$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: sh8g5xOlgxH8pIOUO04EoSyTlIjSmMdqfp9wAfM7DmA= Subject key identifier: 1D:E7:F1:DA:AD:BB:28:9E:B4:FF:44:94:CD:90:F2:CD:FE:49:A8:5B Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06C1 Signing time: Mon 12 May 2025 21:54:52 +0000 Manifest this update: Mon 12 May 2025 21:54:51 +0000 Manifest next update: Mon 19 May 2025 21:54:51 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: jXKdDVnQBQXs9N7dAY4Arf16ey9mcwoGkeIwIzl8dHQ=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: May 12 21:54:51 2025 GMT Not After : May 19 21:54:51 2025 GMT Subject: CN=68226e2b-b0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3b:d6:ef:fa:c3:5c:5c:70:19:28:04:ee:0b: 5d:90:ed:14:76:03:c9:f3:d1:f3:ae:8b:2d:6b:15: 6b:97:3d:38:c0:12:7f:ee:d1:59:3e:31:c5:5d:30: 2e:72:bd:69:f7:a5:5a:24:62:ce:e9:4b:63:bc:0b: 48:08:92:18:db:9e:42:88:9b:a2:4f:7c:c0:e8:8f: e7:ca:11:f4:fe:61:62:f2:af:4a:d8:89:d6:da:76: 33:3a:90:e8:50:89:18:ba:dc:78:08:af:32:7c:0e: 61:95:9e:2a:0e:44:3f:6e:59:ce:67:7e:4b:e0:79: 5c:16:e3:9b:d3:57:d4:01:79:3c:83:a5:38:53:7d: 43:10:0f:c9:71:47:d8:4e:16:69:29:b4:61:ee:88: a8:92:4b:96:31:07:fd:8c:ec:4a:a4:7a:cf:eb:a1: d8:3f:77:32:dc:ec:9d:63:e0:d3:f3:17:06:6b:8d: e6:0d:fa:6b:92:65:96:8d:f3:79:64:af:a7:ef:5e: 20:70:25:bb:26:e4:f3:8c:d2:66:fd:24:c8:5d:7a: 91:52:7d:b7:fd:6a:da:b0:7d:4f:63:e8:60:91:ae: 01:da:d0:50:ba:eb:96:bb:05:97:c7:02:cc:2f:20: e4:4f:fa:0f:b1:42:c6:1a:81:97:18:2b:88:a3:69: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E7:F1:DA:AD:BB:28:9E:B4:FF:44:94:CD:90:F2:CD:FE:49:A8:5B X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:86:94:aa:ea:38:8e:71:83:b9:08:b1:fd:78:0c:47:45:95: 14:3e:c8:2d:fa:f0:a5:e9:25:7d:14:dc:57:f3:5a:5e:66:88: 32:f2:cd:1d:cc:df:f8:3f:dc:cb:9d:2c:67:1e:23:31:13:24: f8:db:3b:1a:d7:2d:94:d5:20:41:db:e1:2e:4d:91:b4:e0:09: 78:93:e1:17:98:bb:0c:4a:8c:5e:a2:d1:25:85:48:ef:ed:41: 4a:76:e3:96:2a:9a:52:7e:d6:e5:03:f4:d3:cf:0e:54:76:3a: f8:ce:a1:34:f3:0e:b5:02:62:c9:6a:0a:21:b2:b6:2e:c1:c2: ca:41:f8:2b:d7:9f:8a:60:73:f2:db:97:b1:98:61:97:e6:a8: fc:49:17:52:f6:e6:49:26:18:cc:b2:9b:6c:4e:1c:2a:e5:77: 13:3e:22:48:92:20:4a:b5:be:6f:9d:2d:6a:eb:55:cc:8e:b6: 4a:6b:c7:dd:63:d2:aa:e3:3e:99:ce:d2:41:f2:25:7c:7e:bf: ce:ee:2d:01:c9:88:12:8c:2a:9a:9e:14:c7:c9:a8:c4:c2:ae: 26:32:b2:cb:27:36:64:26:ba:b5:95:3e:61:2d:e6:c4:a4:8b: a6:84:48:1d:22:6b:02:d9:e7:f7:ea:28:1a:45:f1:ed:a5:8e: b7:8f:5c:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwNTEyMjE1NDUxWhcNMjUwNTE5MjE1NDUxWjAYMRYwFAYD VQQDEw02ODIyNmUyYi1iMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jvW7/rDXFxwGSgE7gtdkO0UdgPJ89HzrostaxVrlz04wBJ/7tFZPjHFXTAu cr1p96VaJGLO6UtjvAtICJIY255CiJuiT3zA6I/nyhH0/mFi8q9K2InW2nYzOpDo UIkYutx4CK8yfA5hlZ4qDkQ/blnOZ35L4HlcFuOb01fUAXk8g6U4U31DEA/JcUfY ThZpKbRh7oiokkuWMQf9jOxKpHrP66HYP3cy3OydY+DT8xcGa43mDfprkmWWjfN5 ZK+n714gcCW7JuTzjNJm/STIXXqRUn23/WrasH1PY+hgka4B2tBQuuuWuwWXxwLM LyDkT/oPsULGGoGXGCuIo2ndMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3n8dqt uyietP9ElM2Q8s3+SahbMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqhpSq6jiOcYO5CLH9eAxHRZUUPsgt+vCl6SV9FNxX81peZogy8s0d zN/4P9zLnSxnHiMxEyT42zsa1y2U1SBB2+EuTZG04Al4k+EXmLsMSoxeotElhUjv 7UFKduOWKppSftblA/TTzw5Udjr4zqE08w61AmLJagohsrYuwcLKQfgr15+KYHPy 25exmGGX5qj8SRdS9uZJJhjMsptsThwq5XcTPiJIkiBKtb5vnS1q61XMjrZKa8fd Y9Kq4z6ZztJB8iV8fr/O7i0ByYgSjCqanhTHyajEwq4mMrLLJzZkJrq1lT5hLebE pIumhEgdImsC2ef36igaRfHtpY63j1yD -----END CERTIFICATE-----Generated at Wed May 14 19:34:35 2025 by rpki-client