$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: 0g3v43LGQ5yxkLXoCVcdjnW4QEaFUy4mvTB2YpTFHoQ= Subject key identifier: E8:0F:B8:CA:9E:E2:33:26:BA:3D:6C:5A:86:64:60:B2:31:02:A5:8F Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 04F4 Signing time: Fri 28 Mar 2025 23:59:36 +0000 Manifest this update: Fri 28 Mar 2025 23:59:36 +0000 Manifest next update: Fri 04 Apr 2025 23:59:36 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: 73Hwi4U/1he5i9SVUx5NnYF3g/cYwGq+fffThHoL+7U=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C Validity Not Before: Mar 28 23:59:36 2025 GMT Not After : Apr 4 23:59:36 2025 GMT Subject: CN=67e737e8-5cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:4f:86:cd:8c:87:a9:03:9a:56:62:55:7f: 38:a4:4c:8f:c3:ee:2f:5f:46:80:06:1f:d1:3e:83: 64:9f:3d:7a:43:e8:f2:4d:72:fb:ba:32:0f:d9:37: c8:c5:30:90:cb:41:94:d1:10:ac:3a:aa:c1:97:d5: 3e:43:65:bd:90:0f:d0:3a:68:4c:b2:fa:c6:5d:eb: 47:df:51:56:26:5b:62:67:cc:af:77:ac:f5:68:a4: 37:91:65:bb:d4:54:03:a1:82:e4:f5:0c:23:25:7f: 7f:10:7c:bc:e8:e1:f9:f7:28:ea:f4:67:49:a1:60: 69:aa:f6:d5:e4:9a:ed:12:32:e0:46:06:5c:e8:42: 9d:6a:6a:6b:89:28:9c:c8:0b:36:1d:3d:0a:16:70: e2:07:30:a3:bc:46:ed:ed:36:67:a3:cd:8a:b4:c0: dc:17:08:dd:01:1d:e2:d8:51:5e:f0:9e:33:65:aa: de:25:46:9f:b5:97:b4:97:dc:35:07:1e:57:67:24: 7a:4a:af:12:34:ff:24:b7:31:a8:df:e3:fe:e2:f7: df:86:51:24:60:f4:c9:4c:8f:3a:d6:bf:62:77:c3: d5:a5:c2:18:f3:18:8a:03:cc:28:ff:09:cb:cf:2e: 4a:f1:08:ff:54:29:98:2c:53:a2:ff:b0:e6:84:ac: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0F:B8:CA:9E:E2:33:26:BA:3D:6C:5A:86:64:60:B2:31:02:A5:8F X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:67:c3:bb:02:cc:e3:04:d3:32:05:1b:07:1a:df:d1:ba:6b: 2c:51:4b:7a:b9:d5:25:cb:06:57:ed:92:d9:21:51:92:43:93: 07:b0:17:00:87:56:8a:de:84:4c:8f:38:f9:a2:a5:1e:09:7e: 43:24:07:69:52:c5:0d:7c:51:a9:b1:24:49:7d:92:e9:e8:da: 4c:f2:26:48:06:b3:b9:0f:0c:f3:53:2e:7f:96:52:bc:ca:e6: 60:d2:ed:87:4c:7f:13:16:36:ec:d9:d3:6b:82:f9:29:db:12: 05:c2:85:4a:66:14:fb:99:7a:de:b1:ae:d0:c2:ed:a8:47:76: 65:49:24:ad:45:2b:98:c8:4f:7a:99:62:0e:b9:ff:00:88:d1: 35:f6:3d:2b:5a:5e:ed:86:c5:b1:b4:71:c7:ed:b7:60:cd:34: 20:5a:d6:21:54:82:3c:73:42:ab:2e:32:9c:ae:21:25:c9:25: 5a:f9:24:98:1a:b1:8b:77:a2:11:b3:57:12:68:25:fc:cb:bc: 40:4f:d6:64:d1:d1:d8:34:1b:5b:f6:eb:9f:29:9c:83:6a:c3: ab:5a:0a:63:96:fe:f5:f2:78:33:50:a5:c9:cd:92:a8:db:d8: 35:b4:a8:78:1b:84:6f:f0:07:6d:42:5d:8b:1e:c1:8f:7f:4b: 5a:93:0f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUwMzI4MjM1OTM2WhcNMjUwNDA0MjM1OTM2WjAYMRYwFAYD VQQDEw02N2U3MzdlOC01Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EpPhs2Mh6kDmlZiVX84pEyPw+4vX0aABh/RPoNknz16Q+jyTXL7ujIP2TfI xTCQy0GU0RCsOqrBl9U+Q2W9kA/QOmhMsvrGXetH31FWJltiZ8yvd6z1aKQ3kWW7 1FQDoYLk9QwjJX9/EHy86OH59yjq9GdJoWBpqvbV5JrtEjLgRgZc6EKdampriSic yAs2HT0KFnDiBzCjvEbt7TZno82KtMDcFwjdAR3i2FFe8J4zZareJUaftZe0l9w1 Bx5XZyR6Sq8SNP8ktzGo3+P+4vffhlEkYPTJTI861r9id8PVpcIY8xiKA8wo/wnL zy5K8Qj/VCmYLFOi/7DmhKxtOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgPuMqe 4jMmuj1sWoZkYLIxAqWPMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXZ8O7AszjBNMyBRsHGt/RumssUUt6udUlywZX7ZLZIVGSQ5MHsBcA h1aK3oRMjzj5oqUeCX5DJAdpUsUNfFGpsSRJfZLp6NpM8iZIBrO5DwzzUy5/llK8 yuZg0u2HTH8TFjbs2dNrgvkp2xIFwoVKZhT7mXresa7Qwu2oR3ZlSSStRSuYyE96 mWIOuf8AiNE19j0rWl7thsWxtHHH7bdgzTQgWtYhVII8c0KrLjKcriElySVa+SSY GrGLd6IRs1cSaCX8y7xAT9Zk0dHYNBtb9uufKZyDasOrWgpjlv718ngzUKXJzZKo 29g1tKh4G4Rv8AdtQl2LHsGPf0takw9H -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:55 2025 by rpki-client