$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: A/H6fQYAHaWMkzvvjFaP+lFsay8fEfvmoaH7Ay4Hk4M= Subject key identifier: DA:28:4D:B8:42:12:8B:A6:AE:F9:93:9A:C4:F9:DA:F9:2F:F3:72:59 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02CC Signing time: Sat 31 May 2025 01:35:35 +0000 Manifest this update: Sat 31 May 2025 01:35:34 +0000 Manifest next update: Sat 07 Jun 2025 01:35:34 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: Sfhl9/8/t+NSjw9NPALntI5MJP1jtoj0Ol1Y0sAppL0=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: May 31 01:35:34 2025 GMT Not After : Jun 7 01:35:34 2025 GMT Subject: CN=683a5ce6-f244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:e0:56:37:aa:63:d4:04:49:c4:03:da:bc: b2:0c:f3:0c:dd:8e:16:42:81:5e:2f:25:4a:3d:b1: 43:df:87:de:fd:76:07:b9:31:12:89:a3:27:2e:fa: 66:e7:b5:9e:1a:77:aa:21:d2:f2:96:c2:ff:4d:e4: f0:84:26:5e:42:20:b8:72:e5:bc:63:e1:02:8c:f8: af:73:79:58:0e:13:d4:76:4a:98:41:30:34:10:ab: b5:c0:f5:4b:e8:ad:30:43:bc:61:af:12:43:11:a2: 4e:49:16:a3:b7:7a:ce:1f:e9:96:b3:9b:61:4b:5d: ad:9f:f3:78:c8:49:f7:f1:6f:53:78:f7:82:9e:78: 49:46:95:50:cc:48:9c:02:47:20:c9:24:7c:ed:7c: 4d:44:a7:c6:7c:10:7d:a3:a7:06:4c:ef:eb:f6:5c: 52:b5:67:29:92:94:b3:e7:7c:67:01:c9:da:88:72: 79:5c:98:eb:65:65:fb:4b:46:8c:8e:8f:76:36:91: 13:82:d7:16:9b:b1:6d:45:dc:63:1a:b6:7f:2a:65: 9b:9b:6e:e8:25:b9:a2:a2:d2:da:ec:1f:2f:9e:18: 34:92:be:aa:8e:b3:39:f7:b7:6f:fb:aa:aa:c3:bc: ae:6a:30:c0:12:67:09:d2:a6:88:73:0d:c4:c7:b4: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:28:4D:B8:42:12:8B:A6:AE:F9:93:9A:C4:F9:DA:F9:2F:F3:72:59 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:aa:ec:a3:f0:08:3d:1a:54:69:19:ee:55:d2:24:c0:c2:55: e1:f4:9a:91:e2:ed:1e:02:5c:02:40:bc:aa:6c:70:a2:84:40: f0:e4:ca:a2:19:7d:43:aa:1d:f0:a8:09:8e:f8:df:c8:65:6a: 36:63:a7:44:26:ef:1b:0b:b6:f5:97:a4:41:c9:1a:1c:5a:d9: 27:f5:d9:a4:e4:98:36:25:73:46:d2:c9:2c:61:98:4a:e9:8c: 5e:f9:77:0a:e2:28:9e:10:2c:d0:1c:89:eb:60:2f:97:d7:6c: 3d:e0:a2:47:a7:0d:fa:2e:e9:89:df:73:3e:d1:c9:cc:66:8d: 1e:70:f0:99:52:59:50:ba:fa:8a:36:c1:c4:0f:d5:38:3e:52: 9d:7f:1b:23:da:78:76:c3:b5:a0:46:ff:9e:76:0a:e9:1f:f2: a8:a0:b8:dd:84:4b:41:72:02:c3:9e:f1:ed:c4:74:ef:25:6a: f8:7d:bb:91:cc:83:3a:05:4f:2e:c9:11:3b:6e:45:26:b5:72: 11:80:32:5d:c5:9d:b7:90:8d:41:6f:6b:18:5a:04:f0:8f:0a: aa:de:47:06:42:61:ad:b3:b0:d1:57:d5:e3:25:03:81:51:1c: 0b:60:b9:d3:52:64:0a:c5:c5:04:7c:55:5c:e7:c9:a9:1f:fa: 69:dd:de:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwNTMxMDEzNTM0WhcNMjUwNjA3MDEzNTM0WjAYMRYwFAYD VQQDEw02ODNhNWNlNi1mMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa3gVjeqY9QEScQD2ryyDPMM3Y4WQoFeLyVKPbFD34fe/XYHuTESiaMnLvpm 57WeGneqIdLylsL/TeTwhCZeQiC4cuW8Y+ECjPivc3lYDhPUdkqYQTA0EKu1wPVL 6K0wQ7xhrxJDEaJOSRajt3rOH+mWs5thS12tn/N4yEn38W9TePeCnnhJRpVQzEic AkcgySR87XxNRKfGfBB9o6cGTO/r9lxStWcpkpSz53xnAcnaiHJ5XJjrZWX7S0aM jo92NpETgtcWm7FtRdxjGrZ/KmWbm27oJbmiotLa7B8vnhg0kr6qjrM597dv+6qq w7yuajDAEmcJ0qaIcw3Ex7TpFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNooTbhC EoumrvmTmsT52vkv83JZMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+quyj8Ag9GlRpGe5V0iTAwlXh9JqR4u0eAlwCQLyqbHCihEDw5Mqi GX1Dqh3wqAmO+N/IZWo2Y6dEJu8bC7b1l6RByRocWtkn9dmk5Jg2JXNG0sksYZhK 6Yxe+XcK4iieECzQHInrYC+X12w94KJHpw36LumJ33M+0cnMZo0ecPCZUllQuvqK NsHED9U4PlKdfxsj2nh2w7WgRv+edgrpH/KooLjdhEtBcgLDnvHtxHTvJWr4fbuR zIM6BU8uyRE7bkUmtXIRgDJdxZ23kI1Bb2sYWgTwjwqq3kcGQmGts7DRV9XjJQOB URwLYLnTUmQKxcUEfFVc58mpH/pp3d7Q -----END CERTIFICATE-----Generated at Sat May 31 16:44:52 2025 by rpki-client