$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: E5ijDhVtEiVuzvnDutHVti3pGL4qXVfjAS4b6JVe6/4= Subject key identifier: 96:4C:07:75:76:A7:5F:37:C3:4D:15:CE:20:F1:2A:6C:1F:33:BF:2D Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A19 Signing time: Fri 30 May 2025 19:59:37 +0000 Manifest this update: Fri 30 May 2025 19:59:36 +0000 Manifest next update: Fri 06 Jun 2025 19:59:36 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: Y0miHiXKr/kma2tnPhpknaFWGLVUJ1T4rnNz6gYihz4=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: May 30 19:59:36 2025 GMT Not After : Jun 6 19:59:36 2025 GMT Subject: CN=683a0e29-91b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:63:9d:c3:67:8d:e1:26:7f:40:fd:d9:12: f8:76:df:27:f3:b0:bc:aa:62:54:d5:ce:bb:c1:40: 91:a0:4e:e7:63:5f:85:ed:21:c9:8c:58:7c:2f:8f: bf:d9:a2:18:12:f2:9d:de:da:1c:d7:ad:1e:53:fd: 2d:b6:3f:10:68:37:31:92:ab:6d:a4:8e:b2:a0:9a: 07:f0:fd:48:a7:a1:02:b4:42:87:df:13:09:d4:49: c6:fa:3e:49:52:38:50:af:81:61:7f:9d:24:65:5d: 4d:34:fa:a4:f1:3c:ec:52:df:b7:29:67:59:5b:5c: 1d:77:53:7a:63:67:44:48:3c:79:d0:b9:26:8e:ef: cf:03:a2:4c:7a:e3:4b:75:60:47:9c:79:ab:b7:a0: 95:34:51:a1:d2:e0:01:c1:f0:ce:75:7a:79:25:8f: 45:d5:6c:ef:b3:d8:5d:8f:0b:7b:a4:9e:68:45:55: 7e:30:ba:78:46:14:98:98:f1:37:36:78:dd:2d:9b: 87:08:e9:c5:63:ba:41:78:73:57:30:33:c8:e8:94: 62:21:45:fc:35:5e:39:f2:a9:48:a3:73:37:74:82: 5b:6c:1e:c9:d2:e0:2f:bf:46:9e:e1:f2:13:fe:4d: 0e:ec:af:79:e2:5a:71:3f:46:82:f5:1d:28:f0:d9: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4C:07:75:76:A7:5F:37:C3:4D:15:CE:20:F1:2A:6C:1F:33:BF:2D X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2c:ef:da:b3:84:92:19:e1:65:38:c2:26:85:83:74:d6:f2: db:0e:4c:a1:0a:c3:ee:c0:1e:07:43:2b:b3:d7:60:9e:70:9e: 86:f0:72:e8:ef:42:53:80:2a:83:11:5d:06:0f:6b:93:a2:6e: 56:c5:de:c4:0a:6d:77:4e:11:b6:44:60:a2:52:37:c4:56:aa: ec:a5:6e:db:e7:27:7b:f2:04:4a:17:96:ee:88:45:66:65:7b: d4:52:cb:9a:45:74:f2:04:a9:a4:a9:4f:25:78:65:9e:82:60: 63:7a:af:fb:0c:57:7a:74:9f:3c:7b:38:1a:2d:8e:48:ea:cb: 3c:0a:8a:8f:8a:85:47:2c:64:9c:ee:e4:24:ec:f2:6b:41:18: bc:6a:79:0b:60:2a:85:19:82:36:54:fa:b2:0f:ad:e6:f3:de: b0:b3:9b:12:07:86:83:4a:09:a8:14:00:b0:66:f4:31:7e:be: 62:5d:99:fb:d6:cf:17:59:ca:f0:d5:8d:1a:47:6c:3f:b9:c0: aa:f8:3f:89:70:12:7b:36:69:e4:24:b9:14:97:7e:29:e5:02: 16:25:9b:cb:19:fb:e6:78:6b:c9:fd:8c:96:84:df:c8:7b:48: 1c:9c:d0:64:c5:4f:c6:68:21:01:ea:18:b6:c2:14:e4:37:02: ca:ca:0b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwNTMwMTk1OTM2WhcNMjUwNjA2MTk1OTM2WjAYMRYwFAYD VQQDEw02ODNhMGUyOS05MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYhjncNnjeEmf0D92RL4dt8n87C8qmJU1c67wUCRoE7nY1+F7SHJjFh8L4+/ 2aIYEvKd3toc160eU/0ttj8QaDcxkqttpI6yoJoH8P1Ip6ECtEKH3xMJ1EnG+j5J UjhQr4Fhf50kZV1NNPqk8TzsUt+3KWdZW1wdd1N6Y2dESDx50Lkmju/PA6JMeuNL dWBHnHmrt6CVNFGh0uABwfDOdXp5JY9F1Wzvs9hdjwt7pJ5oRVV+MLp4RhSYmPE3 NnjdLZuHCOnFY7pBeHNXMDPI6JRiIUX8NV458qlIo3M3dIJbbB7J0uAvv0ae4fIT /k0O7K954lpxP0aC9R0o8Nk9MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZMB3V2 p183w00VziDxKmwfM78tMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRLO/as4SSGeFlOMImhYN01vLbDkyhCsPuwB4HQyuz12CecJ6G8HLo 70JTgCqDEV0GD2uTom5Wxd7ECm13ThG2RGCiUjfEVqrspW7b5yd78gRKF5buiEVm ZXvUUsuaRXTyBKmkqU8leGWegmBjeq/7DFd6dJ88ezgaLY5I6ss8CoqPioVHLGSc 7uQk7PJrQRi8ankLYCqFGYI2VPqyD63m896ws5sSB4aDSgmoFACwZvQxfr5iXZn7 1s8XWcrw1Y0aR2w/ucCq+D+JcBJ7NmnkJLkUl34p5QIWJZvLGfvmeGvJ/YyWhN/I e0gcnNBkxU/GaCEB6hi2whTkNwLKygs4 -----END CERTIFICATE-----Generated at Sat May 31 17:31:52 2025 by rpki-client