$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json) Hash identifier: 2F3jDwd4Fs8zIyvxLSf0E80v445tbSmLPtqHG/wJLM8= Subject key identifier: 2E:DF:64:38:D9:83:BD:F9:ED:26:6A:1B:7F:61:AD:66:2C:41:FD:2E Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft Manifest number: C4 Signing time: Sat 29 Mar 2025 05:10:56 +0000 Manifest this update: Sat 29 Mar 2025 05:10:55 +0000 Manifest next update: Sat 05 Apr 2025 05:10:55 +0000 Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: z1h7ffsmQGXLCH+pS4fdIYvwXQLBNEacpUdZCCrHy7A=) 2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: LjsOflVWx2ASLq3Z//t4WARlGyPly5HO69O4zsWdHy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D95 Validity Not Before: Mar 29 05:10:55 2025 GMT Not After : Apr 5 05:10:55 2025 GMT Subject: CN=67e780df-c6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:2d:ee:d7:b3:cb:68:2d:50:c7:46:d3:d0: 33:31:68:fc:05:4e:b2:d0:dd:92:db:51:d5:07:03: da:1f:18:08:a4:47:6e:3e:a3:39:8a:d7:23:73:28: 96:e5:ed:3e:dc:f4:c5:08:54:79:ae:3c:47:0d:32: e9:14:42:d6:c9:10:82:8c:49:e5:27:81:c5:71:3b: 8f:28:2f:07:82:c8:14:d0:7e:2c:8d:1e:31:6f:49: 3a:37:fb:60:dd:9d:c1:b0:04:4e:53:72:6c:41:bb: 5f:6c:f1:9f:ee:04:33:1c:5a:e1:81:93:63:75:b0: 97:42:22:d9:79:34:6c:21:04:49:f4:ea:e2:5c:d4: 92:a2:92:e7:21:64:3b:46:f9:25:df:e0:4c:1f:f0: 6b:38:93:81:1b:16:c5:a6:d9:5c:82:cd:80:e9:91: 8c:1d:12:56:8b:02:bf:43:66:55:a1:4c:da:11:11: b3:29:3d:fd:dd:2d:61:5e:3f:30:16:e2:5b:22:a5: 5d:2d:b8:a0:17:33:11:ba:46:9c:58:bb:12:9f:8e: d0:37:cc:2b:cc:35:55:ad:e5:af:cc:26:3d:10:b9: 82:7b:4d:ef:9e:b7:ef:a6:64:07:c0:eb:61:d2:03: d4:6d:97:b8:99:4e:4e:0e:70:3d:26:89:7f:86:81: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DF:64:38:D9:83:BD:F9:ED:26:6A:1B:7F:61:AD:66:2C:41:FD:2E X509v3 Authority Key Identifier: keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a3:82:22:b4:4e:7e:a7:3d:cd:66:1a:3e:43:33:0d:a2:76: 03:28:7a:01:5e:fc:05:49:53:01:98:a6:4b:f4:03:63:98:21: 27:32:1e:1f:a0:ab:ab:91:bb:73:f4:0e:79:5b:b5:64:2d:22: 0e:f1:59:aa:4c:4c:57:66:77:eb:38:44:8c:3a:e9:26:a9:36: a8:73:9b:4b:4f:72:ab:d4:39:f4:b0:7d:29:06:28:48:c4:6a: 5f:2a:e1:fb:9e:df:be:a0:87:bc:d1:47:96:d1:bb:35:d7:d7: 03:be:b8:1f:4a:74:0a:8f:8d:74:28:30:62:6c:77:77:40:67: c6:0c:90:51:78:af:c5:9d:31:8d:c1:1f:79:37:4c:fe:a6:57: 02:3a:40:b9:c0:68:f8:b0:d6:43:40:78:40:e2:88:7c:80:cd: 22:b3:5d:4f:c9:e7:4d:e6:48:82:a9:9e:0f:60:6d:3f:b2:14: 1d:4d:fd:cb:f0:42:d9:85:59:27:a9:fe:2d:3e:02:53:18:0e: 6e:b2:29:06:79:0b:82:9e:90:da:4b:b3:16:45:d2:d0:3b:c5: 6e:0c:0e:d3:0d:2b:dd:30:eb:e1:6f:88:e0:79:94:b0:38:9e: 88:71:2c:b5:df:a6:3c:b9:b6:0a:9c:93:3b:d6:9b:96:cf:b4: 8e:e4:a1:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEOTUxMTAvBgNVBAUTKEZFRDgxNzJGOEE5NUEzNTIwMkQ1MUM2Rjc1RkE5NDdE RTg0NEY0Q0QwHhcNMjUwMzI5MDUxMDU1WhcNMjUwNDA1MDUxMDU1WjAYMRYwFAYD VQQDEw02N2U3ODBkZi1jNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Wkt7tezy2gtUMdG09AzMWj8BU6y0N2S21HVBwPaHxgIpEduPqM5itcjcyiW 5e0+3PTFCFR5rjxHDTLpFELWyRCCjEnlJ4HFcTuPKC8HgsgU0H4sjR4xb0k6N/tg 3Z3BsAROU3JsQbtfbPGf7gQzHFrhgZNjdbCXQiLZeTRsIQRJ9OriXNSSopLnIWQ7 Rvkl3+BMH/BrOJOBGxbFptlcgs2A6ZGMHRJWiwK/Q2ZVoUzaERGzKT393S1hXj8w FuJbIqVdLbigFzMRukacWLsSn47QN8wrzDVVreWvzCY9ELmCe03vnrfvpmQHwOth 0gPUbZe4mU5ODnA9Jol/hoEZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7fZDjZ g7357SZqG39hrWYsQf0uMB8GA1UdIwQYMBaAFP7YFy+KlaNSAtUcb3X6lH3oRPTN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ5NS80OEVEMjk2QUUw NjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8xSUMxUnh2ZGZxVWZlaEU5 TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190Z1hMNHFWbzFJQzFSeHZkZnFVZmVoRTlNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ5NS80OEVEMjk2QUUwNjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8x SUMxUnh2ZGZxVWZlaEU5TTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6o4IitE5+pz3NZho+QzMNonYDKHoBXvwFSVMBmKZL9ANjmCEnMh4f oKurkbtz9A55W7VkLSIO8VmqTExXZnfrOESMOukmqTaoc5tLT3Kr1Dn0sH0pBihI xGpfKuH7nt++oIe80UeW0bs119cDvrgfSnQKj410KDBibHd3QGfGDJBReK/FnTGN wR95N0z+plcCOkC5wGj4sNZDQHhA4oh8gM0is11PyedN5kiCqZ4PYG0/shQdTf3L 8ELZhVknqf4tPgJTGA5usikGeQuCnpDaS7MWRdLQO8VuDA7TDSvdMOvhb4jgeZSw OJ6IcSy136Y8ubYKnJM71puWz7SO5KHP -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:15 2025 by rpki-client