$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: 4Jq4vYTqO7wrQzPnYwgCj+Wg1VEltSVrGDABZX1zLEU= Subject key identifier: 98:4F:51:EC:85:AB:F7:B8:45:16:86:2B:D4:39:E3:1A:71:E9:E9:58 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A12 Signing time: Wed 14 May 2025 19:56:06 +0000 Manifest this update: Wed 14 May 2025 19:56:06 +0000 Manifest next update: Wed 21 May 2025 19:56:06 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: GEvWBIJsgSL3bHD+bZhi4a3qc3FJPIAoieuxnKxBaxI=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2586 (0xa1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: May 14 19:56:06 2025 GMT Not After : May 21 19:56:06 2025 GMT Subject: CN=6824f556-5bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:85:0b:4a:ff:48:12:26:dd:61:93:84:5c: 2f:a1:b8:a6:67:1b:a7:ad:50:5f:d9:fc:50:71:60: f6:61:d9:d4:06:81:0c:f7:08:28:7f:03:c8:87:f4: 23:4f:00:bc:eb:0d:9c:33:a1:2c:f2:06:9d:03:e8: c7:1a:54:79:13:44:22:b1:b4:db:ff:19:63:52:da: 31:8b:76:a2:ca:59:9c:c8:ed:30:1e:15:37:98:55: 60:12:c0:f9:ff:47:df:81:6e:ba:03:84:00:43:a7: 96:5f:99:04:36:c1:fc:00:dc:13:53:2c:5f:38:66: a1:fb:f0:7e:f8:8b:a2:58:b9:20:a1:a8:89:e4:98: c2:8a:14:6d:5f:03:fa:4b:f3:16:ef:1c:94:f6:3d: 5e:79:40:6f:c9:75:16:bd:0c:62:f5:1a:9d:e3:9d: 4d:ec:8c:82:c8:ff:36:70:a4:e1:73:c4:68:31:6a: 86:32:b4:2f:df:eb:7c:8b:12:2c:e6:5a:ed:45:eb: 31:ed:56:f6:06:ca:42:b3:21:61:df:e6:cf:f1:76: 41:be:ca:cf:b4:cf:f5:b4:6b:ef:5b:05:81:b5:13: 22:b5:47:fc:14:eb:ec:83:16:de:c4:92:a4:15:73: 9b:b2:47:c4:82:1a:28:59:d1:57:dc:8c:63:b3:0c: df:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:51:EC:85:AB:F7:B8:45:16:86:2B:D4:39:E3:1A:71:E9:E9:58 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:26:91:b6:78:ea:44:3a:7f:22:2e:17:f9:09:d0:ed:c6:f0: 85:2f:ff:95:30:26:3a:a2:95:53:89:8b:85:0f:b2:59:62:74: b1:82:f4:1d:b4:6a:60:14:d9:5e:f8:3e:03:80:02:6b:fc:f3: 09:95:f0:ba:2a:51:1f:13:55:2f:a4:2c:e8:ee:4c:b1:75:e4: 8b:e8:cc:a1:2e:bb:9b:bd:2c:41:fa:00:45:13:b1:09:c0:7c: 5c:01:e1:11:83:6c:3f:f4:80:fa:fe:8a:93:72:6a:b8:f0:78: d8:2c:5a:21:51:f5:43:1b:cc:02:e9:21:8c:c9:fe:bb:06:79: 05:25:5d:83:a7:c6:05:cb:ce:4f:e8:32:88:49:a9:4a:60:90: d7:76:ca:43:13:08:ea:40:bf:21:8a:2d:ce:cc:71:de:45:12: f6:25:91:ee:5f:e1:96:c6:6f:28:74:41:93:e0:d0:10:db:87: ed:fa:1d:8a:a5:71:07:ba:f1:b6:2b:e8:56:ca:1e:72:e6:f2: a2:a8:bb:0e:07:35:66:48:fa:6c:1f:6f:41:11:f0:92:4c:dc: e8:db:cd:68:8c:ca:a4:0b:45:3c:7d:f4:74:90:b2:12:f2:d2: 82:9f:d6:da:59:f7:6a:4c:06:09:e9:0d:2c:d1:33:20:95:24: b6:82:a0:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwNTE0MTk1NjA2WhcNMjUwNTIxMTk1NjA2WjAYMRYwFAYD VQQDEw02ODI0ZjU1Ni01YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GWFC0r/SBIm3WGThFwvobimZxunrVBf2fxQcWD2YdnUBoEM9wgofwPIh/Qj TwC86w2cM6Es8gadA+jHGlR5E0QisbTb/xljUtoxi3aiylmcyO0wHhU3mFVgEsD5 /0ffgW66A4QAQ6eWX5kENsH8ANwTUyxfOGah+/B++IuiWLkgoaiJ5JjCihRtXwP6 S/MW7xyU9j1eeUBvyXUWvQxi9Rqd451N7IyCyP82cKThc8RoMWqGMrQv3+t8ixIs 5lrtResx7Vb2BspCsyFh3+bP8XZBvsrPtM/1tGvvWwWBtRMitUf8FOvsgxbexJKk FXObskfEghooWdFX3IxjswzfxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhPUeyF q/e4RRaGK9Q54xpx6elYMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2JpG2eOpEOn8iLhf5CdDtxvCFL/+VMCY6opVTiYuFD7JZYnSxgvQd tGpgFNle+D4DgAJr/PMJlfC6KlEfE1UvpCzo7kyxdeSL6MyhLrubvSxB+gBFE7EJ wHxcAeERg2w/9ID6/oqTcmq48HjYLFohUfVDG8wC6SGMyf67BnkFJV2Dp8YFy85P 6DKISalKYJDXdspDEwjqQL8hii3OzHHeRRL2JZHuX+GWxm8odEGT4NAQ24ft+h2K pXEHuvG2K+hWyh5y5vKiqLsOBzVmSPpsH29BEfCSTNzo281ojMqkC0U8ffR0kLIS 8tKCn9baWfdqTAYJ6Q0s0TMglSS2gqBe -----END CERTIFICATE-----Generated at Thu May 15 09:59:00 2025 by rpki-client