$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: b3xOLSjAeZaqgcwsXRCc1cx4dgER6XcjliMkX2BkU0E= Subject key identifier: AA:6F:41:89:FC:C8:79:38:6D:16:F5:91:78:9F:E4:17:66:91:93:AE Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 01CF Signing time: Sat 19 Apr 2025 02:10:49 +0000 Manifest this update: Sat 19 Apr 2025 02:10:48 +0000 Manifest next update: Sat 26 Apr 2025 02:10:48 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: uX3oMba1FHZFcer6ttSUqKCwiU+K6d7FhvwO0wcP/qY=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: JoMqVSrjZm4JfXMaz6xrPhG5LHTOXjmhXw4j9hZGE8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: Apr 19 02:10:48 2025 GMT Not After : Apr 26 02:10:48 2025 GMT Subject: CN=68030629-6581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:2f:a0:e7:f5:43:05:fd:3c:ee:7f:da:71: 0c:d1:f2:43:45:34:58:18:bf:61:69:9a:c1:51:6d: ff:9b:97:3f:4b:26:0b:89:94:10:60:75:8b:c4:2c: 70:94:71:9e:12:2d:ac:31:00:3f:d0:22:d4:c3:3c: 89:d0:fe:30:37:2a:4c:d9:73:44:76:00:0e:72:9e: 9c:b5:fe:3d:ed:58:b2:96:0b:b7:66:da:ad:7d:07: 34:db:2e:1a:26:42:e5:d1:1e:d3:d5:8a:63:26:e7: 62:f9:e2:5c:4d:14:cf:f6:e3:3c:49:47:34:2f:c5: 4c:77:61:89:b3:6f:bb:92:37:6f:82:17:c6:47:b2: ba:29:78:36:93:da:34:c0:53:9e:bb:f7:be:36:de: f1:7a:b3:1a:11:b1:f0:fd:36:bf:5d:ae:5a:c6:17: 23:5b:a6:d9:d9:3c:b0:44:64:66:68:92:5c:3a:3d: ca:25:62:90:69:48:7f:0d:ad:05:ed:9d:c0:2d:4a: 37:92:63:f8:db:c7:2b:23:54:87:3d:12:3d:b5:fd: 9a:a6:eb:18:ef:a6:ba:1a:9d:a0:16:a0:96:e3:fd: 53:26:b1:9f:c7:df:0f:ec:40:ac:f5:4f:aa:7b:04: 88:cd:60:80:ad:50:20:09:97:9f:ad:c4:46:25:93: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:41:89:FC:C8:79:38:6D:16:F5:91:78:9F:E4:17:66:91:93:AE X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a1:b5:a7:7e:5e:45:e8:03:da:c1:49:a0:f5:98:fa:3a:af: f8:3d:71:96:2b:ed:84:08:b5:91:02:37:7c:3e:6e:7d:47:6e: 2e:d3:92:13:9e:45:b1:18:07:fc:a9:33:6d:71:77:ed:7f:2e: ae:5f:b0:85:f5:c0:db:9f:cd:2c:98:3b:e5:55:78:07:35:1b: 1e:74:ef:b5:84:6d:79:1a:ef:57:1f:95:bf:77:48:ef:d7:61: 75:68:4a:9e:5e:28:da:35:ef:8a:b4:00:e0:34:9e:5d:a8:f8: 16:dc:77:1e:dc:40:0b:d2:7a:29:e9:c7:7c:24:54:56:9c:bd: 49:ba:93:35:fc:f0:54:8c:24:f4:82:ad:e2:a4:a4:0c:9a:b6: 1f:f0:99:93:8b:dd:7a:32:b3:50:55:be:55:9e:25:72:14:e6: 25:e0:61:8f:75:25:96:bd:07:4b:c2:55:5b:02:e3:52:82:25: e7:c0:76:2c:99:05:4b:6a:f1:82:f6:d1:63:06:6f:a6:85:51: b4:ce:09:9c:85:36:45:e9:d4:c1:24:ce:5a:b2:8a:8c:72:c8: 04:cd:02:e8:ff:f3:05:5e:8e:b1:58:0a:31:c7:ef:ac:ac:0d: bc:66:51:e9:90:6e:14:98:75:44:d5:92:2b:b4:e3:0d:77:d9: 8b:ba:7f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjUwNDE5MDIxMDQ4WhcNMjUwNDI2MDIxMDQ4WjAYMRYwFAYD VQQDEw02ODAzMDYyOS02NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tovoOf1QwX9PO5/2nEM0fJDRTRYGL9haZrBUW3/m5c/SyYLiZQQYHWLxCxw lHGeEi2sMQA/0CLUwzyJ0P4wNypM2XNEdgAOcp6ctf497Viylgu3ZtqtfQc02y4a JkLl0R7T1YpjJudi+eJcTRTP9uM8SUc0L8VMd2GJs2+7kjdvghfGR7K6KXg2k9o0 wFOeu/e+Nt7xerMaEbHw/Ta/Xa5axhcjW6bZ2TywRGRmaJJcOj3KJWKQaUh/Da0F 7Z3ALUo3kmP428crI1SHPRI9tf2apusY76a6Gp2gFqCW4/1TJrGfx98P7ECs9U+q ewSIzWCArVAgCZefrcRGJZNPuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpvQYn8 yHk4bRb1kXif5BdmkZOuMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPobWnfl5F6APawUmg9Zj6Oq/4PXGWK+2ECLWRAjd8Pm59R24u05IT nkWxGAf8qTNtcXftfy6uX7CF9cDbn80smDvlVXgHNRsedO+1hG15Gu9XH5W/d0jv 12F1aEqeXijaNe+KtADgNJ5dqPgW3Hce3EAL0nop6cd8JFRWnL1JupM1/PBUjCT0 gq3ipKQMmrYf8JmTi916MrNQVb5VniVyFOYl4GGPdSWWvQdLwlVbAuNSgiXnwHYs mQVLavGC9tFjBm+mhVG0zgmchTZF6dTBJM5asoqMcsgEzQLo//MFXo6xWAoxx++s rA28ZlHpkG4UmHVE1ZIrtOMNd9mLun+c -----END CERTIFICATE-----Generated at Sun Apr 20 22:19:38 2025 by rpki-client