$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: 7F56JpJuSCWgt6kaUfnXldXqbtqjpa1UwIxIbqclark= Subject key identifier: 81:51:65:A0:82:E9:EA:A7:7F:F8:86:64:FB:B3:06:84:85:F5:9A:6A Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 023F Signing time: Sun 11 May 2025 01:25:43 +0000 Manifest this update: Sun 11 May 2025 01:25:42 +0000 Manifest next update: Sun 18 May 2025 01:25:42 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: I/QSRqxnogzQgXg+PykIrI3AK1WEblGoAPQdbNwy7HM=) 2: 08B1833C1DE511F08883F35AC4F9AE02.roa (hash: qt/12QruPULSLrioUdGLIDziwQVI0MwcPO5Znz57Xok=) 3: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: May 11 01:25:42 2025 GMT Not After : May 18 01:25:42 2025 GMT Subject: CN=681ffc97-af9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:59:66:57:93:6a:fd:71:21:94:f7:0a:7b: 69:b8:c4:a0:ec:09:d9:63:16:45:40:70:79:22:dc: 01:d8:c6:32:15:de:b9:3f:8e:16:e6:34:78:c8:88: 73:56:72:47:54:7b:29:85:44:d8:64:58:c6:4f:ad: 46:b6:15:db:ed:9d:b4:82:ea:e8:c8:aa:14:e2:c6: 89:60:33:4f:0c:f0:49:e4:95:ef:31:cb:76:97:49: 17:b4:c8:72:8a:7d:ca:a4:c6:da:5f:1f:67:b9:90: 62:4d:c0:37:37:3a:6a:27:b8:69:d1:6b:0b:71:d0: ee:4a:6d:92:f8:b3:41:4f:16:90:d3:d2:0d:7c:2f: a7:f7:3f:79:95:98:58:97:7b:dc:43:8b:66:ac:fa: 4b:bf:94:5b:7e:aa:c8:90:ca:7d:d9:37:63:59:14: 3f:4c:3a:3d:ac:06:71:0a:db:50:72:6d:76:87:c3: ea:91:80:21:83:02:80:bb:41:02:90:ee:d7:9a:35: 4b:60:b0:4d:5e:05:1a:ea:83:dd:e7:a4:2e:4e:28: f4:57:c4:c7:cc:db:f3:49:df:6a:fe:b2:32:db:1b: 84:d6:fb:12:22:94:53:56:65:14:97:de:35:8a:7f: 76:19:41:df:9e:ab:43:40:5c:03:f1:ac:d7:a4:93: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:65:A0:82:E9:EA:A7:7F:F8:86:64:FB:B3:06:84:85:F5:9A:6A X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2e:96:89:70:34:a3:ca:6c:f6:1d:ca:0c:ee:e7:09:b2:21: bc:b0:d7:76:15:7a:80:f6:20:5f:4d:92:54:35:a1:a7:88:d3: 83:b7:a5:a5:6c:27:b4:3e:fc:ea:59:ad:bf:b4:51:a3:fb:fb: 1d:f7:73:60:d1:09:d6:72:8f:cb:78:13:3f:3a:76:79:9c:e1: 19:59:c6:ad:d5:f8:0a:8a:f3:c7:ed:82:a2:58:e8:40:34:e7: 5a:c0:ee:34:43:36:b5:a8:a0:06:f1:d0:af:5a:4e:08:8d:e5: a1:bc:76:5a:a3:98:8f:79:51:08:90:b9:66:d9:bf:96:37:24: 04:0a:00:74:6a:26:3b:25:5e:a7:96:75:40:26:16:91:65:60: 5f:90:08:0a:62:50:f0:48:59:70:cb:ff:68:7c:a6:63:d3:40: da:26:a7:2a:8b:e8:fc:70:35:6a:c9:4b:a4:5d:c8:36:cb:ac: 8a:ec:ee:7e:23:29:69:11:f4:1c:4e:5f:e0:c8:ec:cf:38:66: a5:b5:25:8c:ee:d1:9c:d8:d1:c3:61:be:6c:7a:65:c4:49:86: 3c:a1:95:91:c0:cd:c7:0e:d7:e8:e6:f2:07:50:d2:d2:75:87: 3f:33:46:2c:f4:c5:15:6a:2c:35:af:5f:56:f1:6d:70:c0:53: 96:3f:1a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjUwNTExMDEyNTQyWhcNMjUwNTE4MDEyNTQyWjAYMRYwFAYD VQQDEw02ODFmZmM5Ny1hZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBtZZleTav1xIZT3CntpuMSg7AnZYxZFQHB5ItwB2MYyFd65P44W5jR4yIhz VnJHVHsphUTYZFjGT61GthXb7Z20guroyKoU4saJYDNPDPBJ5JXvMct2l0kXtMhy in3KpMbaXx9nuZBiTcA3NzpqJ7hp0WsLcdDuSm2S+LNBTxaQ09INfC+n9z95lZhY l3vcQ4tmrPpLv5RbfqrIkMp92TdjWRQ/TDo9rAZxCttQcm12h8PqkYAhgwKAu0EC kO7XmjVLYLBNXgUa6oPd56QuTij0V8THzNvzSd9q/rIy2xuE1vsSIpRTVmUUl941 in92GUHfnqtDQFwD8azXpJO0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFRZaCC 6eqnf/iGZPuzBoSF9ZpqMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAILpaJcDSjymz2HcoM7ucJsiG8sNd2FXqA9iBfTZJUNaGniNODt6Wl bCe0PvzqWa2/tFGj+/sd93Ng0QnWco/LeBM/OnZ5nOEZWcat1fgKivPH7YKiWOhA NOdawO40Qza1qKAG8dCvWk4IjeWhvHZao5iPeVEIkLlm2b+WNyQECgB0aiY7JV6n lnVAJhaRZWBfkAgKYlDwSFlwy/9ofKZj00DaJqcqi+j8cDVqyUukXcg2y6yK7O5+ IylpEfQcTl/gyOzPOGaltSWM7tGc2NHDYb5semXESYY8oZWRwM3HDtfo5vIHUNLS dYc/M0Ys9MUVaiw1r19W8W1wwFOWPxov -----END CERTIFICATE-----Generated at Sun May 11 15:26:29 2025 by rpki-client