$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: Ojc2qobQvdYuNvkeNLYB5Cne6D+Aqj3xyT/AdLah3z8= Subject key identifier: 80:2B:12:0B:8E:AE:8C:C5:D8:A5:9A:2A:F6:90:FE:36:D3:B5:99:D0 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: 86 Signing time: Thu 03 Apr 2025 05:49:43 +0000 Manifest this update: Thu 03 Apr 2025 05:49:42 +0000 Manifest next update: Thu 10 Apr 2025 05:49:42 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: Myl+ISx83kVyiBn5jTp7H5P6wvLW6HDZNpz8BLjFE9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B Validity Not Before: Apr 3 05:49:42 2025 GMT Not After : Apr 10 05:49:42 2025 GMT Subject: CN=67ee2176-91ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:52:b7:73:9d:ad:42:a7:17:0e:91:86:1e: 3f:82:a7:1c:cf:26:a5:d2:4f:7d:12:46:19:0e:fb: 36:a6:28:4c:dd:71:7d:f2:0a:dd:ef:0d:be:a9:23: 76:b1:e5:43:fb:3e:7a:6d:53:b9:f3:81:3a:9d:e6: ce:f4:3a:1f:23:cf:c1:92:65:65:0e:24:e7:55:c6: 57:dd:9c:5b:52:63:fb:6b:51:50:d3:78:46:a1:88: 1a:ba:ff:9b:d4:dd:e5:bc:cf:60:9f:03:35:fd:d8: f5:4c:72:22:4e:58:e5:17:b7:b7:aa:92:61:95:56: f7:e7:1f:76:3f:37:12:df:16:89:9d:9e:55:23:7d: 95:cd:73:ec:cc:92:78:ae:4f:77:74:69:1e:c5:6e: cb:1b:4e:ce:2c:ee:48:42:db:f3:df:22:54:90:96: 70:98:0a:45:e3:40:84:9f:23:bd:c3:8f:3c:42:60: 23:77:ad:59:c7:86:5c:d8:a8:e6:bb:5c:a1:d4:ce: 55:c4:4f:6d:d5:54:ab:31:2a:6f:9b:a5:9b:ab:0b: b2:74:d8:2d:18:b2:c3:0d:69:45:6b:9e:23:9f:0e: 9c:1f:98:c8:cf:a3:59:1f:3c:f0:01:2b:30:02:b5: f1:a9:b3:a3:70:6a:23:9a:5f:0a:33:42:59:30:57: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:12:0B:8E:AE:8C:C5:D8:A5:9A:2A:F6:90:FE:36:D3:B5:99:D0 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:e1:f8:bc:37:25:da:76:13:84:00:10:2c:de:36:65:8c: 63:97:33:2d:cc:08:52:23:bd:d8:5c:d6:54:32:d4:c5:8b:e0: 26:05:c6:10:d2:98:3c:6e:52:21:a0:52:72:01:28:84:f6:5f: d6:20:3e:92:cb:e8:bf:a9:e9:7b:d0:f8:9d:87:48:5f:2d:eb: 27:9d:e5:13:bd:18:ca:42:71:19:08:01:5a:bc:84:36:bd:19: fb:66:61:57:40:83:0f:37:17:94:81:ae:e9:c3:dd:08:b9:b3: f3:04:10:fc:b6:58:c7:ab:ac:26:2b:fd:d0:18:b0:f8:88:de: 8b:ee:b7:9d:18:a0:f0:ff:28:2e:81:ce:55:92:9d:a3:dc:e3: 14:7a:3a:5f:3e:92:5a:4f:5d:45:6a:3a:ac:ab:2d:af:38:20: 95:84:e9:40:6a:52:77:be:58:cf:71:18:6c:8b:2f:f5:ec:c0: b8:57:a8:da:94:6f:ec:06:c8:46:8e:16:7f:5c:29:ff:b8:cb: 00:d4:aa:3c:03:03:56:94:1f:b6:34:f1:0e:6d:32:f6:d1:48: 86:0a:59:72:55:6b:4e:b2:e1:65:c0:1f:a4:09:52:69:7b:d0: 47:18:6e:3b:79:68:dd:66:02:45:de:1c:5d:03:96:01:e9:e2: 4f:6b:8d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjUwNDAzMDU0OTQyWhcNMjUwNDEwMDU0OTQyWjAYMRYwFAYD VQQDEw02N2VlMjE3Ni05MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmdSt3OdrUKnFw6Rhh4/gqcczyal0k99EkYZDvs2pihM3XF98grd7w2+qSN2 seVD+z56bVO584E6nebO9DofI8/BkmVlDiTnVcZX3ZxbUmP7a1FQ03hGoYgauv+b 1N3lvM9gnwM1/dj1THIiTljlF7e3qpJhlVb35x92PzcS3xaJnZ5VI32VzXPszJJ4 rk93dGkexW7LG07OLO5IQtvz3yJUkJZwmApF40CEnyO9w488QmAjd61Zx4Zc2Kjm u1yh1M5VxE9t1VSrMSpvm6WbqwuydNgtGLLDDWlFa54jnw6cH5jIz6NZHzzwASsw ArXxqbOjcGojml8KM0JZMFc4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIArEguO rozF2KWaKvaQ/jbTtZnQMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkmOH4vDcl2nYThAAQLN42ZYxjlzMtzAhSI73YXNZUMtTFi+AmBcYQ 0pg8blIhoFJyASiE9l/WID6Sy+i/qel70Pidh0hfLesnneUTvRjKQnEZCAFavIQ2 vRn7ZmFXQIMPNxeUga7pw90IubPzBBD8tljHq6wmK/3QGLD4iN6L7redGKDw/ygu gc5Vkp2j3OMUejpfPpJaT11Fajqsqy2vOCCVhOlAalJ3vljPcRhsiy/17MC4V6ja lG/sBshGjhZ/XCn/uMsA1Ko8AwNWlB+2NPEObTL20UiGCllyVWtOsuFlwB+kCVJp e9BHGG47eWjdZgJF3hxdA5YB6eJPa42O -----END CERTIFICATE-----Generated at Fri Apr 4 21:17:23 2025 by rpki-client