$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft File: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json) Hash identifier: tmaaAizStaVtDNc7CQZoSw/3XljuoQNdxeVPTv+qv2k= Subject key identifier: 8E:8F:3F:8D:F7:72:68:6D:7B:70:8F:5D:7C:DB:4E:D0:68:CB:4C:77 Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04 Certificate issuer: /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft Manifest number: D0 Signing time: Thu 15 May 2025 04:58:10 +0000 Manifest this update: Thu 15 May 2025 04:58:10 +0000 Manifest next update: Thu 22 May 2025 04:58:09 +0000 Files and hashes: 1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: q2Y1CRQdY+0xn0wIH2NLJcWfI6gEOiB5GCaF3P79YV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804 Validity Not Before: May 15 04:58:10 2025 GMT Not After : May 22 04:58:09 2025 GMT Subject: CN=68257462-131b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:08:d7:f8:d6:c6:86:2a:fb:77:e3:68:ab: c0:30:e9:b1:5e:64:47:98:ad:db:4b:4c:10:c9:c1: b8:2f:c8:d9:33:5d:21:6c:59:3c:b9:32:39:86:0f: 4a:9f:06:6e:71:99:22:79:0e:ec:40:54:41:16:ef: ff:21:b5:53:9a:45:62:17:dd:c3:90:3e:a9:18:5d: 04:5a:f3:5f:39:ad:81:73:11:51:db:45:0f:86:0c: b3:82:13:0a:8b:b3:70:d4:a7:9f:be:6c:5c:8a:a6: 3d:35:4f:5a:34:03:3e:c1:e8:99:1c:e3:af:15:42: 7c:68:25:b8:85:88:d7:04:b0:c8:fb:1e:a8:b2:db: a3:69:e7:bf:65:ef:46:ce:7e:f3:59:86:e0:82:f4: 30:35:49:53:72:e4:10:97:56:e2:0f:93:0f:af:83: 07:38:c4:c4:c4:64:a9:b0:01:c9:0c:ee:76:de:64: f9:70:e6:2f:5f:32:71:24:c3:dc:65:f1:6e:7f:af: 19:50:cc:78:14:59:c1:c4:92:8a:c5:c4:93:aa:c5: 89:16:a5:5c:77:5c:e1:56:3b:f1:d2:e0:d7:12:26: e5:ec:64:65:43:94:fc:66:13:51:dd:d1:c5:7c:9d: 30:c4:17:6a:a1:99:1c:9f:c7:5f:70:7c:21:1d:7a: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8F:3F:8D:F7:72:68:6D:7B:70:8F:5D:7C:DB:4E:D0:68:CB:4C:77 X509v3 Authority Key Identifier: keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:19:2e:b6:7d:72:22:04:26:52:4f:f1:96:8c:56:a4:de:3d: b3:99:7e:03:7d:09:21:ba:e3:7b:a4:a7:b0:47:24:4c:98:2e: 44:9a:0b:9a:4d:09:0d:6c:f6:a8:8f:65:c9:a8:42:f8:33:52: 7c:0a:30:93:34:b5:30:d8:f8:ed:c7:c2:96:1e:2d:15:c5:84: 84:20:1c:cb:68:ff:d1:90:8d:1e:cf:d7:b0:54:8d:29:9a:0a: e9:64:e6:1c:8b:2e:47:ed:4b:95:00:dc:39:5b:47:34:06:30: 6d:2f:89:22:a3:d0:63:a8:85:98:f8:56:28:26:6f:65:86:56: 0a:d2:1d:c1:56:6d:a8:7c:a6:93:05:82:dd:bd:1f:ac:3f:3f: 0f:01:a7:0f:0b:1e:8b:84:fd:64:5d:80:50:ac:34:4b:e3:0c: 4c:ac:1d:82:86:62:fb:c3:5c:32:d5:72:98:10:87:6a:86:64: c8:a5:d6:52:ca:ef:20:c9:2a:c8:af:93:4e:df:f7:6b:47:a8: f9:33:e0:0d:b9:9c:0f:01:a7:e6:51:d6:1e:0b:71:d5:f9:04: b4:bc:17:f1:a9:9c:5d:d8:d9:09:5a:e9:4e:5b:a3:a5:64:23: 18:82:f6:31:8d:bb:74:e4:f2:fd:db:14:84:23:45:d0:5c:d3: cc:3a:5a:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NUUxMTAvBgNVBAUTKEI1M0JDRTE2MUFDRjYzMDVFQzA1NUM1OUE4OTFFODIy QTExRUY4MDQwHhcNMjUwNTE1MDQ1ODEwWhcNMjUwNTIyMDQ1ODA5WjAYMRYwFAYD VQQDEw02ODI1NzQ2Mi0xMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTUI1/jWxoYq+3fjaKvAMOmxXmRHmK3bS0wQycG4L8jZM10hbFk8uTI5hg9K nwZucZkieQ7sQFRBFu//IbVTmkViF93DkD6pGF0EWvNfOa2BcxFR20UPhgyzghMK i7Nw1KefvmxciqY9NU9aNAM+weiZHOOvFUJ8aCW4hYjXBLDI+x6ostujaee/Ze9G zn7zWYbggvQwNUlTcuQQl1biD5MPr4MHOMTExGSpsAHJDO523mT5cOYvXzJxJMPc ZfFuf68ZUMx4FFnBxJKKxcSTqsWJFqVcd1zhVjvx0uDXEibl7GRlQ5T8ZhNR3dHF fJ0wxBdqoZkcn8dfcHwhHXp6dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6PP433 cmhte3CPXXzbTtBoy0x3MB8GA1UdIwQYMBaAFLU7zhYaz2MF7AVcWaiR6CKhHvgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS82NTlFOTAxMEVG RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3WHNCVnhacUpIb0lxRWUt QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUdk9GaHJQWXdYc0JWeFpxSkhvSXFFZS1BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg1RS82NTlFOTAxMEVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3 WHNCVnhacUpIb0lxRWUtQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgGS62fXIiBCZST/GWjFak3j2zmX4DfQkhuuN7pKewRyRMmC5Emgua TQkNbPaoj2XJqEL4M1J8CjCTNLUw2Pjtx8KWHi0VxYSEIBzLaP/RkI0ez9ewVI0p mgrpZOYciy5H7UuVANw5W0c0BjBtL4kio9BjqIWY+FYoJm9lhlYK0h3BVm2ofKaT BYLdvR+sPz8PAacPCx6LhP1kXYBQrDRL4wxMrB2ChmL7w1wy1XKYEIdqhmTIpdZS yu8gySrIr5NO3/drR6j5M+ANuZwPAafmUdYeC3HV+QS0vBfxqZxd2NkJWulOW6Ol ZCMYgvYxjbt05PL92xSEI0XQXNPMOlq3 -----END CERTIFICATE-----Generated at Thu May 15 13:24:14 2025 by rpki-client