$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: TF6ybmz/jimx19OS8+4Ll8izf86dSJcUzbj6FFArpKY= Subject key identifier: D2:C9:9B:FF:01:44:8C:58:D3:1D:2C:BE:AF:DD:6F:C2:F1:5F:F0:D2 Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 0143 Signing time: Tue 13 May 2025 03:32:31 +0000 Manifest this update: Tue 13 May 2025 03:32:30 +0000 Manifest next update: Tue 20 May 2025 03:32:30 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: VhrMQr1z/Ay0kjh1uKMumACJb250lQCSJOvxjjTfXZs=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: RP6wVW/OcAubd0XMOITxdOYRXk34RJNOj+5wyZuhGYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: May 13 03:32:30 2025 GMT Not After : May 20 03:32:30 2025 GMT Subject: CN=6822bd4f-ec12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:df:c4:a4:45:12:9a:a5:15:74:27:48:41: 20:c2:d5:c7:a1:7c:6b:dc:38:85:37:96:d3:7d:f1: 91:99:f9:a4:66:3d:88:01:12:0d:d9:db:20:5a:5b: e5:20:30:b7:ad:b4:aa:56:da:3d:42:06:8c:02:8d: 43:85:92:70:55:9d:ea:3c:3d:9b:b3:c9:ae:ba:02: 4c:66:d7:76:55:f5:2f:ae:4c:b1:47:25:a6:05:14: 91:3d:eb:d7:73:77:50:ca:f5:c8:b9:f3:03:ac:d0: ac:05:78:8a:ca:19:df:fb:d5:1f:62:3f:c3:03:88: 71:3c:a0:2f:8e:e3:7f:af:d2:af:6f:d3:b3:02:f2: 42:05:43:88:0f:75:63:79:96:95:a4:a8:64:89:56: 65:77:4a:1a:b5:b8:f5:9e:65:5e:60:2d:f2:9b:21: 5c:9e:de:66:0f:60:62:80:8f:6b:2d:f6:5c:46:16: df:44:b4:3b:8b:7b:c5:60:41:e7:50:7b:45:24:7f: 57:e5:8e:e8:f0:9f:31:63:fa:16:d5:d0:bc:ed:cb: c5:eb:d9:f6:09:25:2d:0f:3b:35:a6:2f:70:bf:2e: 1c:ea:fd:65:92:a9:a3:31:c2:a3:a4:61:e9:00:35: 2c:c7:4a:b8:f0:82:5e:ac:cd:ae:a3:c4:56:48:20: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:9B:FF:01:44:8C:58:D3:1D:2C:BE:AF:DD:6F:C2:F1:5F:F0:D2 X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:c2:4b:b3:b5:10:8e:81:9a:79:37:e8:5a:21:1e:82:84:be: 09:f5:3a:3d:65:c0:9a:89:3e:7c:9a:be:78:00:16:2c:dd:68: e7:8d:5a:c2:6a:d9:12:d6:77:42:64:b0:95:9b:55:33:db:68: 7d:8b:45:ea:71:83:aa:45:27:a2:78:38:2f:19:52:f2:45:4a: 0b:63:d8:fe:34:55:a8:62:ce:69:22:a6:9f:63:76:04:4d:dd: 63:32:b5:35:aa:03:82:aa:07:1f:df:a1:e2:53:48:48:da:65: ea:78:fa:85:1f:21:f4:25:59:65:6c:7e:51:5d:88:59:ae:d4: 5a:a5:45:26:55:cd:83:12:42:cc:79:e2:47:a5:ff:bf:bc:93: ce:fe:96:22:0d:57:63:47:e6:9c:bc:d6:24:1a:66:d6:b0:6c: 56:7d:af:ec:6e:92:05:27:0d:f4:75:46:20:6d:94:8a:9c:6c: 28:d5:31:f9:14:97:ec:42:4d:30:23:f2:18:39:64:44:d8:88: 37:29:2b:95:d5:e2:54:dc:41:3e:9c:d7:94:cd:b0:6a:e5:34: a1:23:b2:f4:be:13:18:b9:84:9f:23:bf:e4:55:fb:e0:bb:1b: af:a9:91:25:1b:11:05:e6:e5:32:11:b3:4d:0d:8b:8c:b3:4f: ef:0e:19:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUwNTEzMDMzMjMwWhcNMjUwNTIwMDMzMjMwWjAYMRYwFAYD VQQDEw02ODIyYmQ0Zi1lYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/TfxKRFEpqlFXQnSEEgwtXHoXxr3DiFN5bTffGRmfmkZj2IARIN2dsgWlvl IDC3rbSqVto9QgaMAo1DhZJwVZ3qPD2bs8muugJMZtd2VfUvrkyxRyWmBRSRPevX c3dQyvXIufMDrNCsBXiKyhnf+9UfYj/DA4hxPKAvjuN/r9Kvb9OzAvJCBUOID3Vj eZaVpKhkiVZld0oatbj1nmVeYC3ymyFcnt5mD2BigI9rLfZcRhbfRLQ7i3vFYEHn UHtFJH9X5Y7o8J8xY/oW1dC87cvF69n2CSUtDzs1pi9wvy4c6v1lkqmjMcKjpGHp ADUsx0q48IJerM2uo8RWSCDauwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLJm/8B RIxY0x0svq/db8LxX/DSMB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7wkuztRCOgZp5N+haIR6ChL4J9To9ZcCaiT58mr54ABYs3WjnjVrC atkS1ndCZLCVm1Uz22h9i0XqcYOqRSeieDgvGVLyRUoLY9j+NFWoYs5pIqafY3YE Td1jMrU1qgOCqgcf36HiU0hI2mXqePqFHyH0JVllbH5RXYhZrtRapUUmVc2DEkLM eeJHpf+/vJPO/pYiDVdjR+acvNYkGmbWsGxWfa/sbpIFJw30dUYgbZSKnGwo1TH5 FJfsQk0wI/IYOWRE2Ig3KSuV1eJU3EE+nNeUzbBq5TShI7L0vhMYuYSfI7/kVfvg uxuvqZElGxEF5uUyEbNNDYuMs0/vDhlD -----END CERTIFICATE-----Generated at Tue May 13 15:21:05 2025 by rpki-client