$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: xmKZOgKQSrqDWAFwK112xzBge/VId7eKYad6/sdER9w= Subject key identifier: BA:AF:71:1E:E7:D9:36:B7:39:F7:9E:0F:4D:EB:E5:AC:EB:44:28:A2 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0C1D Signing time: Fri 04 Apr 2025 18:42:13 +0000 Manifest this update: Fri 04 Apr 2025 18:42:13 +0000 Manifest next update: Fri 11 Apr 2025 18:42:13 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: H7XHd88j0Rqi6OfKGZYGrm4sdd3nPTiQAfP2GGBUxIk=) 2: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: hdydafQMMkJvIt5EBnS/YGAF8bc0IukS3bIy5kaR5Xw=) 3: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: /S+W07A3aVql6ze6kJn+yDdzoX1dXbrV898MDchVnCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD Validity Not Before: Apr 4 18:42:13 2025 GMT Not After : Apr 11 18:42:13 2025 GMT Subject: CN=67f02805-1acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:20:bc:87:e6:5f:7b:4d:fe:c1:e6:c7:42:5c: 9d:4d:6d:be:6d:ac:d2:41:b9:e6:db:90:bf:87:e6: 41:c6:d3:04:b5:75:a2:2b:14:d4:e9:03:4a:d4:2e: 6a:7b:0e:15:53:09:2e:24:e9:c1:f4:92:89:26:93: 0d:71:f6:ab:9c:a1:5b:43:22:5f:38:a6:c2:d8:18: a3:4e:22:ff:43:7d:3b:e8:c6:40:fb:65:29:0b:df: 26:cf:77:39:42:8c:d0:89:95:4d:8c:a6:65:1f:31: 2e:d1:5e:13:a1:7a:28:f9:95:d4:0a:f4:6f:f8:18: 69:d2:28:75:9f:bf:33:70:4e:bc:7f:3f:9c:2f:6e: 66:6f:75:4f:5b:dc:35:c4:49:88:e9:9c:22:7f:d4: 20:1b:44:35:93:aa:04:ff:c0:be:58:b9:57:c6:0d: 48:59:69:66:3d:aa:cb:59:40:65:b2:3d:fe:a3:17: a8:e3:36:3a:3b:82:3e:66:e7:2a:c9:d6:1c:11:8e: 02:4b:f7:3c:55:bb:91:6c:ad:6c:18:d1:a4:b2:c0: 61:9d:2b:b6:d0:a9:c6:67:84:33:9a:81:0c:0a:85: 74:d2:12:b3:28:19:b9:4a:55:da:3a:e6:f0:00:78: 6b:10:ec:fc:31:25:02:ce:8d:f4:95:9e:85:8c:30: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:71:1E:E7:D9:36:B7:39:F7:9E:0F:4D:EB:E5:AC:EB:44:28:A2 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:f9:2c:a9:d7:37:e8:a9:88:8d:6d:93:8c:0b:cd:ae:9e: 00:d0:f6:69:bf:a9:2d:ab:22:2b:93:05:36:70:38:cd:a2:12: 80:5d:cf:93:a8:42:6e:aa:1f:c5:f4:92:6a:a5:f7:4d:87:33: e6:c4:e1:42:96:e2:0a:2a:37:ab:a2:43:6a:13:af:80:91:a1: 37:bf:0e:4e:56:0a:c6:59:a0:bf:d6:15:30:77:64:a9:15:a6: 09:46:42:fc:ee:20:19:7c:65:40:16:29:5d:b1:20:f3:e5:b2: 7d:12:11:1d:6b:98:c8:90:ec:00:9f:34:5d:9b:a0:13:a8:59: 5b:4b:9a:67:04:25:cf:f7:cb:c4:5e:45:c4:c9:e8:74:62:54: 6d:2c:07:04:7e:c7:80:50:8b:b0:50:6a:39:86:b8:19:3d:66: a1:f7:39:7a:e8:4b:31:ab:3a:b3:11:64:15:2e:e6:52:bc:a5: 37:86:3a:53:71:e1:ee:c8:ab:b9:de:a4:fd:f4:17:d7:fa:59: 5f:ab:20:7a:66:1f:8b:79:f5:ba:6c:63:38:b7:d9:1c:e8:a0: 08:81:f0:33:ed:81:1f:92:73:8e:ba:4d:0b:2c:76:30:2d:bd: 28:06:0c:d1:ec:45:bc:09:d1:9e:42:66:ae:8a:4c:2a:b4:f3: 3e:0a:6d:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjUwNDA0MTg0MjEzWhcNMjUwNDExMTg0MjEzWjAYMRYwFAYD VQQDEw02N2YwMjgwNS0xYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CC8h+Zfe03+webHQlydTW2+bazSQbnm25C/h+ZBxtMEtXWiKxTU6QNK1C5q ew4VUwkuJOnB9JKJJpMNcfarnKFbQyJfOKbC2BijTiL/Q3076MZA+2UpC98mz3c5 QozQiZVNjKZlHzEu0V4ToXoo+ZXUCvRv+Bhp0ih1n78zcE68fz+cL25mb3VPW9w1 xEmI6Zwif9QgG0Q1k6oE/8C+WLlXxg1IWWlmParLWUBlsj3+oxeo4zY6O4I+Zucq ydYcEY4CS/c8VbuRbK1sGNGkssBhnSu20KnGZ4QzmoEMCoV00hKzKBm5SlXaOubw AHhrEOz8MSUCzo30lZ6FjDCPhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqvcR7n 2Ta3OfeeD03r5azrRCiiMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJBPksqdc36KmIjW2TjAvNrp4A0PZpv6ktqyIrkwU2cDjNohKAXc+T qEJuqh/F9JJqpfdNhzPmxOFCluIKKjerokNqE6+AkaE3vw5OVgrGWaC/1hUwd2Sp FaYJRkL87iAZfGVAFildsSDz5bJ9EhEda5jIkOwAnzRdm6ATqFlbS5pnBCXP98vE XkXEyeh0YlRtLAcEfseAUIuwUGo5hrgZPWah9zl66EsxqzqzEWQVLuZSvKU3hjpT ceHuyKu53qT99BfX+llfqyB6Zh+LefW6bGM4t9kc6KAIgfAz7YEfknOOuk0LLHYw Lb0oBgzR7EW8CdGeQmauikwqtPM+Cm1v -----END CERTIFICATE-----Generated at Sat Apr 5 22:24:04 2025 by rpki-client