$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json) Hash identifier: u1FBhidgdSoLtNHXAk34br3o7jN6DbY981iXw79TJoY= Subject key identifier: 65:B3:DE:B6:D6:F5:36:BC:F4:1C:CF:92:17:4A:5F:81:A2:AE:DC:C2 Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft Manifest number: 85 Signing time: Fri 09 May 2025 05:41:12 +0000 Manifest this update: Fri 09 May 2025 05:41:11 +0000 Manifest next update: Fri 16 May 2025 05:41:11 +0000 Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: l/7jgG7PjhHCvURVDsj1iwfV/HP4BY4Zr3tkn1BeMH0=) 2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: qpNZ0Lm7ohL4bDYSXZ5HFsKxSW3wfA050YYCOcr+GtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Validity Not Before: May 9 05:41:11 2025 GMT Not After : May 16 05:41:11 2025 GMT Subject: CN=681d9577-5636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:98:2b:e8:e8:1e:bc:b8:5f:69:fc:ca:64: 27:06:b2:81:65:4c:ef:e2:15:f7:3d:22:7f:99:af: 4f:ab:05:37:c8:87:70:74:00:72:62:e9:65:49:f3: 40:2e:d7:42:78:23:14:c9:ac:82:d4:5f:0c:82:3a: fe:a9:82:83:ba:b7:60:43:b5:5b:f9:08:39:bc:7b: 94:e0:40:19:71:75:88:3e:0c:75:5c:75:46:c2:ca: a4:d1:85:4c:65:34:e5:c3:9a:06:36:d0:ac:74:62: 76:c4:ed:97:75:b5:e3:0e:59:9e:20:e5:dd:c4:58: cc:07:d9:ec:e2:05:88:59:c7:15:bc:e4:db:da:83: 4e:5f:83:2e:69:90:1e:88:f4:48:52:15:22:45:29: 4a:64:0a:0a:11:70:12:3c:12:a5:21:8f:46:a8:68: 32:cb:00:3d:3b:71:f5:b9:e7:c6:d9:ae:70:b3:1b: bb:d6:fe:1b:89:2f:2f:3b:d7:e4:44:ed:93:46:e4: 64:3f:a7:d2:b5:4e:5f:31:10:0b:68:92:e4:63:8a: 8b:fa:d4:2f:c4:d6:1d:f0:d3:a8:f5:69:22:ea:c9: 86:40:2a:93:e6:1a:5e:fa:32:58:83:0d:18:2d:fe: 6a:fe:d7:c0:f4:dc:7a:5a:e3:c1:b2:f3:6c:37:87: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:DE:B6:D6:F5:36:BC:F4:1C:CF:92:17:4A:5F:81:A2:AE:DC:C2 X509v3 Authority Key Identifier: keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:a5:2c:e5:79:d3:2a:6b:dd:38:df:a1:0d:cc:da:07:35: 19:f9:8f:da:ba:0a:2b:b1:0e:27:71:41:a9:0b:09:3c:2c:a7: a8:11:a5:32:e3:ff:d5:0e:c9:17:87:7a:5c:f6:c8:4d:be:31: 47:b2:2c:50:e0:dd:dd:ef:13:88:bf:7a:e0:51:2c:63:e8:48: 6c:27:b5:e3:35:2e:9e:a7:32:24:5a:3c:ac:6f:68:e2:01:b6: 60:36:ca:36:81:5f:d9:b2:44:2f:13:7a:9e:11:b1:2c:a5:3f: 6a:61:e3:ea:15:67:42:db:52:7f:c7:91:d8:ac:a3:43:88:3e: ca:1c:a2:e1:7f:57:0f:64:7a:f6:bb:07:52:e9:85:a1:41:fa: f3:01:1f:09:f2:5b:77:e7:9c:81:79:84:ee:e2:79:01:04:2a: 18:de:28:03:dc:97:34:b6:45:1e:30:4a:ab:a7:db:6a:6e:7f: 90:9c:f4:72:f7:df:88:c9:01:34:2e:3d:70:82:74:d3:7b:36: f1:cf:50:f6:76:01:61:ee:76:8d:dd:68:50:62:24:80:03:41: 1e:dd:df:69:ee:f1:1f:de:a8:2e:57:2a:58:26:66:83:d9:dd: f8:7f:25:95:3e:a5:a6:75:16:ee:b5:bd:c4:39:94:8b:8c:4b: ac:a5:29:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3 MzM1RTRGNTkwHhcNMjUwNTA5MDU0MTExWhcNMjUwNTE2MDU0MTExWjAYMRYwFAYD VQQDEw02ODFkOTU3Ny01NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qyYK+joHry4X2n8ymQnBrKBZUzv4hX3PSJ/ma9PqwU3yIdwdAByYullSfNA LtdCeCMUyayC1F8Mgjr+qYKDurdgQ7Vb+Qg5vHuU4EAZcXWIPgx1XHVGwsqk0YVM ZTTlw5oGNtCsdGJ2xO2XdbXjDlmeIOXdxFjMB9ns4gWIWccVvOTb2oNOX4MuaZAe iPRIUhUiRSlKZAoKEXASPBKlIY9GqGgyywA9O3H1uefG2a5wsxu71v4biS8vO9fk RO2TRuRkP6fStU5fMRALaJLkY4qL+tQvxNYd8NOo9Wki6smGQCqT5hpe+jJYgw0Y Lf5q/tfA9Nx6WuPBsvNsN4dpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWz3rbW 9Ta89BzPkhdKX4GirtzCMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54 SHhsRWFPcUJWRTF6TmVUMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2KUs5XnTKmvdON+hDczaBzUZ+Y/augorsQ4ncUGpCwk8LKeoEaUy 4//VDskXh3pc9shNvjFHsixQ4N3d7xOIv3rgUSxj6EhsJ7XjNS6epzIkWjysb2ji AbZgNso2gV/ZskQvE3qeEbEspT9qYePqFWdC21J/x5HYrKNDiD7KHKLhf1cPZHr2 uwdS6YWhQfrzAR8J8lt355yBeYTu4nkBBCoY3igD3Jc0tkUeMEqrp9tqbn+QnPRy 99+IyQE0Lj1wgnTTezbxz1D2dgFh7naN3WhQYiSAA0Ee3d9p7vEf3qguVypYJmaD 2d34fyWVPqWmdRbutb3EOZSLjEuspSlR -----END CERTIFICATE-----Generated at Sun May 11 01:08:31 2025 by rpki-client