$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: MUeWtaGT8XVQVzOemaQvlIijQchLHmXOFvlgv6SHdFk= Subject key identifier: E2:A1:A8:32:4F:6E:B7:23:48:B3:61:35:6A:9C:86:AD:89:CA:51:08 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 05C1 Signing time: Fri 28 Mar 2025 23:20:43 +0000 Manifest this update: Fri 28 Mar 2025 23:20:43 +0000 Manifest next update: Fri 04 Apr 2025 23:20:43 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: TIz5dr5/G0tWo1SMYyXEuFQ94qpGtCnGqkYLvj2Wk6s=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898 Validity Not Before: Mar 28 23:20:43 2025 GMT Not After : Apr 4 23:20:43 2025 GMT Subject: CN=67e72ecb-12df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:a8:30:8f:89:27:88:ff:18:d5:38:59:e5: 05:43:ae:b4:5a:27:cb:e3:36:dc:f0:4e:a4:9a:b3: 15:16:d4:1b:36:c5:b3:13:60:47:2e:f8:8f:a2:49: 1e:2a:75:b9:99:7c:c1:e2:23:36:03:e5:12:5b:36: e6:a1:b4:e8:1d:90:84:8e:10:b1:52:c8:0e:66:32: 74:4f:38:1a:3c:e4:31:83:13:8a:25:73:13:06:a9: 98:6b:6a:c5:91:de:10:e6:e3:79:4e:dc:25:16:54: 1a:18:8d:d9:78:b9:d1:94:1c:61:5f:16:dd:cd:a4: 77:c2:e0:2e:5e:7d:de:5a:1e:e3:40:ca:c1:68:31: cd:3e:f3:c9:a3:fa:ab:61:d7:65:8f:24:b1:31:f8: 43:41:7d:ae:29:8e:6a:8d:e5:37:f6:12:b1:60:17: 54:48:0e:36:40:ba:36:a8:dd:c3:dc:4b:8d:92:00: c5:e2:3a:a4:f2:a9:07:9a:a1:7d:7e:46:74:7b:ee: c1:f0:82:6e:11:60:e5:7d:b4:18:8d:06:19:e3:cf: 48:8f:1e:28:55:5e:61:2a:67:1e:80:36:f8:c7:4b: d3:35:22:1d:d9:02:e6:b9:d9:45:cb:e9:11:c4:8a: 7d:0d:a8:cf:83:6c:5f:7a:c7:f8:15:02:68:41:a2: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:A8:32:4F:6E:B7:23:48:B3:61:35:6A:9C:86:AD:89:CA:51:08 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7d:5f:34:07:b0:32:a6:08:ae:03:8f:56:13:28:bb:0c:27: 14:f2:dd:0b:9d:ec:0b:a6:a1:0b:a9:2d:21:0a:e3:0e:c7:55: ea:06:cc:13:a9:9a:28:60:12:33:ae:51:60:b1:80:0b:ff:db: a0:7c:33:2f:11:d6:62:c0:46:bc:cb:81:b0:5b:d1:5f:d9:f3: 62:ac:dd:9a:be:f1:41:e7:6a:03:de:d1:16:0b:16:ac:76:cd: e2:44:20:78:5e:04:46:93:ef:86:57:7a:3b:bc:b9:63:1b:6e: 4c:db:8a:17:85:23:3c:e6:14:86:56:ab:af:51:ec:cd:6a:b0: 49:3d:36:57:39:35:e0:ee:a0:bc:45:bf:be:91:bd:77:fc:af: d0:d6:7c:09:83:90:f8:5b:a2:59:f2:66:8d:a4:5e:73:90:2e: e1:81:13:fa:da:8d:c4:9b:64:7f:b2:d5:bf:c3:a8:4c:42:dd: 37:9a:8e:cb:0f:c0:ee:aa:19:4d:df:25:7f:8c:b1:a6:11:11: 86:41:f3:40:22:ae:1b:cd:d8:34:21:d5:f5:9c:be:10:69:b1: 43:ea:32:20:46:43:54:40:a9:a2:e5:3b:fc:ab:6e:af:d8:1d: b4:8a:9c:fe:35:c2:f9:95:7e:90:e0:37:70:50:dd:bb:6f:da: 98:40:ce:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwMzI4MjMyMDQzWhcNMjUwNDA0MjMyMDQzWjAYMRYwFAYD VQQDEw02N2U3MmVjYi0xMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DaoMI+JJ4j/GNU4WeUFQ660WifL4zbc8E6kmrMVFtQbNsWzE2BHLviPokke KnW5mXzB4iM2A+USWzbmobToHZCEjhCxUsgOZjJ0TzgaPOQxgxOKJXMTBqmYa2rF kd4Q5uN5TtwlFlQaGI3ZeLnRlBxhXxbdzaR3wuAuXn3eWh7jQMrBaDHNPvPJo/qr YddljySxMfhDQX2uKY5qjeU39hKxYBdUSA42QLo2qN3D3EuNkgDF4jqk8qkHmqF9 fkZ0e+7B8IJuEWDlfbQYjQYZ489Ijx4oVV5hKmcegDb4x0vTNSId2QLmudlFy+kR xIp9DajPg2xfesf4FQJoQaI1pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKhqDJP brcjSLNhNWqchq2JylEIMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAffV80B7AypgiuA49WEyi7DCcU8t0LnewLpqELqS0hCuMOx1XqBswT qZooYBIzrlFgsYAL/9ugfDMvEdZiwEa8y4GwW9Ff2fNirN2avvFB52oD3tEWCxas ds3iRCB4XgRGk++GV3o7vLljG25M24oXhSM85hSGVquvUezNarBJPTZXOTXg7qC8 Rb++kb13/K/Q1nwJg5D4W6JZ8maNpF5zkC7hgRP62o3Em2R/stW/w6hMQt03mo7L D8DuqhlN3yV/jLGmERGGQfNAIq4bzdg0IdX1nL4QabFD6jIgRkNUQKmi5Tv8q26v 2B20ipz+NcL5lX6Q4DdwUN27b9qYQM5a -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:33 2025 by rpki-client