$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json) Hash identifier: aWtt0cqYq723ssBeHiqwQnax+NyylvlZllwHt7UtNRc= Subject key identifier: C0:23:0E:55:DB:E4:B9:78:DC:44:4B:9D:7A:80:1F:F7:5F:FA:88:BC Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft Manifest number: 07C1 Signing time: Sun 20 Apr 2025 20:50:36 +0000 Manifest this update: Sun 20 Apr 2025 20:50:35 +0000 Manifest next update: Sun 27 Apr 2025 20:50:35 +0000 Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: Qe2hzmTPC3wGmkfr9jSLhQFTk3QenFwyroBGrYoo+FE=) 2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Apr 20 20:50:35 2025 GMT Not After : Apr 27 20:50:35 2025 GMT Subject: CN=68055e1c-418a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:cd:4c:bb:9e:67:9a:61:13:f9:e9:9f:f8: 1a:aa:b0:fa:b8:4f:e0:81:72:1d:68:c8:77:7c:24: b3:dc:db:57:91:0b:7c:f5:22:e9:f8:d4:35:6a:88: 81:6d:7b:8b:a8:09:78:e5:24:ca:55:cc:1a:3f:4b: 91:1f:dc:3d:74:0b:0f:4e:f8:2b:5e:ce:7b:d0:d1: ce:42:e7:71:23:db:95:2c:3f:1f:9b:4a:3b:53:7d: 1a:df:86:d7:60:51:59:ba:b8:a7:38:21:5c:51:53: a4:d2:3f:c0:0a:95:45:29:2d:ae:a4:d7:c8:d8:bf: af:1d:a2:aa:10:26:bd:db:75:68:a3:52:c1:35:a1: fd:32:c9:bc:3d:59:60:67:2b:f0:ea:42:0b:eb:d0: 7f:cc:04:b5:65:c2:40:28:65:19:09:44:fd:09:c7: df:a3:e4:ee:04:9c:c6:a5:d9:4d:42:fb:1f:d1:c7: 86:5d:88:d0:2e:7c:41:3c:fb:8b:12:d6:40:81:66: 3a:28:16:ff:a5:ea:c9:5d:d7:97:6a:0f:5a:a9:4f: dd:c0:fa:a0:27:7f:13:1c:6e:51:d8:4c:45:49:f3: 09:dc:d1:f9:b9:80:f1:27:52:4d:ab:6f:3c:75:1b: 75:f0:c5:d4:96:f6:0b:62:c6:cc:fc:35:8d:9b:1b: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:0E:55:DB:E4:B9:78:DC:44:4B:9D:7A:80:1F:F7:5F:FA:88:BC X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:53:51:8e:92:a1:2b:21:83:63:fe:0f:49:fc:b4:ff:59:4b: de:74:cd:1a:4b:a0:f6:5e:6f:29:96:f8:21:dd:6a:58:f6:26: 72:b4:df:d8:9b:24:28:e6:ea:d6:de:74:8a:85:9f:16:8a:7e: 52:d4:db:b9:d7:a6:f3:70:41:31:00:49:ca:e3:4e:e6:b5:f3: 26:f3:b9:ca:ec:93:9e:b9:e6:ae:06:cb:f0:e6:71:c0:8f:95: c6:75:b2:eb:a5:c0:8a:0a:71:41:9b:ce:02:bf:86:cf:01:06: 9a:68:91:47:8b:08:6d:48:a0:31:7f:72:1b:ac:17:af:ed:94: 8b:a5:ca:08:c3:45:af:16:15:8b:ce:b1:0e:ce:04:0d:cb:9f: 07:ff:08:db:3c:69:a2:36:75:e1:dd:ab:bb:d3:e7:85:cb:56: 32:0b:8c:01:d3:f6:ab:d6:17:26:59:5d:cf:bc:03:c9:7d:35: c6:c5:81:88:7b:a8:4c:cc:37:2d:f5:2c:53:1e:aa:dd:85:90: 8c:a1:4a:4c:09:45:2b:31:ab:e3:7c:eb:53:97:60:c7:13:b9: b9:bb:2c:33:b6:4d:10:d5:f6:be:02:f9:d1:39:48:f5:1b:bc: 40:b7:3d:c2:cc:6d:87:7c:e6:4e:f8:cc:e7:29:f0:d6:7c:e2: 1d:42:63:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUwNDIwMjA1MDM1WhcNMjUwNDI3MjA1MDM1WjAYMRYwFAYD VQQDEw02ODA1NWUxYy00MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35PNTLueZ5phE/npn/gaqrD6uE/ggXIdaMh3fCSz3NtXkQt89SLp+NQ1aoiB bXuLqAl45STKVcwaP0uRH9w9dAsPTvgrXs570NHOQudxI9uVLD8fm0o7U30a34bX YFFZurinOCFcUVOk0j/ACpVFKS2upNfI2L+vHaKqECa923Voo1LBNaH9Msm8PVlg Zyvw6kIL69B/zAS1ZcJAKGUZCUT9Ccffo+TuBJzGpdlNQvsf0ceGXYjQLnxBPPuL EtZAgWY6KBb/perJXdeXag9aqU/dwPqgJ38THG5R2ExFSfMJ3NH5uYDxJ1JNq288 dRt18MXUlvYLYsbM/DWNmxtj4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAjDlXb 5Ll43ERLnXqAH/df+oi8MB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEU1GOkqErIYNj/g9J/LT/WUvedM0aS6D2Xm8plvgh3WpY9iZytN/Y myQo5urW3nSKhZ8Win5S1Nu516bzcEExAEnK407mtfMm87nK7JOeueauBsvw5nHA j5XGdbLrpcCKCnFBm84Cv4bPAQaaaJFHiwhtSKAxf3IbrBev7ZSLpcoIw0WvFhWL zrEOzgQNy58H/wjbPGmiNnXh3au70+eFy1YyC4wB0/ar1hcmWV3PvAPJfTXGxYGI e6hMzDct9SxTHqrdhZCMoUpMCUUrMavjfOtTl2DHE7m5uywztk0Q1fa+AvnROUj1 G7xAtz3CzG2HfOZO+MznKfDWfOIdQmNS -----END CERTIFICATE-----Generated at Tue Apr 22 12:37:39 2025 by rpki-client