$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: ei4zuAUI0RscJjoPD9VNGAOd2q2e6TLLWkJtletCWo4= Subject key identifier: B4:13:CE:06:C9:89:A7:09:2B:AD:44:B5:E4:E6:EA:E4:FC:31:AC:E2 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 03EF Signing time: Mon 05 May 2025 00:11:44 +0000 Manifest this update: Mon 05 May 2025 00:11:43 +0000 Manifest next update: Mon 12 May 2025 00:11:43 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: KSPtzsaL6DpJP8wzMwdj1/wjrifC5saMy9NjGsQ8MtE=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: 1iuXJipvz24oOntaPEU1wj4mqlPSsDFfiyLqXTsQZv4=) 3: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: May 5 00:11:43 2025 GMT Not After : May 12 00:11:43 2025 GMT Subject: CN=6818023f-bf13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:98:50:c5:39:a9:71:65:ce:3d:71:38:e3: e6:a9:87:67:ae:a8:a4:4e:81:5f:3a:b3:81:93:18: de:51:05:c2:e1:ad:c2:75:3b:2d:07:69:1e:b8:de: a4:66:69:87:98:0f:4d:f8:69:f4:78:14:fd:74:6f: c7:67:29:3c:73:9f:3f:94:38:c3:df:77:a1:e4:46: 16:88:cc:d2:71:c8:ed:13:5f:42:15:47:e3:1c:95: 84:ca:ea:d5:24:c9:74:d7:8e:7c:7d:eb:38:07:20: d9:1a:27:3c:c4:44:91:6a:6b:b6:35:bb:81:98:c7: 81:4e:9f:03:f7:a9:c8:40:d1:6a:4f:fc:f9:b7:ba: 7c:fe:a7:8b:ca:94:9a:1b:58:f3:1f:eb:39:d0:18: 99:d7:b6:44:2a:11:19:6c:93:7c:33:0f:1c:37:8b: f2:3f:d9:d7:ae:28:7f:d1:c9:1f:97:7b:de:45:ac: 54:9d:fd:f2:f6:41:e0:7a:ca:17:78:50:f4:96:c6: 72:0a:d7:75:33:0e:d0:c3:6c:08:5f:0b:d0:29:1a: 7d:e1:0f:34:a9:35:66:1e:8f:d7:1e:7e:ef:36:80: bf:ee:a2:3c:be:c0:ce:63:3b:e1:7e:a1:54:c8:89: 0f:fa:0c:30:29:83:66:ab:19:9b:d8:24:dc:0e:fb: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:13:CE:06:C9:89:A7:09:2B:AD:44:B5:E4:E6:EA:E4:FC:31:AC:E2 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3b:9e:7a:2c:aa:c8:bc:7c:56:e3:d9:df:9a:5b:db:eb:0e: f4:44:af:98:a7:fc:3a:0e:e1:45:e0:8d:e1:f2:1b:b0:eb:27: f2:42:9f:a1:ee:b6:17:9a:27:ac:1f:ed:06:94:b4:37:45:80: aa:6c:15:a4:f1:76:40:8c:06:5f:7b:27:97:35:81:5a:ea:85: 02:b8:30:70:26:31:16:51:2a:b2:45:b6:1f:c0:8b:5b:20:be: 3b:96:51:dd:7e:9b:c3:3e:26:bc:d5:79:23:4d:db:f7:d0:0b: 64:b0:e1:2c:1e:c8:3f:d4:41:5b:58:b7:fa:8e:c4:95:36:4e: a7:8a:bf:5b:3c:8d:46:29:d3:20:1d:80:f9:cc:94:81:85:41: a3:6b:ea:d2:ea:01:ac:d2:81:58:ae:8c:39:18:4f:06:3c:e4: ec:27:c6:29:d4:4b:6c:c8:42:ab:6c:8d:59:aa:ee:fa:3e:74: 27:26:0f:90:9a:1f:79:68:20:86:15:a6:96:ce:45:2c:cd:95: c9:a5:96:86:f9:1d:93:f7:26:53:b2:40:25:d1:bf:5f:45:d1: da:7d:8d:e6:89:59:6e:ee:4c:ef:ec:0b:01:0e:a3:de:b9:93: 4f:1e:ce:72:f6:68:69:d6:b5:3f:05:eb:46:21:b5:da:73:24: b1:68:41:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwNTA1MDAxMTQzWhcNMjUwNTEyMDAxMTQzWjAYMRYwFAYD VQQDEw02ODE4MDIzZi1iZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqSYUMU5qXFlzj1xOOPmqYdnrqikToFfOrOBkxjeUQXC4a3CdTstB2keuN6k ZmmHmA9N+Gn0eBT9dG/HZyk8c58/lDjD33eh5EYWiMzSccjtE19CFUfjHJWEyurV JMl01458fes4ByDZGic8xESRamu2NbuBmMeBTp8D96nIQNFqT/z5t7p8/qeLypSa G1jzH+s50BiZ17ZEKhEZbJN8Mw8cN4vyP9nXrih/0ckfl3veRaxUnf3y9kHgesoX eFD0lsZyCtd1Mw7Qw2wIXwvQKRp94Q80qTVmHo/XHn7vNoC/7qI8vsDOYzvhfqFU yIkP+gwwKYNmqxmb2CTcDvsEtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQTzgbJ iacJK61EteTm6uT8MaziMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALO556LKrIvHxW49nfmlvb6w70RK+Yp/w6DuFF4I3h8huw6yfyQp+h 7rYXmiesH+0GlLQ3RYCqbBWk8XZAjAZfeyeXNYFa6oUCuDBwJjEWUSqyRbYfwItb IL47llHdfpvDPia81XkjTdv30AtksOEsHsg/1EFbWLf6jsSVNk6nir9bPI1GKdMg HYD5zJSBhUGja+rS6gGs0oFYrow5GE8GPOTsJ8Yp1EtsyEKrbI1Zqu76PnQnJg+Q mh95aCCGFaaWzkUszZXJpZaG+R2T9yZTskAl0b9fRdHafY3miVlu7kzv7AsBDqPe uZNPHs5y9mhp1rU/BetGIbXacySxaEE6 -----END CERTIFICATE-----Generated at Mon May 5 03:23:38 2025 by rpki-client