$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: 7dkRYRD1Bw4Eg9X4iVITD5fHPMcBNNJQeOCwr39iB5o= Subject key identifier: 99:10:9C:1C:E2:61:45:C2:5F:43:93:BA:85:F4:86:30:F2:C6:E2:6D Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 03E3 Signing time: Thu 03 Apr 2025 00:33:20 +0000 Manifest this update: Thu 03 Apr 2025 00:33:19 +0000 Manifest next update: Thu 10 Apr 2025 00:33:19 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: +XXVCyhnx4XmfLIGuSvKEnk0a1PtLKx/NUOTfBwEEBk=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: vU7fQooVaJk/8bmjfMJwzmIcKpCJVNxNvX0SFPwtzeQ=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: GmAluyp1SMa2XHtQwLg3qsZiugrvAjRv/8qqPdWoOr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE Validity Not Before: Apr 3 00:33:19 2025 GMT Not After : Apr 10 00:33:19 2025 GMT Subject: CN=67edd74f-c7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:76:21:46:98:e1:9a:55:62:1d:9c:44:41: 85:6f:5d:12:5a:2a:ec:2e:99:40:af:30:2b:c3:da: 40:4f:da:88:bb:d4:4d:0e:00:07:23:95:ea:30:12: f1:40:2f:83:c6:15:80:74:9b:c6:e8:1f:d1:90:2c: 7c:e7:b6:9c:c1:8b:aa:4a:6d:ce:63:5e:93:ab:fa: 55:b8:a4:f9:da:ff:18:34:1a:d7:c2:7c:01:c6:70: a4:4f:c7:04:03:3b:be:67:47:48:82:9e:57:52:1f: 4d:28:f2:a9:65:a8:51:1c:13:71:30:7a:7e:4a:a3: 62:a1:a7:4a:a3:17:6c:7b:2b:c2:b9:1a:22:89:07: c2:54:55:21:04:65:3c:9e:a2:5f:4c:84:4b:0e:50: 02:03:d3:2a:d3:31:93:c3:19:80:3a:34:1f:12:53: 09:bf:b5:0e:f6:7b:2e:91:c6:b8:24:ac:73:c0:be: 47:f8:40:f3:00:5e:d8:5c:b1:63:45:c1:3d:0e:95: 9a:40:26:46:ee:9b:58:24:70:8b:d7:7f:02:46:7c: b0:53:0f:22:aa:85:53:e6:e7:46:5e:b2:a1:4f:c7: d4:ee:30:be:79:41:7e:e6:36:50:a7:27:cc:68:38: 5b:66:ca:94:c3:86:bc:ee:10:cc:c7:9c:a7:24:ba: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:10:9C:1C:E2:61:45:C2:5F:43:93:BA:85:F4:86:30:F2:C6:E2:6D X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:22:ef:3c:ff:b0:e0:a5:a1:51:45:03:44:56:38:02:08:c6: a7:c3:8c:2a:b0:e7:bf:ae:3c:55:c9:5e:70:99:3b:cb:9a:0b: a1:38:0a:54:a6:58:03:80:c2:9a:7e:6f:d6:b6:36:33:fb:6b: 71:9b:d0:f3:1d:f8:20:50:66:9c:71:9d:00:a7:13:9a:57:46: 58:f9:07:a9:08:39:da:44:90:8b:54:24:dd:d2:94:b9:e8:8c: 65:77:04:e3:db:34:53:cd:08:27:80:6a:04:5c:c4:b0:85:e1: 80:98:f1:9a:c7:30:4a:2e:4f:7e:01:d3:58:43:53:03:ba:da: 7e:eb:80:89:09:92:d9:87:e1:21:4c:39:d7:8f:3f:da:fc:fc: 15:0c:ff:1c:f3:cd:5b:cc:85:c1:60:65:ad:d6:1a:b4:d3:6e: e7:06:47:8b:7c:0a:eb:89:59:e7:c5:5a:4f:d4:9d:e2:e0:04: db:9c:a1:61:06:8a:0c:b5:cd:d4:16:55:d6:30:6f:58:da:88: ce:0d:ee:94:b9:a0:d8:9c:03:59:cc:ed:6b:c2:a2:73:9d:11: dd:e8:ad:14:cc:fa:42:4e:a5:32:42:5a:4c:8e:41:e5:d7:4f: ab:a5:f3:73:33:5e:cf:8e:23:4e:54:f4:3d:cc:b1:48:e6:91: 19:70:0d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUwNDAzMDAzMzE5WhcNMjUwNDEwMDAzMzE5WjAYMRYwFAYD VQQDEw02N2VkZDc0Zi1jN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq52IUaY4ZpVYh2cREGFb10SWirsLplArzArw9pAT9qIu9RNDgAHI5XqMBLx QC+DxhWAdJvG6B/RkCx857acwYuqSm3OY16Tq/pVuKT52v8YNBrXwnwBxnCkT8cE Azu+Z0dIgp5XUh9NKPKpZahRHBNxMHp+SqNioadKoxdseyvCuRoiiQfCVFUhBGU8 nqJfTIRLDlACA9Mq0zGTwxmAOjQfElMJv7UO9nsukca4JKxzwL5H+EDzAF7YXLFj RcE9DpWaQCZG7ptYJHCL138CRnywUw8iqoVT5udGXrKhT8fU7jC+eUF+5jZQpyfM aDhbZsqUw4a87hDMx5ynJLp8+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkQnBzi YUXCX0OTuoX0hjDyxuJtMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyIu88/7DgpaFRRQNEVjgCCManw4wqsOe/rjxVyV5wmTvLmguhOApU plgDgMKafm/WtjYz+2txm9DzHfggUGaccZ0ApxOaV0ZY+QepCDnaRJCLVCTd0pS5 6IxldwTj2zRTzQgngGoEXMSwheGAmPGaxzBKLk9+AdNYQ1MDutp+64CJCZLZh+Eh TDnXjz/a/PwVDP8c881bzIXBYGWt1hq0027nBkeLfArriVnnxVpP1J3i4ATbnKFh BooMtc3UFlXWMG9Y2ojODe6UuaDYnANZzO1rwqJznRHd6K0UzPpCTqUyQlpMjkHl 10+rpfNzM17PjiNOVPQ9zLFI5pEZcA3V -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:52 2025 by rpki-client