$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: fymcJ0Uv3Bh0Gi6rTqdHlDRzQaLifU2ynF/FWoUztsc= Subject key identifier: 66:45:E9:80:68:8B:4E:12:6A:EC:C8:31:7F:BF:3C:91:9E:45:5C:B4 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06B6 Signing time: Sun 20 Apr 2025 21:48:39 +0000 Manifest this update: Sun 20 Apr 2025 21:48:39 +0000 Manifest next update: Sun 27 Apr 2025 21:48:39 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: dNzzLG8740Y7/Wmjq44B7s60K9JIV+Lg+UnCYLcpyEU=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 21:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Apr 20 21:48:39 2025 GMT Not After : Apr 27 21:48:39 2025 GMT Subject: CN=68056bb7-fcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:1a:b7:0f:72:6a:f2:8a:6c:8a:9c:da:f4: a5:1b:55:6d:5a:86:66:51:2a:b1:ea:ba:35:24:9d: 6c:9d:ac:ca:b8:95:3b:c0:bf:df:ce:c2:b6:65:31: 6a:2f:06:42:ae:2b:c6:54:df:a3:c2:df:8a:60:96: c4:a8:a9:77:11:d8:58:09:29:06:fe:1a:2b:4c:ed: 8c:41:20:41:0f:bc:f0:55:5b:4d:c3:59:cc:e8:9d: 49:bf:6a:10:63:50:b6:1e:a8:46:55:3b:d4:d3:df: 54:ae:ec:86:07:c6:dd:e3:fb:3d:20:0c:6f:b3:d1: fb:8c:c3:a4:56:a7:9d:46:4c:15:79:f1:e7:fd:0f: 84:d8:89:7f:d2:8e:23:2e:a5:ba:51:2d:8f:02:24: 27:7f:ad:b6:20:d3:bd:34:59:21:83:35:08:09:03: 7d:6e:a1:8b:32:83:d8:42:ba:e0:bd:bb:44:f0:31: cf:d6:fc:41:5c:dc:c4:5b:dc:47:a8:8a:59:2b:a1: ea:cb:9d:f0:38:96:51:70:8b:4f:d4:3e:ab:51:bf: 3e:e2:6f:ef:57:ee:6c:92:f1:79:ae:89:39:d4:64: 04:bb:16:2c:3c:3f:f4:9f:5f:50:5f:05:b7:2e:0b: 8a:0b:84:ac:89:c0:1d:72:d9:f7:5b:73:cf:bf:99: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:45:E9:80:68:8B:4E:12:6A:EC:C8:31:7F:BF:3C:91:9E:45:5C:B4 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b1:d0:4a:00:cb:b2:97:e0:b9:73:63:46:27:ea:bb:39:f0: 88:8f:8b:31:b5:57:43:75:69:a2:13:64:21:76:f5:53:20:9b: c3:36:c8:01:3f:d4:80:05:1f:1c:2f:df:75:18:17:e2:43:c1: 64:db:dc:10:64:ad:67:c9:5d:41:86:0e:03:11:29:cf:bb:0c: 86:c4:c8:22:e4:9f:87:7a:8f:b6:6c:9a:ee:b1:40:cf:78:95: fb:14:95:ba:26:ab:1e:10:b4:77:43:10:1e:18:a3:c1:41:ab: 60:f5:b9:a3:01:81:a4:2e:a8:32:32:27:5f:98:e6:fe:ad:49: f6:bf:9b:29:c5:34:47:58:c3:0e:c4:8d:c5:60:54:b5:28:bd: a2:48:fe:3e:61:b6:67:05:34:2d:ad:e2:ac:e7:f0:a6:cb:8e: 11:54:bd:0d:ba:1c:e6:b1:62:da:0f:6c:60:a8:45:85:e0:3f: e6:4c:10:2a:db:fb:02:51:94:d1:67:9e:10:d4:0a:a0:de:7b: 97:4e:91:80:72:4a:5b:09:3f:b2:f2:26:35:85:a3:41:74:d6: c4:50:6c:70:d0:e9:89:0f:d6:94:13:c3:8b:d5:02:cd:8e:d0: 21:4c:2f:f8:da:96:51:cc:0a:9a:fd:9b:cd:e7:77:8f:8a:79: d0:ec:a1:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwNDIwMjE0ODM5WhcNMjUwNDI3MjE0ODM5WjAYMRYwFAYD VQQDEw02ODA1NmJiNy1mY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19satw9yavKKbIqc2vSlG1VtWoZmUSqx6ro1JJ1snazKuJU7wL/fzsK2ZTFq LwZCrivGVN+jwt+KYJbEqKl3EdhYCSkG/horTO2MQSBBD7zwVVtNw1nM6J1Jv2oQ Y1C2HqhGVTvU099UruyGB8bd4/s9IAxvs9H7jMOkVqedRkwVefHn/Q+E2Il/0o4j LqW6US2PAiQnf622INO9NFkhgzUICQN9bqGLMoPYQrrgvbtE8DHP1vxBXNzEW9xH qIpZK6Hqy53wOJZRcItP1D6rUb8+4m/vV+5skvF5rok51GQEuxYsPD/0n19QXwW3 LguKC4SsicAdctn3W3PPv5mJ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZF6YBo i04SauzIMX+/PJGeRVy0MB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmsdBKAMuyl+C5c2NGJ+q7OfCIj4sxtVdDdWmiE2QhdvVTIJvDNsgB P9SABR8cL991GBfiQ8Fk29wQZK1nyV1Bhg4DESnPuwyGxMgi5J+Heo+2bJrusUDP eJX7FJW6JqseELR3QxAeGKPBQatg9bmjAYGkLqgyMidfmOb+rUn2v5spxTRHWMMO xI3FYFS1KL2iSP4+YbZnBTQtreKs5/Cmy44RVL0NuhzmsWLaD2xgqEWF4D/mTBAq 2/sCUZTRZ54Q1Aqg3nuXTpGAckpbCT+y8iY1haNBdNbEUGxw0OmJD9aUE8OL1QLN jtAhTC/42pZRzAqa/ZvN53ePinnQ7KEw -----END CERTIFICATE-----Generated at Tue Apr 22 05:40:03 2025 by rpki-client