$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: 9xPLmL7z9wEsUYBThdEVCmuPAlbgdWZI3l4Cs6vvArQ= Subject key identifier: 61:DA:05:93:3E:A2:E8:8F:FB:36:0B:0D:75:B2:4A:FF:7F:0E:31:66 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 0127 Signing time: Sat 05 Apr 2025 03:59:46 +0000 Manifest this update: Sat 05 Apr 2025 03:59:45 +0000 Manifest next update: Sat 12 Apr 2025 03:59:45 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: BuCoouz9NIiD6kWX2QJxg8vonOYDuqX3EA3cHzlJzPw=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: DsVxbJQBFvHguy7znDHJZ9CR2UmTMow8V9P9QuFVJ9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F Validity Not Before: Apr 5 03:59:45 2025 GMT Not After : Apr 12 03:59:45 2025 GMT Subject: CN=67f0aab2-ae1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:7a:62:e8:e7:db:f1:87:d5:26:36:23:8b: 6a:3a:ae:ef:24:31:e2:d0:9b:00:a1:c6:47:9b:b7: 0b:22:53:83:a1:40:10:d8:22:43:f1:54:ec:64:9b: 9d:41:0c:d7:c7:13:41:10:68:e0:a6:a0:5e:68:b8: c2:95:a0:82:9c:28:9a:7e:c9:47:bd:55:02:41:25: 53:70:5c:fd:ca:d6:b2:41:aa:97:65:ad:12:0c:26: 9c:4b:a3:b0:4c:92:24:22:41:bf:e4:6b:b5:b4:68: 1c:ef:59:4e:98:b4:2e:ec:4f:38:dc:86:49:06:0d: e8:5d:4e:49:90:5d:17:5c:45:46:cb:25:bc:21:81: 9a:b5:8b:65:81:e0:42:66:16:0c:1a:7f:13:12:9d: e4:87:5d:7e:fa:aa:d6:61:f2:e9:8a:cb:07:89:e6: 31:39:45:f1:72:b0:13:98:30:e1:5d:76:2a:21:75: 49:1b:43:81:1a:00:71:7c:b4:78:d0:ad:92:87:a1: 26:9d:1e:ba:f4:68:4d:b1:aa:ce:ca:8f:fd:3a:78: 0c:40:f6:d7:b0:e9:9a:ed:03:5d:3b:eb:ae:01:7e: b4:a8:bb:a3:a2:b0:0a:d1:78:ef:98:b2:5c:05:7f: 47:69:d0:2e:21:74:0f:80:43:d3:5b:db:cf:fa:91: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:05:93:3E:A2:E8:8F:FB:36:0B:0D:75:B2:4A:FF:7F:0E:31:66 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:05:4c:8b:00:97:d6:b9:ac:8d:72:2c:46:95:23:e9:b8:ac: 75:73:bc:c4:88:64:b8:74:c0:9e:c6:49:ef:fc:88:7a:3d:b5: 46:40:e9:36:af:4e:c2:e0:65:7e:b7:70:ab:c8:7c:f2:91:c9: 00:12:78:3b:ec:a4:73:dd:0e:3b:16:10:90:3b:53:3d:af:9b: 66:f6:a1:55:f6:9e:86:f6:4f:7d:d1:95:d6:df:3d:74:4f:45: 04:af:77:8a:16:5f:a7:23:1d:d1:ad:04:52:8d:b7:d0:9e:5a: 62:6a:a9:75:d9:16:4e:c5:ab:87:90:8f:e3:d1:68:76:23:42: c2:61:cb:f0:71:d3:ba:d0:68:41:86:b2:6a:92:26:c7:4d:5e: 86:5a:a4:97:e7:b4:2e:6e:41:d0:5d:9d:c9:cc:41:4c:3e:a6: bf:29:6a:d9:23:2e:60:84:4d:5f:0b:94:92:cf:29:11:dc:a1: 96:5c:7d:b0:23:1a:ac:5b:62:9d:bb:d7:5e:4e:6a:15:cd:5c: 00:ae:97:0a:6f:af:78:d6:48:83:08:d4:1b:a4:5a:33:20:10: f3:ce:ce:91:75:89:24:5f:37:40:1b:0b:87:ea:8a:ca:a0:cd: 4e:14:07:15:ca:c1:eb:64:af:53:59:67:7f:52:40:b7:70:16: 48:fb:0a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjUwNDA1MDM1OTQ1WhcNMjUwNDEyMDM1OTQ1WjAYMRYwFAYD VQQDEw02N2YwYWFiMi1hZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kN6Yujn2/GH1SY2I4tqOq7vJDHi0JsAocZHm7cLIlODoUAQ2CJD8VTsZJud QQzXxxNBEGjgpqBeaLjClaCCnCiafslHvVUCQSVTcFz9ytayQaqXZa0SDCacS6Ow TJIkIkG/5Gu1tGgc71lOmLQu7E843IZJBg3oXU5JkF0XXEVGyyW8IYGatYtlgeBC ZhYMGn8TEp3kh11++qrWYfLpissHieYxOUXxcrATmDDhXXYqIXVJG0OBGgBxfLR4 0K2Sh6EmnR669GhNsarOyo/9OngMQPbXsOma7QNdO+uuAX60qLujorAK0XjvmLJc BX9HadAuIXQPgEPTW9vP+pE77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHaBZM+ ouiP+zYLDXWySv9/DjFmMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9BUyLAJfWuayNcixGlSPpuKx1c7zEiGS4dMCexknv/Ih6PbVGQOk2 r07C4GV+t3CryHzykckAEng77KRz3Q47FhCQO1M9r5tm9qFV9p6G9k990ZXW3z10 T0UEr3eKFl+nIx3RrQRSjbfQnlpiaql12RZOxauHkI/j0Wh2I0LCYcvwcdO60GhB hrJqkibHTV6GWqSX57QubkHQXZ3JzEFMPqa/KWrZIy5ghE1fC5SSzykR3KGWXH2w IxqsW2Kdu9deTmoVzVwArpcKb6941kiDCNQbpFozIBDzzs6RdYkkXzdAGwuH6orK oM1OFAcVysHrZK9TWWd/UkC3cBZI+wpt -----END CERTIFICATE-----Generated at Sun Apr 6 18:28:57 2025 by rpki-client