$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: mH75ZJ5c8emSyWXQzwJmXdAUyMbBFQ1D4FyLZ5MuHzs= Subject key identifier: 4A:93:6F:B6:8B:13:24:F7:A3:AF:2D:76:FF:DB:73:BF:06:E2:A9:8B Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 022B Signing time: Sat 05 Apr 2025 02:04:31 +0000 Manifest this update: Sat 05 Apr 2025 02:04:30 +0000 Manifest next update: Sat 12 Apr 2025 02:04:30 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: rv44zE+ixDn89gDb+swI0ThqDc+qz5S9qoji6bziBRE=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F Validity Not Before: Apr 5 02:04:30 2025 GMT Not After : Apr 12 02:04:30 2025 GMT Subject: CN=67f08fae-8ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:9b:db:d3:66:0c:67:8b:6a:d6:43:26:09: 9e:6b:22:1a:5c:df:51:c3:72:44:f7:a1:25:76:8c: b1:b3:ea:69:ef:ee:57:cd:4d:1f:81:79:e3:be:92: bc:66:23:18:1a:57:73:7d:0a:fb:b6:7d:d7:ea:c7: 20:8f:5d:a2:1e:ba:58:af:a4:eb:3d:f9:e9:9c:68: dc:91:75:9b:9e:09:17:a7:d3:16:48:a9:c9:68:4d: 28:57:06:b5:04:e2:74:cb:35:f5:19:08:82:93:c1: 07:e7:11:04:c3:4f:43:1f:ad:5f:a0:b1:0c:4b:02: 1f:04:eb:7e:e4:c6:06:73:45:64:71:30:e3:08:b6: 28:07:4e:dc:4d:6d:f4:18:8a:20:86:61:56:92:1b: e1:21:7d:ed:1d:6c:f9:70:c6:c3:98:18:6b:d5:d8: af:fc:da:52:71:d5:db:d8:c9:4c:98:ae:8a:a7:92: fe:fe:f3:cd:c0:0a:07:85:3a:c8:88:db:8d:51:8c: a0:a5:63:89:21:39:0a:18:29:6d:bb:7f:de:2e:82: 71:a3:f5:44:7f:11:8d:b7:5b:9e:cc:0a:f8:08:ba: fa:f5:5b:c5:d8:52:22:b4:fb:2e:b0:e8:87:44:d0: 5f:6a:07:b0:e3:a8:f1:a4:84:16:8f:60:c5:73:45: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:93:6F:B6:8B:13:24:F7:A3:AF:2D:76:FF:DB:73:BF:06:E2:A9:8B X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:df:db:7c:79:da:0e:63:3a:85:42:b8:d1:8f:25:82:51:70: 28:44:4c:9d:21:75:d6:9a:3a:b4:94:b0:bf:85:14:f5:90:91: 07:1f:d3:f5:58:a0:e6:5f:8f:cf:17:ed:b5:ea:13:8c:fa:53: e0:da:1a:a5:6a:42:08:8e:3b:7f:39:f7:11:fc:c7:f7:ce:f0: 55:0e:f4:41:9b:78:19:14:e6:28:75:ff:eb:ed:7f:45:84:b5: e8:73:20:77:c0:70:5c:56:47:e1:a0:47:03:93:36:4b:05:4b: ef:2d:5a:88:2d:5e:28:8a:f3:61:68:a8:d4:9c:86:48:4a:c8: bc:26:ca:41:3f:f1:8b:24:66:a5:0f:d6:ba:b4:42:ea:d7:8b: b6:fc:35:9f:05:0e:a7:d5:ba:6d:18:dc:d8:ce:9e:10:a0:56: 43:ba:fb:27:8b:08:04:59:88:ba:19:a4:76:29:ea:37:53:46: 12:7a:96:e1:fa:76:8b:bf:5d:d3:63:88:89:a5:64:a7:38:a8: c4:58:34:c5:33:02:c4:01:19:3e:d6:0e:17:ca:a1:a0:33:c9: e8:24:0a:a0:e3:19:a4:52:6f:8e:05:3d:b2:fd:c5:79:4e:c9: 0a:37:ef:b2:a0:bf:ef:b0:64:10:11:62:97:4a:db:12:3b:9a: 5a:f0:21:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUwNDA1MDIwNDMwWhcNMjUwNDEyMDIwNDMwWjAYMRYwFAYD VQQDEw02N2YwOGZhZS04ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrub29NmDGeLatZDJgmeayIaXN9Rw3JE96Eldoyxs+pp7+5XzU0fgXnjvpK8 ZiMYGldzfQr7tn3X6scgj12iHrpYr6TrPfnpnGjckXWbngkXp9MWSKnJaE0oVwa1 BOJ0yzX1GQiCk8EH5xEEw09DH61foLEMSwIfBOt+5MYGc0VkcTDjCLYoB07cTW30 GIoghmFWkhvhIX3tHWz5cMbDmBhr1div/NpScdXb2MlMmK6Kp5L+/vPNwAoHhTrI iNuNUYygpWOJITkKGCltu3/eLoJxo/VEfxGNt1uezAr4CLr69VvF2FIitPsusOiH RNBfagew46jxpIQWj2DFc0XoCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqTb7aL EyT3o68tdv/bc78G4qmLMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw39t8edoOYzqFQrjRjyWCUXAoREydIXXWmjq0lLC/hRT1kJEHH9P1 WKDmX4/PF+216hOM+lPg2hqlakIIjjt/OfcR/Mf3zvBVDvRBm3gZFOYodf/r7X9F hLXocyB3wHBcVkfhoEcDkzZLBUvvLVqILV4oivNhaKjUnIZISsi8JspBP/GLJGal D9a6tELq14u2/DWfBQ6n1bptGNzYzp4QoFZDuvsniwgEWYi6GaR2Keo3U0YSepbh +naLv13TY4iJpWSnOKjEWDTFMwLEARk+1g4XyqGgM8noJAqg4xmkUm+OBT2y/cV5 TskKN++yoL/vsGQQEWKXStsSO5pa8CHY -----END CERTIFICATE-----Generated at Sun Apr 6 16:32:52 2025 by rpki-client