$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: c6QyOFPVivpzycqzffq7m3F1C2NC/aSWQqKms7A18nQ= Subject key identifier: 0D:60:72:CC:4A:45:8D:E7:22:A3:C5:54:CD:B8:3B:00:DA:99:5A:C0 Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 0134 Signing time: Sat 31 May 2025 04:11:39 +0000 Manifest this update: Sat 31 May 2025 04:11:38 +0000 Manifest next update: Sat 07 Jun 2025 04:11:38 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: pkXiNrmw7XkNbbx0jsG+aC+hr8xkOPwmcWCB9MIvIvA=) 2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=) 3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: May 31 04:11:38 2025 GMT Not After : Jun 7 04:11:38 2025 GMT Subject: CN=683a817b-9547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:43:f0:85:f8:a7:82:16:2a:89:f7:c8:f7: b4:c2:b0:f6:01:47:24:b6:8e:c3:d9:9e:07:94:de: 2c:4e:01:5d:0a:e7:6a:78:7f:24:98:04:19:4d:ae: cd:3c:c3:b1:70:8d:3a:7f:a9:8d:9c:cb:60:83:fd: c6:11:60:f1:37:c0:2f:91:5a:d2:df:22:e3:ec:07: 02:fd:96:39:d3:f7:ce:ed:ef:e7:24:6b:d6:ff:ff: a9:89:dc:b6:77:e5:81:6a:db:1e:67:13:9d:f5:91: 48:2f:e6:8a:c1:74:78:81:2b:e2:5c:1b:a3:81:b0: 7b:dc:90:39:c2:b5:12:29:5d:c7:28:ec:1e:4d:8c: aa:15:fd:d6:1e:45:dd:3a:b3:ae:db:e6:d7:49:43: b9:99:47:2c:0d:a7:9c:49:44:4c:69:de:cc:65:89: bc:17:d5:22:8a:95:df:a2:36:83:15:06:2d:10:5d: f1:0e:9a:20:df:ad:57:88:98:66:ff:9d:46:d5:25: ed:dd:0e:73:eb:90:59:58:de:f8:e1:88:8f:2a:ff: ab:8c:01:06:b8:12:83:a8:de:13:62:77:e7:5b:01: 75:85:e6:52:a1:b5:25:a6:23:94:3f:59:2d:74:a2: a0:f9:17:f4:ed:ef:2f:d2:d8:e5:ff:d2:f0:30:a5: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:60:72:CC:4A:45:8D:E7:22:A3:C5:54:CD:B8:3B:00:DA:99:5A:C0 X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:38:67:09:78:05:44:97:cb:a1:d3:b5:90:3a:b7:df:7d:61: e5:bb:6b:bc:5e:fc:26:56:ab:64:1d:f2:04:2d:30:af:3a:18: da:d8:71:9d:06:0a:c3:66:97:97:b2:b5:f8:44:be:05:5c:a3: 91:ae:69:2f:d6:0c:e1:10:37:90:62:e1:1a:6e:83:35:33:a9: 5e:bd:d1:03:09:ab:cb:d0:08:27:f6:ef:22:90:23:6d:b6:26: 8e:e9:8e:54:a8:21:f3:2d:e4:7d:bf:44:18:41:bb:0b:b7:70: 56:da:e6:1d:83:92:3c:a0:40:87:c8:74:1c:36:e7:e1:ec:4d: d0:43:6c:1d:b7:0c:c3:dd:d9:0a:74:9b:66:d6:df:41:7d:ae: 1b:df:d8:0e:29:fe:d6:63:2c:f6:e8:9f:10:1e:a3:0f:fe:04: b9:9a:5a:28:15:01:1c:ed:da:12:54:68:93:b9:fe:61:e0:13: ff:94:d0:9d:c6:54:0d:c3:11:2d:24:c8:66:42:bf:da:20:b2: 95:97:bb:53:8f:3b:bc:d9:7b:4e:73:38:f1:03:a4:b0:42:f1: c4:fa:d1:ce:a3:7c:8e:52:e1:aa:74:a8:5f:f2:12:58:b4:88: 28:9f:a2:56:3c:c8:e9:64:ac:c9:e2:e6:44:81:8a:48:c8:96: c7:c2:54:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUwNTMxMDQxMTM4WhcNMjUwNjA3MDQxMTM4WjAYMRYwFAYD VQQDEw02ODNhODE3Yi05NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26ND8IX4p4IWKon3yPe0wrD2AUckto7D2Z4HlN4sTgFdCudqeH8kmAQZTa7N PMOxcI06f6mNnMtgg/3GEWDxN8AvkVrS3yLj7AcC/ZY50/fO7e/nJGvW//+pidy2 d+WBatseZxOd9ZFIL+aKwXR4gSviXBujgbB73JA5wrUSKV3HKOweTYyqFf3WHkXd OrOu2+bXSUO5mUcsDaecSURMad7MZYm8F9UiipXfojaDFQYtEF3xDpog361XiJhm /51G1SXt3Q5z65BZWN744YiPKv+rjAEGuBKDqN4TYnfnWwF1heZSobUlpiOUP1kt dKKg+Rf07e8v0tjl/9LwMKXIJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1gcsxK RY3nIqPFVM24OwDamVrAMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMOGcJeAVEl8uh07WQOrfffWHlu2u8XvwmVqtkHfIELTCvOhja2HGd BgrDZpeXsrX4RL4FXKORrmkv1gzhEDeQYuEaboM1M6levdEDCavL0Agn9u8ikCNt tiaO6Y5UqCHzLeR9v0QYQbsLt3BW2uYdg5I8oECHyHQcNufh7E3QQ2wdtwzD3dkK dJtm1t9Bfa4b39gOKf7WYyz26J8QHqMP/gS5mlooFQEc7doSVGiTuf5h4BP/lNCd xlQNwxEtJMhmQr/aILKVl7tTjzu82XtOczjxA6SwQvHE+tHOo3yOUuGqdKhf8hJY tIgon6JWPMjpZKzJ4uZEgYpIyJbHwlSV -----END CERTIFICATE-----Generated at Sat May 31 17:01:15 2025 by rpki-client