$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: zrTfBbej9J+O5qt1AUA+ZgBJfBJxLvRMgdU8Fid3IVs= Subject key identifier: 28:39:15:A1:57:88:C7:8E:5C:F2:8E:E6:85:14:58:5B:59:23:C4:DB Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: EA Signing time: Sun 11 May 2025 04:16:54 +0000 Manifest this update: Sun 11 May 2025 04:16:53 +0000 Manifest next update: Sun 18 May 2025 04:16:53 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: DL4IjBz6ziCoQpikjNDFs5ptoM9/aOZml7/JFWPa7tk=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: May 11 04:16:53 2025 GMT Not After : May 18 04:16:53 2025 GMT Subject: CN=682024b5-9bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ff:2c:f0:0b:30:11:97:82:e2:16:5a:29:9e: 51:d4:9d:7a:03:f8:b3:07:3f:c4:ef:e5:94:69:0f: 1a:24:75:27:61:df:94:e4:03:7c:16:dd:83:2b:e6: 05:ab:b9:b5:84:36:68:20:3d:ba:34:5f:60:38:4f: ab:c8:d1:52:fa:e9:8a:08:97:b1:f0:08:1b:04:23: c6:7b:13:b8:e5:29:66:cd:81:d2:90:ce:be:3c:a1: c0:47:8e:73:8b:9e:2a:ff:df:7a:32:de:de:0a:ff: 97:58:a1:a7:2f:0e:5c:c4:1c:81:88:ef:32:4c:b5: 5c:6a:a0:a5:1f:25:5c:b1:16:47:33:0d:72:0e:1d: bc:7f:0c:23:b0:7b:9c:96:a1:f7:4f:a0:0e:f2:0d: dd:47:81:a2:99:36:0e:0b:a3:6a:e3:a4:f4:46:7c: 1e:8b:8b:8d:6f:44:4a:0f:be:f4:e8:4e:53:ac:22: 46:60:6c:cb:bd:c2:ed:2a:6a:53:11:6d:2d:41:85: 50:bd:21:0d:4d:fa:bc:d3:3c:9c:93:9b:6d:ab:bc: a5:40:5d:a1:5f:24:d8:05:0d:ef:52:6d:31:f8:95: 16:52:d1:24:55:1d:18:36:94:51:b8:e6:87:8e:c4: 6c:c9:cd:bf:f1:72:82:71:83:83:c0:b3:6a:91:b7: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:15:A1:57:88:C7:8E:5C:F2:8E:E6:85:14:58:5B:59:23:C4:DB X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9f:9b:17:8c:62:7b:a7:2a:d4:bb:67:5d:5d:d7:11:8b:48: 2a:56:8d:45:89:2b:54:38:60:75:d1:80:c9:a4:f3:35:c4:cd: 22:7e:14:7d:c6:64:e2:72:ba:3e:38:69:3b:a5:c8:f8:8a:dc: e4:12:3c:e0:b2:f8:9b:6e:a8:05:46:5f:c4:ff:47:a9:9f:ea: a8:f1:e6:65:3b:bb:bb:6e:af:66:6f:f8:88:7a:e9:96:ea:31: eb:a4:e4:64:c2:8b:1f:aa:fa:20:8e:ef:40:1c:e7:36:c7:d4: f6:89:3f:87:f5:46:41:66:2b:d1:9a:3e:27:c7:af:48:b2:ca: ea:d7:13:26:a4:ed:5a:ed:b6:95:78:94:ca:66:05:35:f9:92: 7d:f8:42:41:f2:74:18:bd:81:43:55:e9:e2:29:a4:52:8f:5f: 42:b1:06:75:02:86:0a:4a:97:89:18:92:9a:77:ac:f8:f0:33: b9:d2:be:fd:71:be:cb:1e:f1:be:ce:c8:8d:67:78:c1:dd:b7: 59:8c:c2:5c:c4:31:b2:1a:83:f9:fe:8c:ba:af:43:b7:13:8c: 59:95:41:09:e7:dd:aa:09:97:3d:61:d2:08:38:bc:cc:cd:eb: d4:58:f0:ca:03:5d:7e:a5:df:72:dc:22:fe:12:c9:76:8b:a2: 08:63:5e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjUwNTExMDQxNjUzWhcNMjUwNTE4MDQxNjUzWjAYMRYwFAYD VQQDEw02ODIwMjRiNS05YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8P8s8AswEZeC4hZaKZ5R1J16A/izBz/E7+WUaQ8aJHUnYd+U5AN8Ft2DK+YF q7m1hDZoID26NF9gOE+ryNFS+umKCJex8AgbBCPGexO45SlmzYHSkM6+PKHAR45z i54q/996Mt7eCv+XWKGnLw5cxByBiO8yTLVcaqClHyVcsRZHMw1yDh28fwwjsHuc lqH3T6AO8g3dR4GimTYOC6Nq46T0Rnwei4uNb0RKD7706E5TrCJGYGzLvcLtKmpT EW0tQYVQvSENTfq80zyck5ttq7ylQF2hXyTYBQ3vUm0x+JUWUtEkVR0YNpRRuOaH jsRsyc2/8XKCcYODwLNqkbc4JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg5FaFX iMeOXPKO5oUUWFtZI8TbMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4n5sXjGJ7pyrUu2ddXdcRi0gqVo1FiStUOGB10YDJpPM1xM0ifhR9 xmTicro+OGk7pcj4itzkEjzgsvibbqgFRl/E/0epn+qo8eZlO7u7bq9mb/iIeumW 6jHrpORkwosfqvogju9AHOc2x9T2iT+H9UZBZivRmj4nx69Issrq1xMmpO1a7baV eJTKZgU1+ZJ9+EJB8nQYvYFDVeniKaRSj19CsQZ1AoYKSpeJGJKad6z48DO50r79 cb7LHvG+zsiNZ3jB3bdZjMJcxDGyGoP5/oy6r0O3E4xZlUEJ592qCZc9YdIIOLzM zevUWPDKA11+pd9y3CL+Esl2i6IIY174 -----END CERTIFICATE-----Generated at Tue May 13 05:43:25 2025 by rpki-client