$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: NSRWj5jREL/u9+srEYcCL9UnPZmgZtuuKhOff2tDyNs= Subject key identifier: 66:88:24:3B:20:30:C4:BD:7A:A5:80:5A:91:14:D7:07:A0:A9:28:CD Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 09FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 191A Signing time: Mon 12 May 2025 17:31:57 +0000 Manifest this update: Mon 12 May 2025 17:31:56 +0000 Manifest next update: Mon 19 May 2025 17:31:56 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: f9FmEqMVD+qV6/KAcVGulUDMHzk+Ud0TiaR/lVOOd8s=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2559 (0x9ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: May 12 17:31:56 2025 GMT Not After : May 19 17:31:56 2025 GMT Subject: CN=6822308c-45bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:29:0c:4d:5c:d8:74:62:05:b2:b3:d1:fa:96: 4c:c5:2c:67:45:55:06:9c:87:9d:da:c5:08:0a:a8: b1:81:af:5a:69:1c:a3:e6:76:28:4f:e6:fc:81:35: 01:b9:85:90:1d:89:e6:71:dd:2c:9c:b9:9a:38:93: a5:a1:dd:ec:28:2d:78:d5:26:36:7c:86:89:5d:99: 04:58:c4:51:68:f9:4b:c8:fb:81:06:d7:27:de:7b: ff:33:e2:a7:5d:4c:54:19:fa:36:64:e0:aa:68:5b: c4:0a:02:26:3e:f3:ae:e0:05:5d:dd:4e:b6:bd:96: 98:61:20:63:24:19:10:cf:66:b2:49:6d:a1:d4:d0: 9a:cc:e5:af:29:62:98:1f:2d:6e:74:c2:b9:44:ca: fd:a7:57:9a:a2:96:ea:32:d3:79:42:05:04:e0:03: 01:92:8e:35:7e:27:cf:7b:13:9b:a0:ad:39:b0:e2: da:33:be:89:7e:c9:18:ef:54:c3:89:f1:6d:61:11: 6a:d6:df:bb:f3:f8:93:f5:7f:32:2e:28:55:a3:13: 69:f2:ba:82:61:6e:11:5b:97:28:48:da:e6:6f:94: 3f:6a:11:12:3e:b2:cc:65:0f:eb:40:a5:a3:1e:c5: ea:bc:04:b2:fe:d4:bc:48:9e:9f:a1:03:0b:c9:c7: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:24:3B:20:30:C4:BD:7A:A5:80:5A:91:14:D7:07:A0:A9:28:CD X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:97:14:48:f1:fd:27:5f:4c:db:63:8c:0b:d0:36:86:3b:92: a0:fc:d4:34:4c:81:d5:47:14:1d:81:12:e3:38:6f:cc:a9:d8: d1:75:1e:8e:e7:f4:ef:c6:71:06:92:90:ae:5d:75:d3:cd:b1: 40:cb:58:fb:8a:97:37:10:6c:4e:7b:64:34:a5:e7:b5:d2:38: 1f:80:da:4f:70:27:61:42:80:df:23:9f:d2:e5:44:02:6c:c1: 7b:14:2c:24:d7:f5:67:23:4f:b4:b7:c6:a3:00:5f:21:36:03: f1:cf:bc:f6:55:c6:90:05:c1:e0:24:10:f4:ef:5d:75:dd:9b: d4:08:24:e4:ad:1c:f8:68:0d:4d:b6:f5:b1:55:3b:bc:b8:0b: 3b:6b:d0:2c:3c:75:bd:14:23:5d:60:37:93:ce:2f:f8:30:c7: c9:2e:4d:d5:46:6f:c4:34:bf:10:36:73:7f:f7:1e:65:30:c4: e3:57:16:2e:e8:dd:5f:1d:67:17:e4:71:3c:a5:4e:50:7f:3d: 77:9f:8d:5c:1b:b6:10:56:f5:86:75:2f:dc:56:cc:74:a0:3f: ac:2d:1a:ca:ca:45:b2:88:6c:be:7a:98:be:fc:f3:bb:5e:53: 2a:66:5a:59:f3:dc:18:ea:b0:2c:82:0e:ff:bb:c6:91:6a:66: b6:25:7e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwNTEyMTczMTU2WhcNMjUwNTE5MTczMTU2WjAYMRYwFAYD VQQDEw02ODIyMzA4Yy00NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ikMTVzYdGIFsrPR+pZMxSxnRVUGnIed2sUICqixga9aaRyj5nYoT+b8gTUB uYWQHYnmcd0snLmaOJOlod3sKC141SY2fIaJXZkEWMRRaPlLyPuBBtcn3nv/M+Kn XUxUGfo2ZOCqaFvECgImPvOu4AVd3U62vZaYYSBjJBkQz2aySW2h1NCazOWvKWKY Hy1udMK5RMr9p1eaopbqMtN5QgUE4AMBko41fifPexOboK05sOLaM76JfskY71TD ifFtYRFq1t+78/iT9X8yLihVoxNp8rqCYW4RW5coSNrmb5Q/ahESPrLMZQ/rQKWj HsXqvASy/tS8SJ6foQMLycfH7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaIJDsg MMS9eqWAWpEU1wegqSjNMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBylxRI8f0nX0zbY4wL0DaGO5Kg/NQ0TIHVRxQdgRLjOG/MqdjRdR6O 5/TvxnEGkpCuXXXTzbFAy1j7ipc3EGxOe2Q0pee10jgfgNpPcCdhQoDfI5/S5UQC bMF7FCwk1/VnI0+0t8ajAF8hNgPxz7z2VcaQBcHgJBD071113ZvUCCTkrRz4aA1N tvWxVTu8uAs7a9AsPHW9FCNdYDeTzi/4MMfJLk3VRm/ENL8QNnN/9x5lMMTjVxYu 6N1fHWcX5HE8pU5Qfz13n41cG7YQVvWGdS/cVsx0oD+sLRrKykWyiGy+epi+/PO7 XlMqZlpZ89wY6rAsgg7/u8aRama2JX74 -----END CERTIFICATE-----Generated at Wed May 14 10:37:47 2025 by rpki-client