$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: mU8e4k4n4vX2ylYmdF1ARNlIvY3utpRjiWpYDkd7yoE= Subject key identifier: 61:49:EB:86:84:3A:C2:1B:A1:47:0A:84:72:99:F8:1F:12:99:3D:7A Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 05D9 Signing time: Wed 14 May 2025 23:03:14 +0000 Manifest this update: Wed 14 May 2025 23:03:14 +0000 Manifest next update: Wed 21 May 2025 23:03:14 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: Vm0ZA3ZzpnGm3905X8Gg7yZDUrksxzmG8b7vujW2HNs=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: May 14 23:03:14 2025 GMT Not After : May 21 23:03:14 2025 GMT Subject: CN=68252132-e419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:08:92:73:de:fc:18:18:44:fc:93:eb:0e: 11:80:90:e8:98:cc:43:1b:ad:a7:fb:bf:1d:17:4d: e7:ae:21:65:ce:6b:f2:e9:14:a6:6f:44:92:59:f1: 3b:50:5e:48:c5:42:4b:ab:5c:5e:45:78:87:a1:fa: d5:98:bb:88:03:e8:d1:ea:50:93:0b:0e:10:2c:b7: 94:d6:33:eb:a4:22:22:b9:9d:13:37:fb:3e:d5:10: 57:8c:2e:67:e1:a8:bc:f4:d1:bb:ab:d1:e0:82:89: 5b:59:a3:99:d2:b2:8f:a7:1c:ff:cf:45:29:25:9c: ff:02:6f:7e:fc:14:5e:78:9e:db:bf:39:b2:68:06: 5d:1e:5c:68:52:a9:dd:a0:a7:df:47:c9:ca:1a:7c: 49:e8:f0:45:a3:08:cd:13:b6:61:00:91:1a:be:9b: fb:24:06:6e:67:07:0d:f7:f7:34:85:1f:b2:eb:cb: 88:6f:22:c1:f0:42:66:98:fa:5e:d5:8c:d6:48:06: ae:ba:79:9e:2b:3c:88:47:44:d1:e6:d5:54:e0:79: 69:f7:bf:9b:9d:fb:8f:72:7e:46:66:61:2f:f7:3b: fc:2f:77:11:c5:d4:a6:9a:b8:06:66:eb:41:2b:a9: 77:a8:6b:71:56:36:5e:d4:ce:78:ac:2f:78:c6:41: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:EB:86:84:3A:C2:1B:A1:47:0A:84:72:99:F8:1F:12:99:3D:7A X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:bf:e9:29:a8:ad:95:7b:5b:20:dc:53:88:da:c6:76:4c:86: 05:6b:04:54:2a:6e:13:c7:1e:8d:56:7b:26:40:e9:13:14:91: 3b:9d:f7:73:6d:99:a6:b6:58:88:57:cf:7d:8a:a0:93:14:93: b7:b1:e1:3b:c1:ed:df:86:f8:63:93:f5:8a:dd:36:4b:d6:03: ba:14:af:9e:8b:03:04:16:7d:bf:fb:3d:20:57:60:02:b0:c0: c3:23:c4:93:61:58:0b:da:f6:a6:bd:ba:1c:1b:db:a1:06:e7: f8:10:e9:de:b7:3d:0d:01:de:7d:b6:8b:54:0c:e5:db:b8:e7: 73:32:bc:94:60:9f:99:45:5b:e1:e3:dc:c5:93:08:ad:06:a5: bc:0d:7b:72:f5:32:c2:4f:fc:c8:a9:9a:73:ea:dd:8c:88:8e: 31:24:6b:cd:7d:71:93:f7:ec:f3:75:b9:62:75:f3:43:43:c3: 75:94:21:1c:60:e3:b6:f2:5d:50:9f:1f:4c:77:7b:54:15:e9: 37:c6:0b:c2:8c:9f:54:e3:75:70:ad:cf:6b:27:2d:01:07:26: a1:b7:20:a7:73:5b:45:f2:0c:59:e2:58:77:f3:bc:de:12:41: e7:8e:e7:8b:c4:eb:f1:f4:e9:c5:b1:c6:be:41:e6:46:ae:b1: 26:1b:ed:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwNTE0MjMwMzE0WhcNMjUwNTIxMjMwMzE0WjAYMRYwFAYD VQQDEw02ODI1MjEzMi1lNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iMIknPe/BgYRPyT6w4RgJDomMxDG62n+78dF03nriFlzmvy6RSmb0SSWfE7 UF5IxUJLq1xeRXiHofrVmLuIA+jR6lCTCw4QLLeU1jPrpCIiuZ0TN/s+1RBXjC5n 4ai89NG7q9HggolbWaOZ0rKPpxz/z0UpJZz/Am9+/BReeJ7bvzmyaAZdHlxoUqnd oKffR8nKGnxJ6PBFowjNE7ZhAJEavpv7JAZuZwcN9/c0hR+y68uIbyLB8EJmmPpe 1YzWSAauunmeKzyIR0TR5tVU4Hlp97+bnfuPcn5GZmEv9zv8L3cRxdSmmrgGZutB K6l3qGtxVjZe1M54rC94xkH+BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFJ64aE OsIboUcKhHKZ+B8SmT16MB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDv+kpqK2Ve1sg3FOI2sZ2TIYFawRUKm4Txx6NVnsmQOkTFJE7nfdz bZmmtliIV899iqCTFJO3seE7we3fhvhjk/WK3TZL1gO6FK+eiwMEFn2/+z0gV2AC sMDDI8STYVgL2vamvbocG9uhBuf4EOnetz0NAd59totUDOXbuOdzMryUYJ+ZRVvh 49zFkwitBqW8DXty9TLCT/zIqZpz6t2MiI4xJGvNfXGT9+zzdblidfNDQ8N1lCEc YOO28l1Qnx9Md3tUFek3xgvCjJ9U43Vwrc9rJy0BByahtyCnc1tF8gxZ4lh387ze EkHnjueLxOvx9OnFsca+QeZGrrEmG+1V -----END CERTIFICATE-----Generated at Fri May 16 11:08:06 2025 by rpki-client