$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: F400O/PD72I+W1HLr7E6+UExC4cUK5/HDntW1xjlpnQ= Subject key identifier: 65:5A:FC:4E:41:98:FC:80:21:90:9F:A3:D9:69:04:D6:57:3E:7E:8D Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 03E0 Signing time: Sat 05 Apr 2025 00:44:14 +0000 Manifest this update: Sat 05 Apr 2025 00:44:13 +0000 Manifest next update: Sat 12 Apr 2025 00:44:13 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: eEwFkwyC6Wzpky+gjUu+gn7CThsZ4cd8Uu2sw3nkNLg=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: 1iuXJipvz24oOntaPEU1wj4mqlPSsDFfiyLqXTsQZv4=) 3: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95 Validity Not Before: Apr 5 00:44:13 2025 GMT Not After : Apr 12 00:44:13 2025 GMT Subject: CN=67f07cde-4e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:f7:2e:28:e9:d3:a1:9b:10:3f:3e:2e:99: d9:ad:3f:00:68:15:f1:1d:d8:28:ec:26:5e:46:b8: 66:87:80:3b:64:0f:53:9a:9c:27:9a:fc:58:62:0f: fb:ed:30:ea:2b:e9:c1:50:60:a8:43:77:9a:99:af: c8:52:f2:05:3e:24:32:e1:86:b8:31:57:0d:bc:12: 7f:5b:e5:e2:ba:28:6f:77:07:73:db:f1:c5:09:38: a2:4d:43:31:b9:c5:59:70:89:1a:3b:a2:d4:3d:ce: ec:7c:b3:f6:b7:9b:a3:6e:5b:6e:19:eb:37:5c:ec: 18:88:1f:2f:a7:73:af:67:7c:14:e8:8b:58:b5:93: ed:dc:ac:3d:48:10:ee:02:5e:29:db:d3:de:1c:35: 6f:3a:40:9e:c2:55:d3:80:0a:94:29:ac:f5:08:1b: 27:61:e8:20:cd:0e:21:74:e8:25:e0:8e:85:66:46: a3:3a:dc:8d:cb:fa:52:c3:91:80:de:aa:a4:a9:43: a6:19:25:2a:93:57:3f:51:4b:c2:cf:ae:7b:3a:d6: 50:ac:0f:27:da:b5:36:73:28:01:b8:bd:f1:3c:e7: 4e:c2:f3:48:3e:ce:99:87:57:79:a8:f4:00:9b:7e: 45:94:fd:82:38:c2:47:d8:c2:77:a6:b1:19:4d:6b: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:FC:4E:41:98:FC:80:21:90:9F:A3:D9:69:04:D6:57:3E:7E:8D X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a7:54:71:af:59:f1:e4:fd:17:db:ce:6a:76:c1:08:4a:18: 8c:34:d6:0e:a0:86:81:11:e2:f2:b1:65:23:a6:0f:7f:60:65: 27:52:97:70:6c:6c:e8:c1:e7:21:da:44:a5:ce:50:ee:72:dd: 92:c4:b7:70:e8:19:ff:60:ec:55:ee:39:33:68:55:13:66:94: a8:4a:a0:58:5f:18:6c:36:cd:f7:97:6a:c2:00:32:15:b6:20: c1:3f:d8:06:9c:d7:69:d5:10:bb:e0:c2:40:81:1e:ee:a3:d2: e2:56:64:00:b9:11:d3:21:92:8d:8b:4a:5f:6e:5b:ce:f1:5d: 06:fd:47:7f:1b:f5:50:d9:70:25:64:06:3e:81:60:67:6b:74: 6f:c4:5e:ad:67:d5:11:04:0b:fd:7b:7e:66:6d:a4:30:0f:a8: 9e:4d:cb:c1:2c:93:23:e4:e6:4d:0e:57:a1:56:ab:7b:42:85: 58:f4:40:2c:fc:24:9e:56:91:ff:7d:bf:a1:4d:b4:f1:2f:56: 5c:e5:53:8f:71:6c:a0:2b:b3:bc:0b:18:90:44:e6:cd:2b:60: a3:7e:15:e2:be:bc:a7:09:f8:57:4c:34:6a:ed:3f:18:7f:c6: 3b:bb:f7:3e:25:42:1b:ba:df:e9:94:cf:df:6b:d9:54:71:58: c9:cc:43:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwNDA1MDA0NDEzWhcNMjUwNDEyMDA0NDEzWjAYMRYwFAYD VQQDEw02N2YwN2NkZS00ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2un3Lijp06GbED8+LpnZrT8AaBXxHdgo7CZeRrhmh4A7ZA9TmpwnmvxYYg/7 7TDqK+nBUGCoQ3eama/IUvIFPiQy4Ya4MVcNvBJ/W+Xiuihvdwdz2/HFCTiiTUMx ucVZcIkaO6LUPc7sfLP2t5ujbltuGes3XOwYiB8vp3OvZ3wU6ItYtZPt3Kw9SBDu Al4p29PeHDVvOkCewlXTgAqUKaz1CBsnYeggzQ4hdOgl4I6FZkajOtyNy/pSw5GA 3qqkqUOmGSUqk1c/UUvCz657OtZQrA8n2rU2cygBuL3xPOdOwvNIPs6Zh1d5qPQA m35FlP2COMJH2MJ3prEZTWvl7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVa/E5B mPyAIZCfo9lpBNZXPn6NMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpp1Rxr1nx5P0X285qdsEIShiMNNYOoIaBEeLysWUjpg9/YGUnUpdw bGzowech2kSlzlDuct2SxLdw6Bn/YOxV7jkzaFUTZpSoSqBYXxhsNs33l2rCADIV tiDBP9gGnNdp1RC74MJAgR7uo9LiVmQAuRHTIZKNi0pfblvO8V0G/Ud/G/VQ2XAl ZAY+gWBna3RvxF6tZ9URBAv9e35mbaQwD6ieTcvBLJMj5OZNDlehVqt7QoVY9EAs /CSeVpH/fb+hTbTxL1Zc5VOPcWygK7O8CxiQRObNK2CjfhXivrynCfhXTDRq7T8Y f8Y7u/c+JUIbut/plM/fa9lUcVjJzEOB -----END CERTIFICATE-----Generated at Sun Apr 6 18:28:11 2025 by rpki-client