$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: p5TVEIq/ZxnNw7+wtW7pJouzQO9Fdb913qVCZUPcVjw= Subject key identifier: B8:AA:FE:04:B2:E1:E0:72:71:A9:41:51:74:97:03:C9:DE:89:D2:CD Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 17 Signing time: Sun 27 Apr 2025 06:50:21 +0000 Manifest this update: Sun 27 Apr 2025 06:50:20 +0000 Manifest next update: Sun 04 May 2025 06:50:20 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: tIpCH+PVMlDJcr6cg1GnKSp2mUIGtTf3pjkMrYME7w8=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Apr 27 06:50:20 2025 GMT Not After : May 4 06:50:20 2025 GMT Subject: CN=680dd3ac-bd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:5f:16:76:94:b3:7e:01:fe:49:3b:db:76: 25:d5:29:9f:be:c0:ff:0b:83:41:6d:b9:6c:5f:ae: 9b:ad:9e:89:5d:f6:71:2f:14:41:6c:6a:8f:1f:46: 8d:a9:11:65:c6:f4:09:fa:bb:4f:6b:5f:79:a1:e2: c5:48:8d:f1:e6:2c:01:ad:2c:2c:7d:a1:db:30:d7: 10:f2:66:e4:79:a8:68:5c:7e:1c:a8:6c:0a:5d:16: c0:13:82:23:0a:8c:2f:da:52:98:fb:e3:15:f1:e0: 9f:40:7f:89:d7:73:1e:d7:ba:b6:5c:4f:a8:4c:c5: 2d:80:2a:18:b4:51:33:2a:97:1f:35:41:86:00:98: 53:5d:9a:fd:c2:e5:52:b7:e6:f2:bb:0e:01:c0:66: e9:66:2c:9f:15:cd:59:ea:7f:48:93:8d:2b:b4:97: bd:fa:98:c7:bf:ac:c1:a3:4a:d6:5b:04:8b:26:15: 33:d2:f7:a2:e1:8b:37:66:8d:7c:6d:ce:87:df:b3: 1e:59:ce:73:21:d3:42:1f:9b:0a:69:c8:fe:50:84: 1b:b7:3d:37:f0:fb:ba:4a:d4:c4:eb:85:27:eb:4e: 12:3d:4b:f6:f4:5c:15:7c:94:93:b3:2b:67:a8:63: a7:6e:97:89:6c:ef:d6:25:ba:fa:8e:c5:e8:da:94: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:FE:04:B2:E1:E0:72:71:A9:41:51:74:97:03:C9:DE:89:D2:CD X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5c:87:d8:09:ac:6e:0e:01:dd:b5:23:78:44:e3:db:e7:48: 19:18:8f:71:86:87:60:8d:90:c2:67:d2:1a:8e:0b:7d:82:0b: 7c:c9:ab:9f:4b:f5:79:4b:41:ea:5f:8f:0a:8f:17:4f:9f:3c: bf:83:27:d5:a5:77:5c:7a:1e:b9:ce:46:1b:0f:8b:c9:4d:c8: 22:d8:05:64:44:8e:59:01:35:7e:a6:02:09:1a:02:bb:49:bd: d2:d4:50:e6:8b:83:c6:57:6c:25:be:5c:56:1a:59:0a:7c:2a: 90:eb:52:56:6a:aa:6f:2a:ca:c1:be:bf:4b:f2:dd:4c:59:3e: 99:af:df:1a:53:28:e7:6e:05:ef:75:be:8b:ad:32:71:d0:e2: ad:32:ce:d3:af:90:cf:13:db:b7:8f:55:af:40:a8:bc:06:11: bc:87:ee:f6:59:d0:8f:5b:24:ed:36:3f:fb:33:29:cc:4d:8a: 55:1e:e6:41:0f:12:ea:f9:db:30:31:f6:f7:b0:85:10:a2:57: 0c:7d:ce:71:b9:de:a4:2e:c8:e2:ca:47:57:c1:f4:24:1f:d8: 78:5c:b6:07:10:0d:65:34:ec:df:7d:98:75:3c:2a:2c:5e:06: e1:1d:9f:0d:67:bb:5f:fc:51:10:11:64:86:03:f6:28:e0:cd: 66:a2:9d:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA0MjcwNjUwMjBaFw0yNTA1MDQwNjUwMjBaMBgxFjAUBgNV BAMTDTY4MGRkM2FjLWJkMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdwl8WdpSzfgH+STvbdiXVKZ++wP8Lg0FtuWxfrputnold9nEvFEFsao8fRo2p EWXG9An6u09rX3mh4sVIjfHmLAGtLCx9odsw1xDyZuR5qGhcfhyobApdFsATgiMK jC/aUpj74xXx4J9Af4nXcx7XurZcT6hMxS2AKhi0UTMqlx81QYYAmFNdmv3C5VK3 5vK7DgHAZulmLJ8VzVnqf0iTjSu0l736mMe/rMGjStZbBIsmFTPS96LhizdmjXxt zoffsx5ZznMh00IfmwppyP5QhBu3PTfw+7pK1MTrhSfrThI9S/b0XBV8lJOzK2eo Y6dul4ls79YluvqOxejalOANAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuKr+BLLh 4HJxqUFRdJcDyd6J0s0wHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGdch9gJrG4OAd21I3hE49vnSBkYj3GGh2CNkMJn0hqOC32CC3zJq59L 9XlLQepfjwqPF0+fPL+DJ9Wld1x6HrnORhsPi8lNyCLYBWREjlkBNX6mAgkaArtJ vdLUUOaLg8ZXbCW+XFYaWQp8KpDrUlZqqm8qysG+v0vy3UxZPpmv3xpTKOduBe91 voutMnHQ4q0yztOvkM8T27ePVa9AqLwGEbyH7vZZ0I9bJO02P/szKcxNilUe5kEP Eur52zAx9vewhRCiVwx9znG53qQuyOLKR1fB9CQf2HhctgcQDWU07N99mHU8Kixe BuEdnw1nu1/8URARZIYD9ijgzWainRw= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net