$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: QkYiEWCx1K7F8q7KC5EMSiH/cKY7Xq2KV5ltUpBfQlo= Subject key identifier: 31:E8:F7:BD:4D:70:E6:B5:2D:3D:FB:9A:27:30:CD:2F:F5:19:4B:CD Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: EC Signing time: Sat 31 May 2025 05:23:27 +0000 Manifest this update: Sat 31 May 2025 05:23:26 +0000 Manifest next update: Sat 07 Jun 2025 05:23:26 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: GpkWQwQ6fGuqXCdSVJhHVhPiW1Y+Bv4fkNAiFUcf/Bw=) 2: 59E4E2A415BA11F084EFBB7CC4F9AE02.roa (hash: HZDyu1joYX+dxKnFptiA5xky7OHNJkIOKQTmsVfZf5A=) 3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: May 31 05:23:26 2025 GMT Not After : Jun 7 05:23:26 2025 GMT Subject: CN=683a924e-bb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:fb:60:03:0d:37:0c:e6:4e:d9:f5:85:82: 83:77:5f:36:0b:46:a1:e7:ca:97:71:f6:18:55:99: 87:ff:2f:64:88:52:e9:9b:6e:e4:b4:12:db:99:cb: 86:d1:e2:a6:f7:0b:01:5c:8e:33:1e:e1:87:75:19: 79:89:3d:59:50:36:5e:3a:01:94:cb:0a:16:bc:5d: 8d:1f:e1:44:12:c5:1e:fb:4e:f9:63:28:60:9e:f6: 98:40:c2:14:e4:0f:ee:ec:c7:a6:eb:c3:25:71:ba: 62:95:57:0c:78:2a:04:ec:99:d7:3a:ba:5e:69:e9: 0c:34:98:e6:a1:f5:75:6b:ad:14:3b:08:e0:97:8b: ba:26:29:76:54:ab:49:4f:7f:a1:86:3c:84:9f:c1: 99:4d:f4:f4:93:e4:af:5c:e9:10:84:af:dd:b8:b3: 09:72:6b:e2:79:88:da:88:78:25:ab:0b:8b:d3:92: 80:d6:0e:df:18:18:8a:1b:4e:9b:ab:9c:2d:d4:e7: 93:99:8b:bb:66:85:e2:dd:ad:9d:41:c6:29:dc:9f: 4b:24:57:de:5d:48:86:11:05:22:39:28:d6:3b:6f: 20:85:28:48:50:a7:39:c7:0c:e5:6a:d6:ee:f7:c2: 24:16:5e:8f:8d:4e:56:22:1c:0f:7f:86:18:2b:57: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E8:F7:BD:4D:70:E6:B5:2D:3D:FB:9A:27:30:CD:2F:F5:19:4B:CD X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:18:96:ab:43:25:86:a8:48:da:28:b9:b7:9f:42:d8:14:78: d3:8f:58:17:3e:b4:5b:c4:19:e8:c5:cc:90:54:2c:1d:a8:93: a0:2e:bf:d8:4f:8d:df:71:75:0a:b3:cb:55:d8:86:fd:8c:a0: a2:43:4f:86:d1:46:a6:9c:06:2b:5c:32:df:3c:64:9b:a7:26: 1b:80:43:57:ad:2b:81:bc:5c:43:6e:81:af:5a:1d:5c:15:a5: 67:f3:1b:51:97:ea:a1:2a:3b:52:d3:09:21:e2:21:ab:6d:c3: b2:83:50:96:28:eb:ef:e1:4d:06:7c:62:70:e1:61:0a:d4:b3: 7e:a6:5c:7e:bf:8f:a1:04:22:e5:dd:4f:71:88:08:80:c7:fa: aa:9e:39:8d:d6:5d:4b:69:41:bc:2e:4b:31:64:b8:49:d0:08: 27:7a:f1:ed:25:ab:1f:d9:6c:9c:f3:b0:b3:5e:ec:61:a0:f3: f0:79:6a:c8:a7:85:fb:da:a9:84:43:06:00:6c:57:a2:5e:78: f5:d0:bd:63:d1:a0:b8:a4:80:23:77:b6:1e:4e:84:c6:00:a2: 31:cc:be:70:1f:27:1b:a4:d6:e5:b1:25:58:59:f5:44:47:69: 25:90:70:17:3d:af:f1:3c:a8:df:d2:97:bc:49:9e:96:f9:05: 59:73:1e:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUwNTMxMDUyMzI2WhcNMjUwNjA3MDUyMzI2WjAYMRYwFAYD VQQDEw02ODNhOTI0ZS1iYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWb7YAMNNwzmTtn1hYKDd182C0ah58qXcfYYVZmH/y9kiFLpm27ktBLbmcuG 0eKm9wsBXI4zHuGHdRl5iT1ZUDZeOgGUywoWvF2NH+FEEsUe+075YyhgnvaYQMIU 5A/u7Mem68MlcbpilVcMeCoE7JnXOrpeaekMNJjmofV1a60UOwjgl4u6Jil2VKtJ T3+hhjyEn8GZTfT0k+SvXOkQhK/duLMJcmvieYjaiHglqwuL05KA1g7fGBiKG06b q5wt1OeTmYu7ZoXi3a2dQcYp3J9LJFfeXUiGEQUiOSjWO28ghShIUKc5xwzlatbu 98IkFl6PjU5WIhwPf4YYK1dwRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHo971N cOa1LT37micwzS/1GUvNMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgGJarQyWGqEjaKLm3n0LYFHjTj1gXPrRbxBnoxcyQVCwdqJOgLr/Y T43fcXUKs8tV2Ib9jKCiQ0+G0UamnAYrXDLfPGSbpyYbgENXrSuBvFxDboGvWh1c FaVn8xtRl+qhKjtS0wkh4iGrbcOyg1CWKOvv4U0GfGJw4WEK1LN+plx+v4+hBCLl 3U9xiAiAx/qqnjmN1l1LaUG8LksxZLhJ0AgnevHtJasf2Wyc87CzXuxhoPPweWrI p4X72qmEQwYAbFeiXnj10L1j0aC4pIAjd7YeToTGAKIxzL5wHycbpNblsSVYWfVE R2klkHAXPa/xPKjf0pe8SZ6W+QVZcx6Q -----END CERTIFICATE-----Generated at Sat May 31 17:34:25 2025 by rpki-client