$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: rJ7tfRJ2pO90TiNexvWq/ZqXQuWFgVeFgGeQsjXGmOg= Subject key identifier: 61:07:C6:79:FD:AE:86:14:E2:7D:45:11:16:BE:91:EB:2C:4D:68:48 Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 012C Signing time: Tue 13 May 2025 03:50:57 +0000 Manifest this update: Tue 13 May 2025 03:50:56 +0000 Manifest next update: Tue 20 May 2025 03:50:56 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: Atv1bH3USmC/KnfnzB1F3TCPK7zI3GU5EtnP9tsj9tQ=) 2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=) 3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: May 13 03:50:56 2025 GMT Not After : May 20 03:50:56 2025 GMT Subject: CN=6822c1a1-d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:e8:48:b4:39:fc:dc:fe:f3:53:94:e4:73: ce:00:98:6f:26:c0:d7:89:52:46:d1:ab:3a:d2:ac: df:c7:a0:86:18:58:9c:ad:14:3e:12:6a:b4:94:1c: d1:59:02:bd:31:b6:08:14:8e:7b:a6:f9:e0:0f:f3: 00:3b:55:5d:0c:a6:66:a0:da:fa:c3:5e:69:b5:52: 34:eb:4c:75:b4:65:cc:48:76:b3:99:7f:3b:ee:23: c0:68:56:a7:4d:f2:df:1b:9d:b2:f6:8a:8b:de:dd: 1c:3c:2d:6a:14:1b:c6:5a:73:a1:cd:b0:22:43:b4: 71:8a:ab:4d:4c:23:a1:4d:a5:57:7c:13:c1:84:57: fa:fa:2e:c2:9a:29:60:aa:40:6c:e6:3f:87:f0:b7: d0:71:13:f6:7d:46:a5:12:fc:f3:64:f2:4a:71:aa: 19:23:d9:3a:56:69:d1:3b:3b:ac:76:59:12:6d:26: 6d:22:cb:b1:56:9b:05:a7:6e:ea:94:25:63:20:c4: 60:7d:41:90:b6:f6:e9:48:db:9b:e1:23:98:d7:cd: 66:03:92:1b:2d:93:f4:f7:59:62:cd:e5:cb:96:7e: 00:c7:b6:52:3a:84:25:f2:70:76:27:b1:99:b1:cd: 38:10:0d:83:d1:4c:f0:21:eb:70:3a:04:26:06:f9: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:07:C6:79:FD:AE:86:14:E2:7D:45:11:16:BE:91:EB:2C:4D:68:48 X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:02:b6:9a:8f:47:f3:6f:88:c6:ba:52:7b:6b:ad:a2:2b:86: 1e:a5:47:1b:96:33:61:3a:c0:bb:4d:24:1a:bb:07:e3:e1:13: e7:ba:ca:70:a1:18:68:40:e6:be:78:dc:8c:01:b5:7b:24:04: 52:54:1d:72:da:02:d3:8a:82:94:9d:4f:f3:3b:bb:28:53:23: 3c:6a:21:81:14:a4:4d:08:7e:da:bb:5e:4d:1e:83:6a:00:2e: 0d:94:63:b7:f0:cd:0b:a1:d1:86:2d:aa:65:3b:1d:dd:d1:e3: dc:66:e9:b7:80:38:df:12:69:02:96:6d:87:48:fa:99:b1:ae: 33:ab:33:d3:84:75:1f:b8:8e:a3:60:d0:d6:fe:81:82:56:9b: 50:c8:6e:70:97:1b:c0:c4:ef:0c:90:cd:58:67:12:46:80:e2: 50:23:bd:b0:49:80:50:35:24:c0:d4:b8:33:70:19:2b:67:3a: aa:c0:a6:d5:b0:7a:36:9b:d1:0f:af:85:fd:de:8e:63:9a:3e: 12:74:cb:db:41:b8:a9:93:67:42:81:ac:59:3f:5c:21:22:ce: 58:64:6f:27:70:cc:fc:8f:2d:e0:b7:24:55:96:00:3e:be:32: ea:86:e5:f3:9e:9a:7a:31:a1:9c:ef:42:06:69:68:c7:17:d8: c3:6d:bc:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUwNTEzMDM1MDU2WhcNMjUwNTIwMDM1MDU2WjAYMRYwFAYD VQQDEw02ODIyYzFhMS1kMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqujoSLQ5/Nz+81OU5HPOAJhvJsDXiVJG0as60qzfx6CGGFicrRQ+Emq0lBzR WQK9MbYIFI57pvngD/MAO1VdDKZmoNr6w15ptVI060x1tGXMSHazmX877iPAaFan TfLfG52y9oqL3t0cPC1qFBvGWnOhzbAiQ7RxiqtNTCOhTaVXfBPBhFf6+i7Cmilg qkBs5j+H8LfQcRP2fUalEvzzZPJKcaoZI9k6VmnROzusdlkSbSZtIsuxVpsFp27q lCVjIMRgfUGQtvbpSNub4SOY181mA5IbLZP091lizeXLln4Ax7ZSOoQl8nB2J7GZ sc04EA2D0UzwIetwOgQmBvkE1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEHxnn9 roYU4n1FERa+kessTWhIMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwAraaj0fzb4jGulJ7a62iK4YepUcbljNhOsC7TSQauwfj4RPnuspw oRhoQOa+eNyMAbV7JARSVB1y2gLTioKUnU/zO7soUyM8aiGBFKRNCH7au15NHoNq AC4NlGO38M0LodGGLaplOx3d0ePcZum3gDjfEmkClm2HSPqZsa4zqzPThHUfuI6j YNDW/oGCVptQyG5wlxvAxO8MkM1YZxJGgOJQI72wSYBQNSTA1LgzcBkrZzqqwKbV sHo2m9EPr4X93o5jmj4SdMvbQbipk2dCgaxZP1whIs5YZG8ncMz8jy3gtyRVlgA+ vjLqhuXznpp6MaGc70IGaWjHF9jDbbx2 -----END CERTIFICATE-----Generated at Tue May 13 05:08:40 2025 by rpki-client