$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: SFZLy4kOIahkAoAcVtv46o4WZbKn/TXWhBYJvlo7eb4= Subject key identifier: 11:01:10:F2:2D:EA:03:4F:C4:01:27:1C:60:B5:D8:1A:F2:70:68:4D Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 07C6 Signing time: Mon 12 May 2025 20:51:20 +0000 Manifest this update: Mon 12 May 2025 20:51:20 +0000 Manifest next update: Mon 19 May 2025 20:51:20 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: ZBzf5BTshZxS1KKlMUQ2wvLSn/xHrAH8CExeRGpjDn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: May 12 20:51:20 2025 GMT Not After : May 19 20:51:20 2025 GMT Subject: CN=68225f48-eb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:e4:10:14:a5:8d:49:50:83:c1:30:3f:fc: bd:53:02:de:13:1e:4a:05:56:6e:b7:c7:4d:61:f4: 19:da:b3:2a:0b:ca:6d:25:61:4d:45:8b:36:77:ca: 2e:7d:67:46:fb:b7:95:f1:64:b0:37:17:af:0c:7a: 6d:a1:f5:86:06:89:eb:8d:46:05:e4:12:7b:76:de: af:10:b2:8d:3f:67:38:76:b8:6a:5d:56:05:29:4c: d3:c7:e1:52:9f:b2:b7:f1:06:36:cf:32:40:af:fe: e7:8f:dd:cd:67:4f:7a:46:d2:58:6d:4d:0d:ee:52: 85:57:2b:57:73:ef:c2:2f:67:be:49:2c:eb:04:e8: 23:4c:3f:e2:6f:f1:1d:6b:d1:7b:36:c3:9a:01:a3: 61:d1:29:4b:52:a0:49:cf:cb:3a:3b:87:ba:5a:f8: 5c:2d:3e:d1:0d:57:6b:8c:2d:84:71:58:87:1a:ce: 79:44:f5:dd:9a:1a:8c:c3:a0:18:8d:a9:eb:be:03: 69:35:1e:9f:b2:bb:29:a8:48:81:df:9f:6b:48:d0: 5c:52:13:1e:4a:84:b3:0d:19:ea:b5:2e:95:ce:cf: 78:7b:4b:93:6a:50:ff:80:ed:0f:f3:5e:6f:58:2c: b3:9a:2c:63:45:1e:26:5b:6e:a3:af:de:80:4f:e5: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:10:F2:2D:EA:03:4F:C4:01:27:1C:60:B5:D8:1A:F2:70:68:4D X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:38:59:b7:8c:c4:6d:ad:5f:bd:3b:a5:92:05:19:e9:0c:72: fb:a4:4f:12:e3:a4:95:67:41:38:b1:46:ab:f6:9f:c0:97:df: 09:d2:fc:5c:ae:a6:9b:10:f0:9f:d9:c1:35:a5:28:64:5a:f1: af:ea:47:21:b3:93:f3:cb:75:c3:a1:1e:79:d6:e7:7b:ed:de: fb:00:d9:0e:2f:d6:5a:69:7a:35:cc:46:44:db:eb:4e:8f:91: 76:c3:b5:1f:47:00:a6:e7:ff:f8:89:c1:34:2e:54:9a:e3:16: e3:09:c2:b5:41:78:d6:e2:7a:9d:4c:20:7c:c2:51:07:42:56: 1e:f6:01:2e:af:71:e3:de:7a:01:c2:54:7a:27:61:c1:17:c1: 46:2f:fb:f0:dc:0a:65:ba:fa:a8:7a:c5:d1:be:b3:49:d0:ad: 80:bf:fb:76:b7:b2:3f:b9:38:6b:a7:58:fb:39:84:b9:3f:c9: 11:ee:c5:0d:81:ac:e0:3f:a2:0d:e1:fd:63:02:3a:82:93:7e: f7:b4:18:d7:6d:90:d5:32:66:b5:39:d9:12:06:e2:f7:36:a8: f5:80:fe:c5:ed:2b:2f:cc:3b:cd:eb:c4:7a:0f:21:b4:88:4a: f5:37:46:ab:59:50:4f:5e:13:09:1a:cc:10:56:a2:ba:e7:98: a6:98:34:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUwNTEyMjA1MTIwWhcNMjUwNTE5MjA1MTIwWjAYMRYwFAYD VQQDEw02ODIyNWY0OC1lYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4XkEBSljUlQg8EwP/y9UwLeEx5KBVZut8dNYfQZ2rMqC8ptJWFNRYs2d8ou fWdG+7eV8WSwNxevDHptofWGBonrjUYF5BJ7dt6vELKNP2c4drhqXVYFKUzTx+FS n7K38QY2zzJAr/7nj93NZ096RtJYbU0N7lKFVytXc+/CL2e+SSzrBOgjTD/ib/Ed a9F7NsOaAaNh0SlLUqBJz8s6O4e6WvhcLT7RDVdrjC2EcViHGs55RPXdmhqMw6AY janrvgNpNR6fsrspqEiB359rSNBcUhMeSoSzDRnqtS6Vzs94e0uTalD/gO0P815v WCyzmixjRR4mW26jr96AT+XWRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEBEPIt 6gNPxAEnHGC12BrycGhNMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChOFm3jMRtrV+9O6WSBRnpDHL7pE8S46SVZ0E4sUar9p/Al98J0vxc rqabEPCf2cE1pShkWvGv6kchs5Pzy3XDoR551ud77d77ANkOL9ZaaXo1zEZE2+tO j5F2w7UfRwCm5//4icE0LlSa4xbjCcK1QXjW4nqdTCB8wlEHQlYe9gEur3Hj3noB wlR6J2HBF8FGL/vw3ApluvqoesXRvrNJ0K2Av/t2t7I/uThrp1j7OYS5P8kR7sUN gazgP6IN4f1jAjqCk373tBjXbZDVMma1OdkSBuL3Nqj1gP7F7SsvzDvN68R6DyG0 iEr1N0arWVBPXhMJGswQVqK655immDSE -----END CERTIFICATE-----Generated at Mon May 12 22:26:47 2025 by rpki-client