$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: lZ3ZWHNTlriwbpRkTxLAB6NWZKO2ZMChw7Lc3mE9a7Y= Subject key identifier: E9:DA:13:B9:1C:62:4F:40:54:B2:CF:78:3E:8D:23:1F:7B:04:38:DD Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: FE Signing time: Thu 03 Apr 2025 04:28:46 +0000 Manifest this update: Thu 03 Apr 2025 04:28:46 +0000 Manifest next update: Thu 10 Apr 2025 04:28:46 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: FLSaORw6PHQq0D3LBUpKAMHIrudfWNHY6YN00fEy6BY=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E Validity Not Before: Apr 3 04:28:46 2025 GMT Not After : Apr 10 04:28:46 2025 GMT Subject: CN=67ee0e7e-68a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3f:57:f4:aa:4d:ba:44:ad:2b:1b:b5:17:43: 7d:ef:29:28:12:b7:d0:4d:69:63:42:d8:f5:60:5b: 44:25:65:80:2d:f3:0b:d8:f1:50:7f:5d:ff:ce:4f: 51:56:0d:9d:52:77:a0:ea:c4:ae:d3:92:a6:d2:ac: 9c:6a:f5:1c:cb:6d:11:19:3f:b2:4d:1c:01:22:7b: 3b:92:b7:54:e1:01:21:8c:27:ff:02:cd:b9:6e:a2: 45:c5:dd:bf:08:be:f4:30:11:4b:b1:35:40:8a:4e: 51:7d:77:c7:74:fc:ca:0f:9e:f7:9b:67:0d:75:18: 71:32:49:14:95:3d:ff:13:3e:91:d9:7e:d8:8d:24: 74:f7:c4:e1:25:26:2e:11:88:57:bb:fc:1b:fc:ae: c4:a3:22:23:0c:5a:b7:ce:90:0a:5e:2a:c9:fb:ad: d1:b3:de:2b:98:3b:d7:26:2e:70:f3:c1:66:21:07: df:78:c8:53:27:29:15:70:4e:55:58:a9:39:f9:a1: e7:7e:a1:b2:a7:5f:c2:e1:ff:35:7f:32:09:0e:81: 46:ea:8f:a5:ff:c2:73:c9:0d:f8:8f:a4:01:c2:83: a7:c9:24:4a:6a:d6:79:7e:35:20:cc:f4:0e:3b:a1: 2a:98:94:29:d7:e1:d3:8a:0c:70:4f:e1:96:65:a0: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:13:B9:1C:62:4F:40:54:B2:CF:78:3E:8D:23:1F:7B:04:38:DD X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:cc:93:bb:cd:aa:39:e7:9c:85:ac:13:13:30:7a:19:29:fc: 5b:46:29:91:95:66:7e:e4:4e:9d:98:8c:89:15:dd:41:cd:4e: 9a:2c:90:7a:f0:8a:e2:b8:f3:fa:b2:e1:c1:be:59:a2:64:0f: c4:34:12:12:9b:ee:2d:e7:b2:79:88:dc:2f:6b:4b:50:52:40: 01:ea:b9:13:19:a9:87:d9:07:f2:79:7f:08:e4:5c:9a:5e:25: fe:2d:39:e2:80:af:08:15:bd:4d:4c:61:df:ae:fc:d3:ed:77: 61:77:3b:01:56:7f:c0:f4:e6:e4:1b:ba:9f:e8:ed:4a:63:9a: e6:c4:d3:66:e1:f4:6c:8e:8e:97:42:bb:17:32:e0:e2:71:bd: eb:6b:ab:d8:0c:08:a1:c2:81:df:41:9e:73:27:47:0e:71:38: 63:de:6d:85:00:99:8a:be:b5:2b:73:ce:ec:eb:f1:cd:12:a8: 8f:fd:bb:70:4a:85:57:b9:a5:70:0c:9e:d4:29:46:45:0f:70: 42:f9:1c:df:cc:c3:1f:c0:f8:be:6e:79:c6:b4:83:d0:2e:1f: 13:33:1e:91:3f:74:68:c0:eb:2d:59:87:d1:3b:43:d4:9b:e2: ba:0b:15:fe:66:55:d7:77:a0:56:1a:72:3b:0b:3c:ca:da:bb: d8:d0:12:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjUwNDAzMDQyODQ2WhcNMjUwNDEwMDQyODQ2WjAYMRYwFAYD VQQDEw02N2VlMGU3ZS02OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+D9X9KpNukStKxu1F0N97ykoErfQTWljQtj1YFtEJWWALfML2PFQf13/zk9R Vg2dUneg6sSu05Km0qycavUcy20RGT+yTRwBIns7krdU4QEhjCf/As25bqJFxd2/ CL70MBFLsTVAik5RfXfHdPzKD573m2cNdRhxMkkUlT3/Ez6R2X7YjSR098ThJSYu EYhXu/wb/K7EoyIjDFq3zpAKXirJ+63Rs94rmDvXJi5w88FmIQffeMhTJykVcE5V WKk5+aHnfqGyp1/C4f81fzIJDoFG6o+l/8JzyQ34j6QBwoOnySRKatZ5fjUgzPQO O6EqmJQp1+HTigxwT+GWZaDQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnaE7kc Yk9AVLLPeD6NIx97BDjdMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4zJO7zao555yFrBMTMHoZKfxbRimRlWZ+5E6dmIyJFd1BzU6aLJB6 8IriuPP6suHBvlmiZA/ENBISm+4t57J5iNwva0tQUkAB6rkTGamH2QfyeX8I5Fya XiX+LTnigK8IFb1NTGHfrvzT7XdhdzsBVn/A9ObkG7qf6O1KY5rmxNNm4fRsjo6X QrsXMuDicb3ra6vYDAihwoHfQZ5zJ0cOcThj3m2FAJmKvrUrc87s6/HNEqiP/btw SoVXuaVwDJ7UKUZFD3BC+RzfzMMfwPi+bnnGtIPQLh8TMx6RP3RowOstWYfRO0PU m+K6CxX+ZlXXd6BWGnI7CzzK2rvY0BJC -----END CERTIFICATE-----Generated at Fri Apr 4 18:11:11 2025 by rpki-client