$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: nS2SdDh46XOx1BihNcuBKtIcPrYzEB4r7X3rnGeSkYY= Subject key identifier: 87:54:48:03:2D:C4:AC:1B:92:CE:4E:19:AA:1C:3D:80:4D:89:90:C8 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: 70 Signing time: Thu 03 Apr 2025 06:06:01 +0000 Manifest this update: Thu 03 Apr 2025 06:06:01 +0000 Manifest next update: Thu 10 Apr 2025 06:06:01 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: p6ix8DRz9O+f7XNK48zBRcTBTTKHLQGknK8xTFGsguo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90 Validity Not Before: Apr 3 06:06:01 2025 GMT Not After : Apr 10 06:06:01 2025 GMT Subject: CN=67ee2549-c147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:a6:ff:02:03:8a:87:a1:c8:20:62:85:86: ea:bc:23:f9:9d:a4:23:c0:25:68:34:6f:31:0a:10: da:55:5c:de:4c:95:53:a1:a9:7a:56:34:d5:20:36: d9:0d:1f:75:73:69:dc:a0:4b:5d:60:98:ed:8a:ca: f9:c8:38:80:0c:1f:0b:58:ef:1b:40:a1:56:4a:42: 39:15:38:d6:04:e6:37:90:4e:49:a6:aa:0c:31:57: 00:33:70:71:d4:9a:9a:ce:e7:4e:4c:15:5e:fe:9e: 21:a3:01:94:a7:9b:d4:1d:21:b5:04:eb:b9:c4:cc: 76:57:d6:f3:bb:19:14:54:7b:08:b8:ec:7d:a0:09: 43:71:ae:35:f1:48:03:81:43:43:67:55:97:86:99: 92:2e:c9:d0:6f:11:54:43:21:13:78:49:d7:c2:60: 73:d9:db:45:f7:12:b9:68:59:de:33:d9:d8:3a:2d: ea:b4:d7:da:14:b7:71:43:60:13:41:30:0c:67:04: 76:e6:a2:1b:6f:a2:d3:39:9f:84:c8:b2:58:1d:c6: 01:33:35:74:2a:82:78:70:e0:74:18:39:06:3a:97: d6:4e:ad:8c:10:5b:27:ea:fb:56:3b:01:1f:22:9a: fa:58:fe:2f:8d:ca:22:e1:6d:d5:dd:b9:4b:78:c1: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:54:48:03:2D:C4:AC:1B:92:CE:4E:19:AA:1C:3D:80:4D:89:90:C8 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:18:4a:29:f8:8a:bd:cf:26:db:70:82:23:59:6f:d8:5c:c5: f0:ce:09:64:b6:bc:f5:03:45:81:48:f3:56:53:ec:9f:37:9d: 42:b8:19:59:03:d7:99:c0:67:05:0c:36:a1:60:1c:8c:cb:08: 3c:c9:99:4e:15:4b:1a:8d:13:0c:01:a1:1f:36:e1:e6:f2:d0: f6:e3:0e:cb:d4:11:78:ce:f5:e9:06:d3:03:cc:bb:00:52:9e: 0f:2c:b9:d9:1d:50:b0:3a:50:3e:3f:b5:ac:ec:74:32:b0:1b: 66:b2:7c:99:6f:46:bb:33:af:63:4b:00:b6:e7:b7:1e:ae:5c: 39:0e:7b:21:0c:4a:d0:1a:59:42:06:56:08:a6:21:a3:41:e9: 80:2c:83:e9:6f:1e:d4:50:2e:2f:bd:cd:11:6a:ea:4d:f9:18: 5d:07:b0:99:a0:40:eb:08:8f:b7:11:7f:43:df:ba:6f:a7:dc: a0:83:73:ce:15:31:3f:a7:6f:9c:d5:82:ab:3f:cd:63:d0:89: ea:7c:10:7e:2a:c8:60:37:30:c6:fb:fe:2a:ba:dd:dd:fc:9f: e5:af:a8:c0:fd:4a:89:4e:cb:72:5e:0f:1f:97:74:43:2e:41: 87:cb:ac:5a:af:1c:d8:41:c0:c7:fa:04:96:07:3e:5b:f7:04: cd:5b:57:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y5MDExMC8GA1UEBRMoQjYwM0RCRjE0OTdENEI5MzRBRDNBNTk0MUZFMjQwQjdB RjVEQTQ4OTAeFw0yNTA0MDMwNjA2MDFaFw0yNTA0MTAwNjA2MDFaMBgxFjAUBgNV BAMTDTY3ZWUyNTQ5LWMxNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKi6b/AgOKh6HIIGKFhuq8I/mdpCPAJWg0bzEKENpVXN5MlVOhqXpWNNUgNtkN H3VzadygS11gmO2KyvnIOIAMHwtY7xtAoVZKQjkVONYE5jeQTkmmqgwxVwAzcHHU mprO505MFV7+niGjAZSnm9QdIbUE67nEzHZX1vO7GRRUewi47H2gCUNxrjXxSAOB Q0NnVZeGmZIuydBvEVRDIRN4SdfCYHPZ20X3ErloWd4z2dg6Leq019oUt3FDYBNB MAxnBHbmohtvotM5n4TIslgdxgEzNXQqgnhw4HQYOQY6l9ZOrYwQWyfq+1Y7AR8i mvpY/i+NyiLhbdXduUt4wSFDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh1RIAy3E rBuSzk4Zqhw9gE2JkMgwHwYDVR0jBBgwFoAUtgPb8Ul9S5NK06WUH+JAt69dpIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjkwL0JFM0JEQ0NBNjhF MTExRUY4QUM1OTUyM0M0RjlBRTAyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGdQYjhVbDlTNU5LMDZXVUgtSkF0NjlkcElrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjkwL0JFM0JEQ0NBNjhFMTExRUY4QUM1OTUyM0M0RjlBRTAyL3RnUGI4VWw5UzVO SzA2V1VILUpBdDY5ZHBJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgYSin4ir3PJttwgiNZb9hcxfDOCWS2vPUDRYFI81ZT7J83nUK4GVkD 15nAZwUMNqFgHIzLCDzJmU4VSxqNEwwBoR824eby0PbjDsvUEXjO9ekG0wPMuwBS ng8sudkdULA6UD4/tazsdDKwG2ayfJlvRrszr2NLALbntx6uXDkOeyEMStAaWUIG VgimIaNB6YAsg+lvHtRQLi+9zRFq6k35GF0HsJmgQOsIj7cRf0Pfum+n3KCDc84V MT+nb5zVgqs/zWPQiep8EH4qyGA3MMb7/iq63d38n+WvqMD9SolOy3JeDx+XdEMu QYfLrFqvHNhBwMf6BJYHPlv3BM1bV5Y= -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:09 2025 by rpki-client