$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft File: tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json) Hash identifier: REJtyEQ1sHsJi92kzOnaj+rZVF3BcvY86aoimVm2fM8= Subject key identifier: 42:9C:91:84:52:8E:63:C6:CF:A4:F7:D1:20:16:E8:95:62:B2:98:2A Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft Manifest number: 077F Signing time: Fri 04 Apr 2025 21:34:46 +0000 Manifest this update: Fri 04 Apr 2025 21:34:45 +0000 Manifest next update: Fri 11 Apr 2025 21:34:45 +0000 Files and hashes: 1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: vgcC0HAiKwVMwAD3zO5oELQFgl1U9t2ZkkfHBY9fWec=) 2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: uazG73UaMnx6WsXKrRFqrUld6ba1Rwlrt5W45/vO4zY=) 3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: HLeHhf7z+DQd8E9vrX8KAr3EM5GCzgmJjqLeg2zSKbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072 Validity Not Before: Apr 4 21:34:45 2025 GMT Not After : Apr 11 21:34:45 2025 GMT Subject: CN=67f05076-fcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0d:04:92:07:83:86:be:f2:99:bf:c3:33:71: 6d:6d:97:6d:90:ef:43:70:3b:4a:0d:ec:fb:8a:91: 0a:0b:7e:a6:46:46:cf:9e:26:87:80:63:81:42:54: 3d:9f:52:f1:ab:e9:65:0b:54:57:2e:84:02:12:09: 37:7a:25:91:68:6a:5f:f1:f4:af:85:5f:d6:19:00: d6:b5:d6:d4:fe:e2:4d:0a:96:88:5e:8c:70:b0:08: cf:e7:97:29:77:00:28:97:d2:a9:a3:57:52:b1:78: cc:60:06:cd:79:14:0b:72:11:79:03:8f:da:a9:63: 1c:7c:47:de:6e:b8:94:43:2f:64:a2:c4:41:05:37: 39:e5:11:86:14:49:50:ef:12:fb:d2:67:9e:91:43: 93:fa:bc:2d:f1:db:ff:a7:93:c1:c7:0b:c1:91:19: 80:a1:f1:d8:67:72:f8:9d:87:4f:02:eb:95:3f:ee: 5c:ac:6b:63:d2:1f:36:d9:1f:03:ce:37:96:f6:d9: b8:49:72:b0:6f:06:66:05:42:68:67:a0:71:c4:34: 30:f1:13:4b:d4:0c:fe:88:f1:0b:46:b1:be:ed:23: 81:f6:e4:0c:bc:9b:ef:aa:b7:30:10:9a:96:a5:b8: cb:86:29:c1:c6:04:2c:56:4f:7e:74:66:9d:3e:b4: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:91:84:52:8E:63:C6:CF:A4:F7:D1:20:16:E8:95:62:B2:98:2A X509v3 Authority Key Identifier: keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:da:b2:54:1c:b6:9f:96:58:8b:3d:17:8a:2f:14:e0:59:90: 15:d7:b0:ed:51:d5:34:c0:11:b0:22:f5:a1:58:23:0a:c8:56: dc:02:e3:9c:6e:2b:5a:11:23:20:3d:86:c3:9d:a1:30:b4:81: 76:a8:7d:1f:75:42:01:28:51:ab:ef:28:12:36:19:d2:c5:7e: be:ce:d1:08:83:19:b2:8b:71:c8:2c:f8:9e:93:99:a0:03:34: 2a:3d:b3:72:47:8f:2e:d0:71:21:8f:77:cc:59:b8:2d:c3:14: e6:1f:02:67:05:61:3f:e8:37:23:f7:1e:45:01:d4:b5:13:37: 37:40:43:e7:df:b5:5e:aa:b7:8f:2e:b8:fb:c2:35:4c:62:51: 29:53:e5:29:da:58:1d:8f:0b:21:f4:22:fc:97:a5:94:fc:d2: 7f:9c:4d:05:c1:5f:c8:b7:c4:e2:e3:3a:d1:62:66:de:a2:7e: e6:a8:64:8b:d1:b5:99:b3:dd:ce:2e:28:17:57:16:d7:bf:e9: c5:67:4d:a6:60:5c:d4:cc:53:85:3a:a2:b7:98:9f:89:f2:5b: 9a:64:9d:9f:c9:7b:d9:87:8a:54:49:23:30:20:af:d2:66:6a: fb:0d:21:c2:cf:c1:fc:d6:35:1f:b2:d6:c9:a5:22:ae:96:02: 2f:d5:76:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx MkNFODVERDQwHhcNMjUwNDA0MjEzNDQ1WhcNMjUwNDExMjEzNDQ1WjAYMRYwFAYD VQQDEw02N2YwNTA3Ni1mY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5g0EkgeDhr7ymb/DM3FtbZdtkO9DcDtKDez7ipEKC36mRkbPniaHgGOBQlQ9 n1Lxq+llC1RXLoQCEgk3eiWRaGpf8fSvhV/WGQDWtdbU/uJNCpaIXoxwsAjP55cp dwAol9Kpo1dSsXjMYAbNeRQLchF5A4/aqWMcfEfebriUQy9kosRBBTc55RGGFElQ 7xL70meekUOT+rwt8dv/p5PBxwvBkRmAofHYZ3L4nYdPAuuVP+5crGtj0h822R8D zjeW9tm4SXKwbwZmBUJoZ6BxxDQw8RNL1Az+iPELRrG+7SOB9uQMvJvvqrcwEJqW pbjLhinBxgQsVk9+dGadPrTaDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKckYRS jmPGz6T30SAW6JVispgqMB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wNjlBMDZFNjBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25I dF9YN0pzdWU1cVFTem9YZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU2rJUHLaflliLPReKLxTgWZAV17DtUdU0wBGwIvWhWCMKyFbcAuOc bitaESMgPYbDnaEwtIF2qH0fdUIBKFGr7ygSNhnSxX6+ztEIgxmyi3HILPiek5mg AzQqPbNyR48u0HEhj3fMWbgtwxTmHwJnBWE/6Dcj9x5FAdS1Ezc3QEPn37VeqreP Lrj7wjVMYlEpU+Up2lgdjwsh9CL8l6WU/NJ/nE0FwV/It8Ti4zrRYmbeon7mqGSL 0bWZs93OLigXVxbXv+nFZ02mYFzUzFOFOqK3mJ+J8luaZJ2fyXvZh4pUSSMwIK/S Zmr7DSHCz8H81jUfstbJpSKulgIv1XZU -----END CERTIFICATE-----Generated at Fri Apr 4 23:47:51 2025 by rpki-client