a: eb:67:56:bf:bd:cf:db:ad:7e:aa:ff:17:e1:33:53:4c:dc:85: 6f:fb:48:14:17:47:6b:69:9a:5e:16:ed:d2:1c:51:f2:6f:14: 56:97:89:b3:a5:fa:be:0f:e6:f5:f3:94:21:20:d0:13:19:05: 48:b1:45:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjUwNDEwMjE0MTQxWhcNMjUwNDE3MjE0MTQxWjAYMRYwFAYD VQQDEw02N2Y4M2IxNS02YmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR55MyGixYrTwGoT+PvYokUirdg51MsX+IEdFYYA9BoI9w3AB8O9w4+aFsoz dzhzo4PwLBOwLZBLjHrdKmReNwjFMw7rlLE6BuSqidm7xx/emfQzALXLN4rqP7xx Fx8yRm3XWaCDSmzmhHHa1UDJIjwEVLWBD5V2B3Ob2Q8eRn1w3yHXkZPxWNrwA9bq kbzQqjIXD+pnaI/D9oMuJywF+/KppKtUWRQB9WLIbKtA0zoxdDjOgc5qFncLOl1F AkoPNO7ZzBNZ04Nbmwdr6OFIIcVGOsKgbWmd4Ch9FLBRB7hM4QJjQRcsslsfk9X0 YqMXc3LzuAPFrVruEIFwvIeZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtLQHt/ RYSyvvt8nOHHkAYfJcOXMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUam8cpaz1dLfRIsZH448ryWH4AdIXaBK+jTyfAC+wzdbdBEomBv6X 7RZS8TcWbEZ7+uw+/dxARi1ET1oocLeAf5ZANfi2xXyBjTVxv1KomGlwygVTPVVy Tnh5Erloeg9yYfDf+L0RiiGvUHFUGHykYLw6WBCYHAEXDG/GVQupWiDE0FND0Q92 00lWDORMdROjcuUHnr7aiHbSlkyguo/RiJKum04rIAkqeJPHtnLjmceTlS/+a6H2 S9XiOcebhGwFLE93ZnrrZ1a/vc/brX6q/xfhM1NM3IVv+0gUF0draZpeFu3SHFHy bxRWl4mzpfq+D+b185QhINATGQVIsUWN -----END CERTIFICATE-----Generated at Sat Apr 12 16:24:37 2025 by rpki-client