$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: higopvev7yXGQq4lDTR0Y8NTNPw99KVUw1pclQk+Vh0= Subject key identifier: 28:9A:D4:E1:61:0F:37:0B:BF:A5:67:7F:66:62:3F:52:2E:0A:27:B2 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02C3 Signing time: Sun 11 May 2025 00:58:23 +0000 Manifest this update: Sun 11 May 2025 00:58:22 +0000 Manifest next update: Sun 18 May 2025 00:58:22 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: xFNQ9QIb9hbxi7Kln6oTyMQJEIkZ+x6/PZ9wbPZuoKY=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: May 11 00:58:22 2025 GMT Not After : May 18 00:58:22 2025 GMT Subject: CN=681ff62f-2035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:ea:ec:08:e1:65:55:99:bf:ac:5d:7e:87: db:10:5a:a3:7e:eb:f9:66:1e:3a:b7:6e:7c:25:6a: 5b:4f:43:50:7a:63:45:dd:73:43:cc:dd:2a:8c:9b: 8c:3b:e9:7e:4c:90:28:66:11:96:17:0f:b7:a0:22: 6b:c6:f0:e7:86:c5:ed:a4:d5:99:85:47:f1:e5:73: 03:bd:81:4d:bd:46:1e:1a:8b:d0:e5:38:7e:f4:ca: b0:68:b0:62:fb:76:bf:7e:1a:46:db:55:e1:67:09: 23:f8:9d:57:e5:90:05:37:f6:08:77:83:e4:93:17: c6:f0:f0:77:ca:97:fc:0c:9d:89:5a:c9:76:82:bb: ae:de:41:88:63:4b:39:19:df:21:f1:9a:21:c7:9a: ef:d5:bf:06:ad:47:a0:b6:22:bf:fa:73:85:22:4e: fc:a7:4f:81:2d:61:8e:e8:83:7a:55:bc:9c:10:9c: 0d:ef:d4:03:ba:64:39:cb:1b:cf:a8:85:61:8a:90: 67:04:47:37:00:cc:2a:6e:bb:0f:3e:52:34:88:f9: 61:a9:0d:57:3c:3a:53:21:26:f6:0e:5e:b4:02:04: 8e:ae:66:72:5a:dd:f5:34:42:4e:98:86:a2:e6:ab: 40:4b:a2:90:30:6f:3e:ba:1b:d3:24:fb:b1:5a:be: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:D4:E1:61:0F:37:0B:BF:A5:67:7F:66:62:3F:52:2E:0A:27:B2 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a1:8f:60:ce:f2:c3:87:8d:20:0e:94:8d:fa:bc:de:d5:24: ab:21:9d:b7:fc:a0:fd:90:d8:a7:00:f9:9e:59:6e:41:d9:e9: 1d:56:4d:d4:61:10:e2:70:52:93:64:03:25:53:ff:64:04:02: ee:4e:2f:23:72:4e:f0:f8:94:72:f8:69:ed:90:5b:48:28:b3: 8b:34:8c:79:0b:a2:5f:6b:f8:70:e4:65:8b:18:bc:0e:b5:22: 90:93:5e:b0:41:a0:3e:4b:05:37:f0:46:92:d8:6f:a1:ff:25: c8:f5:43:47:92:af:0c:a6:6a:33:86:2f:38:6f:0e:d7:eb:a9: 97:76:bc:7c:60:dc:13:f9:82:81:8b:79:84:a1:a7:70:af:36: 9c:6e:94:94:1f:89:f6:aa:99:e6:f7:74:7e:d5:fb:04:a5:06: 13:9d:d5:c0:04:c4:65:ec:6d:97:fb:aa:30:d5:3b:c9:9d:93: 45:87:fb:5a:07:92:ef:3d:61:30:ed:4f:a9:6b:8c:fe:fe:2a: d6:32:75:0a:41:89:71:a6:c1:3e:46:7e:6d:db:0a:c6:88:70: cd:8f:5d:14:64:25:99:b9:16:67:a0:77:d2:b9:35:2c:2e:cc: 57:da:f9:21:20:de:9e:bf:65:dd:1a:20:82:60:41:36:65:95: 4e:a2:be:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwNTExMDA1ODIyWhcNMjUwNTE4MDA1ODIyWjAYMRYwFAYD VQQDEw02ODFmZjYyZi0yMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvijq7AjhZVWZv6xdfofbEFqjfuv5Zh46t258JWpbT0NQemNF3XNDzN0qjJuM O+l+TJAoZhGWFw+3oCJrxvDnhsXtpNWZhUfx5XMDvYFNvUYeGovQ5Th+9MqwaLBi +3a/fhpG21XhZwkj+J1X5ZAFN/YId4PkkxfG8PB3ypf8DJ2JWsl2gruu3kGIY0s5 Gd8h8Zohx5rv1b8GrUegtiK/+nOFIk78p0+BLWGO6IN6VbycEJwN79QDumQ5yxvP qIVhipBnBEc3AMwqbrsPPlI0iPlhqQ1XPDpTISb2Dl60AgSOrmZyWt31NEJOmIai 5qtAS6KQMG8+uhvTJPuxWr5Z6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCia1OFh DzcLv6Vnf2ZiP1IuCieyMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQoY9gzvLDh40gDpSN+rze1SSrIZ23/KD9kNinAPmeWW5B2ekdVk3U YRDicFKTZAMlU/9kBALuTi8jck7w+JRy+GntkFtIKLOLNIx5C6Jfa/hw5GWLGLwO tSKQk16wQaA+SwU38EaS2G+h/yXI9UNHkq8Mpmozhi84bw7X66mXdrx8YNwT+YKB i3mEoadwrzacbpSUH4n2qpnm93R+1fsEpQYTndXABMRl7G2X+6ow1TvJnZNFh/ta B5LvPWEw7U+pa4z+/irWMnUKQYlxpsE+Rn5t2wrGiHDNj10UZCWZuRZnoHfSuTUs LsxX2vkhIN6ev2XdGiCCYEE2ZZVOor5a -----END CERTIFICATE-----Generated at Sun May 11 16:47:04 2025 by rpki-client