$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: xQCGecwQvmnyQOwpyuCGlV8vpdGdj6KPEZB0i8ry7no= Subject key identifier: 8E:87:F5:1A:0A:94:2E:0B:0E:2F:8F:2B:BF:29:CD:29:93:B6:51:EC Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 015C Signing time: Tue 15 Apr 2025 02:58:36 +0000 Manifest this update: Tue 15 Apr 2025 02:58:35 +0000 Manifest next update: Tue 22 Apr 2025 02:58:35 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: N7lgAz2Yfc4Em8iQArfukNbidHrPSs24/23J5mnFscc=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Apr 15 02:58:35 2025 GMT Not After : Apr 22 02:58:35 2025 GMT Subject: CN=67fdcb5b-2e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:47:5b:1c:a0:a8:19:45:4c:90:ee:27:3a: 4b:b1:e0:1e:8e:cd:06:5a:2e:bf:5e:6f:7a:63:78: 47:cc:da:3c:7b:e8:5e:94:f8:e1:7b:b5:48:27:9a: e4:e3:e3:9f:e5:7a:ba:14:28:b1:0c:2c:9d:28:7f: fc:55:b9:08:ff:e2:42:fb:84:fc:b0:a2:14:cc:4b: 83:75:1f:e2:32:a0:ad:b3:b0:07:9f:f1:95:0a:bf: 2b:a3:6a:be:a3:d2:6f:eb:80:9b:89:82:e5:fe:ce: 1e:69:73:98:03:72:bb:68:ba:26:74:dc:0c:5a:72: 17:1a:82:33:8f:08:92:b6:f0:2f:f8:42:cd:74:7c: ae:87:cf:b6:1c:d3:26:46:e4:48:db:d8:cd:4b:03: a5:64:76:6d:4e:d9:21:a1:a7:c4:a6:0f:de:7e:b2: f5:63:b3:cc:10:e5:32:70:2e:55:19:d0:7d:dd:f7: ba:62:77:80:cf:84:7c:96:61:dd:b3:b7:8f:da:7e: e9:2c:d4:95:ee:8a:37:8f:48:62:94:4f:1c:43:16: 13:ab:35:29:53:26:9d:02:7f:cc:72:5f:8d:79:ef: bd:aa:46:3c:95:89:95:12:67:ff:4b:d0:fb:2e:94: 64:43:7a:16:41:9e:7e:9e:84:17:9c:e8:7c:f8:e8: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:87:F5:1A:0A:94:2E:0B:0E:2F:8F:2B:BF:29:CD:29:93:B6:51:EC X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3c:56:1c:20:20:56:c5:f3:3e:ef:d0:3a:f0:a7:7a:c3:3c: 41:a5:58:4c:06:2b:03:7c:ab:61:cc:f2:ae:f3:4f:49:a9:87: 17:26:d4:b7:2f:9d:16:b4:96:3a:af:f7:ae:ee:63:d9:b0:f3: 15:a6:3a:f5:07:bc:91:fc:57:03:aa:63:cb:4e:2f:8c:eb:a9: a9:92:55:30:97:14:8e:cb:07:fe:d5:73:17:46:61:c0:db:61: 0d:f8:48:a0:d6:df:a4:7a:2f:53:55:90:25:8f:8c:ee:e5:c1: b1:6e:12:b0:70:a9:05:da:20:44:ba:1f:b0:ad:cf:fd:e8:72: 97:11:e4:3c:22:1b:b6:91:60:3d:1d:f0:7d:43:17:72:aa:d2: 70:69:aa:19:6d:0c:fa:9f:f9:46:e0:e2:00:89:37:eb:a0:36: fb:59:d9:c3:f4:fd:ea:22:98:28:9f:58:91:e7:f4:7f:07:b6: 31:4e:aa:f2:b2:59:41:de:53:a9:b8:fc:b1:7c:4f:54:84:a1: 80:33:c7:b5:96:95:c8:3b:2d:a4:62:fd:5a:fa:be:9c:db:92: e7:57:06:09:6e:e1:7a:81:67:47:6d:0d:08:85:8b:07:bb:86: b2:3e:91:02:77:27:ca:90:98:90:8a:55:c5:31:30:ef:41:cb: 96:26:bd:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjUwNDE1MDI1ODM1WhcNMjUwNDIyMDI1ODM1WjAYMRYwFAYD VQQDEw02N2ZkY2I1Yi0yZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFxHWxygqBlFTJDuJzpLseAejs0GWi6/Xm96Y3hHzNo8e+helPjhe7VIJ5rk 4+Of5Xq6FCixDCydKH/8VbkI/+JC+4T8sKIUzEuDdR/iMqCts7AHn/GVCr8ro2q+ o9Jv64CbiYLl/s4eaXOYA3K7aLomdNwMWnIXGoIzjwiStvAv+ELNdHyuh8+2HNMm RuRI29jNSwOlZHZtTtkhoafEpg/efrL1Y7PMEOUycC5VGdB93fe6YneAz4R8lmHd s7eP2n7pLNSV7oo3j0hilE8cQxYTqzUpUyadAn/Mcl+Nee+9qkY8lYmVEmf/S9D7 LpRkQ3oWQZ5+noQXnOh8+OhiMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6H9RoK lC4LDi+PK78pzSmTtlHsMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPFYcICBWxfM+79A68Kd6wzxBpVhMBisDfKthzPKu809JqYcXJtS3 L50WtJY6r/eu7mPZsPMVpjr1B7yR/FcDqmPLTi+M66mpklUwlxSOywf+1XMXRmHA 22EN+Eig1t+kei9TVZAlj4zu5cGxbhKwcKkF2iBEuh+wrc/96HKXEeQ8Ihu2kWA9 HfB9QxdyqtJwaaoZbQz6n/lG4OIAiTfroDb7WdnD9P3qIpgon1iR5/R/B7YxTqry sllB3lOpuPyxfE9UhKGAM8e1lpXIOy2kYv1a+r6c25LnVwYJbuF6gWdHbQ0IhYsH u4ayPpECdyfKkJiQilXFMTDvQcuWJr2G -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:36 2025 by rpki-client