$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: ZR1W2v6BAZAs1/5ZG2ky5zpPf0KyNSN1TYhgkCfXywg= Subject key identifier: 35:C9:C1:B1:85:89:FF:91:2A:D6:BD:89:29:4E:D6:0B:97:8E:08:C7 Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 014B Signing time: Sat 31 May 2025 03:53:25 +0000 Manifest this update: Sat 31 May 2025 03:53:24 +0000 Manifest next update: Sat 07 Jun 2025 03:53:24 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: U1/D9KdrgKm396SnHNz6f5kaKxz3Vk21rrOjRNfJs88=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: RP6wVW/OcAubd0XMOITxdOYRXk34RJNOj+5wyZuhGYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: May 31 03:53:24 2025 GMT Not After : Jun 7 03:53:24 2025 GMT Subject: CN=683a7d35-2b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:a8:6c:78:17:a8:e3:cb:45:44:74:cc:bd: b2:80:7c:26:2f:cd:3b:ea:b3:3c:f6:f8:4e:0a:31: 1d:97:2e:a2:e1:25:cd:7f:64:5e:50:ce:dd:6b:c1: b4:69:4b:db:6f:f8:e4:3d:03:61:b6:85:b1:0d:e5: 17:f7:3b:02:2c:b1:77:d1:a6:85:20:23:7c:31:95: e7:68:08:a9:01:d4:57:72:70:c0:e6:ee:e8:21:79: 78:5d:33:b3:8a:9e:87:32:d9:69:be:ce:46:7e:fe: c5:0c:af:4c:44:6b:ad:89:bc:3e:04:78:85:18:df: 98:ef:b6:c3:f6:db:74:bf:db:c2:06:a6:3e:c4:24: cd:e0:9b:1d:69:1c:3d:fb:eb:cb:8c:17:56:3f:f6: b5:04:e8:01:32:ed:dc:8b:95:2f:a9:03:5a:c2:7f: b3:4c:89:ec:31:57:58:d0:65:00:39:fd:b9:0c:72: 56:31:81:0a:1f:fd:ed:ca:a4:27:d1:83:94:2a:20: 28:3c:5b:00:e8:8f:d8:38:aa:48:cc:2c:3b:a2:5b: d0:1a:92:70:5a:f2:ae:f6:48:7f:b7:d0:c6:56:50: 7c:f7:c0:c3:d2:38:ed:95:13:c8:ef:b9:06:4e:e3: 39:82:64:6b:b6:06:17:8e:93:a9:3a:8d:c0:e2:cf: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:C1:B1:85:89:FF:91:2A:D6:BD:89:29:4E:D6:0B:97:8E:08:C7 X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:4b:8d:ab:4d:54:59:0a:24:da:79:32:bb:a4:18:38:41: 66:41:3d:07:8f:ba:90:1e:7e:f6:c7:3c:6f:d3:cc:2e:d9:6e: 8d:64:0e:47:ab:6e:4e:75:28:dd:fc:cc:01:a2:a4:55:77:d6: ee:6c:da:e2:19:f4:3f:86:6d:81:62:a4:a1:a6:74:9f:21:69: f3:e0:fe:7d:d7:f1:75:9c:92:48:7e:73:83:a7:1f:17:80:fa: 0d:56:f0:b2:6b:8b:d5:40:d1:f8:5b:76:84:a4:27:44:9c:de: ac:54:69:c7:88:ea:ea:4c:fc:4d:dd:20:8a:1f:46:d6:2a:5b: 63:55:32:df:0b:5a:96:08:33:7e:67:79:08:da:e3:5a:f8:99: a6:ab:fa:9c:89:52:c9:0c:1d:b1:ad:54:cc:21:3e:51:d1:98: c4:e4:a5:8c:01:63:de:bc:1a:9b:f0:e0:b5:cb:35:9e:af:e7: 93:88:33:61:8c:5a:73:cc:3c:58:de:1d:9e:9d:23:ff:a3:14: a7:fc:d5:68:ee:ef:05:a8:de:68:d2:5f:3d:24:86:80:ab:ac: b4:08:50:86:c5:db:2c:b1:9c:41:ec:37:03:79:22:f8:b6:c7: de:3d:33:76:4d:c1:71:9c:a1:72:70:f0:72:b1:82:2c:79:86: 26:bd:73:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUwNTMxMDM1MzI0WhcNMjUwNjA3MDM1MzI0WjAYMRYwFAYD VQQDEw02ODNhN2QzNS0yYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KKobHgXqOPLRUR0zL2ygHwmL8076rM89vhOCjEdly6i4SXNf2ReUM7da8G0 aUvbb/jkPQNhtoWxDeUX9zsCLLF30aaFICN8MZXnaAipAdRXcnDA5u7oIXl4XTOz ip6HMtlpvs5Gfv7FDK9MRGutibw+BHiFGN+Y77bD9tt0v9vCBqY+xCTN4JsdaRw9 ++vLjBdWP/a1BOgBMu3ci5UvqQNawn+zTInsMVdY0GUAOf25DHJWMYEKH/3tyqQn 0YOUKiAoPFsA6I/YOKpIzCw7olvQGpJwWvKu9kh/t9DGVlB898DD0jjtlRPI77kG TuM5gmRrtgYXjpOpOo3A4s/hNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXJwbGF if+RKta9iSlO1guXjgjHMB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwxUuNq01UWQok2nkyu6QYOEFmQT0Hj7qQHn72xzxv08wu2W6NZA5H q25OdSjd/MwBoqRVd9bubNriGfQ/hm2BYqShpnSfIWnz4P591/F1nJJIfnODpx8X gPoNVvCya4vVQNH4W3aEpCdEnN6sVGnHiOrqTPxN3SCKH0bWKltjVTLfC1qWCDN+ Z3kI2uNa+Jmmq/qciVLJDB2xrVTMIT5R0ZjE5KWMAWPevBqb8OC1yzWer+eTiDNh jFpzzDxY3h2enSP/oxSn/NVo7u8FqN5o0l89JIaAq6y0CFCGxdsssZxB7DcDeSL4 tsfePTN2TcFxnKFycPBysYIseYYmvXO2 -----END CERTIFICATE-----Generated at Sat May 31 17:11:23 2025 by rpki-client