$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft File: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json) Hash identifier: GoW7MfQyOz+enaUYf73gixEz9Qnja8HIedHU5/b6wIk= Subject key identifier: EA:D9:EC:8F:A4:5D:26:57:0B:A6:D1:C7:AE:64:E8:46:2E:76:40:85 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 1097 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft Manifest number: 108E Signing time: Tue 22 Apr 2025 17:22:55 +0000 Manifest this update: Tue 22 Apr 2025 17:22:54 +0000 Manifest next update: Tue 29 Apr 2025 17:22:54 +0000 Files and hashes: 1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: BZ/l5t4VGByuHGjNjZ5+vcpu8YxtktrXDCVz7839sbQ=) 2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Apr 22 17:22:54 2025 GMT Not After : Apr 29 17:22:54 2025 GMT Subject: CN=6807d06e-4060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:8c:af:90:93:c1:9c:84:95:18:19:ba:c3: 42:16:8c:56:88:b5:08:59:22:76:95:57:e5:79:aa: 48:d7:48:89:25:f4:f7:50:5d:2b:e8:5d:76:a0:55: b5:0f:15:1e:c5:17:80:17:b0:b8:33:96:aa:e9:99: b0:64:61:f6:9c:8c:48:0f:95:c2:50:af:7a:16:20: c1:f8:8c:b5:a0:42:89:43:c0:c6:1e:9e:19:8a:b5: d9:7d:68:07:48:48:38:86:7c:8d:c9:e2:65:f6:dc: 44:20:69:a4:ff:0f:02:8b:14:be:fd:43:3b:fd:c6: 82:6a:b9:ea:48:e6:af:a5:1f:87:d4:41:e9:fd:6b: fc:a1:65:ee:2b:ea:92:ab:d3:9f:01:df:cb:15:1d: eb:fd:45:c9:08:cd:42:9d:7e:23:9f:22:1b:61:55: 15:04:b1:9f:5b:48:2f:d8:43:26:61:19:8c:8a:20: 4c:ca:bd:1e:ff:89:21:bf:a1:4e:bc:26:7d:75:28: 79:bc:f9:9e:10:96:37:49:15:d3:6b:f0:ef:4d:5d: ac:53:5f:f4:ba:fb:f8:d1:a0:e8:0d:cf:8b:6d:a2: a4:0d:56:f9:26:68:e9:02:25:43:1a:7c:1f:2e:89: 8e:0f:00:b3:bf:47:18:29:a6:15:8b:aa:d0:12:0e: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D9:EC:8F:A4:5D:26:57:0B:A6:D1:C7:AE:64:E8:46:2E:76:40:85 X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:08:94:45:51:1e:8a:02:6e:c6:eb:94:a3:07:9a:00:bb:1c: 8c:5d:62:87:43:f2:9a:a7:03:30:85:29:81:fa:4f:1a:8a:b5: d4:ed:12:0e:0a:f1:56:9a:be:8c:3f:74:3d:25:ff:d2:fc:1a: 44:f0:48:3d:a2:d9:8e:9f:f7:71:9f:4b:79:f1:01:d5:00:7a: cf:aa:c4:30:12:07:94:f2:17:bf:ad:d7:0e:8c:01:f1:71:12: bf:5d:06:c5:15:8c:e4:94:d1:39:5c:db:09:a7:5e:b3:3d:cc: 79:39:32:39:61:52:36:b9:53:2b:95:63:b0:ed:39:0d:b0:0c: e7:9c:48:35:9b:0a:45:4e:76:1c:ec:0c:e8:b4:f3:81:b4:eb: 65:74:7f:5d:9f:f5:34:a8:1d:0e:04:12:e7:65:45:fe:78:eb: 74:ec:ad:65:e2:26:1c:85:3f:42:9e:64:25:d4:60:7d:dc:b7: a6:93:e1:45:ea:51:32:4d:bc:4b:f0:32:38:ac:bf:98:f3:17: e9:8f:30:68:2f:83:29:15:31:bb:dd:d4:2a:fb:01:f4:50:0c: a6:20:c0:21:29:1e:71:9c:3c:a5:1c:7f:25:f9:f0:0b:c7:a3: 43:11:e4:44:c6:d3:7a:fc:73:b2:6b:03:86:ad:c0:b0:23:d2: 7c:03:98:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjUwNDIyMTcyMjU0WhcNMjUwNDI5MTcyMjU0WjAYMRYwFAYD VQQDEw02ODA3ZDA2ZS00MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaSMr5CTwZyElRgZusNCFoxWiLUIWSJ2lVfleapI10iJJfT3UF0r6F12oFW1 DxUexReAF7C4M5aq6ZmwZGH2nIxID5XCUK96FiDB+Iy1oEKJQ8DGHp4ZirXZfWgH SEg4hnyNyeJl9txEIGmk/w8CixS+/UM7/caCarnqSOavpR+H1EHp/Wv8oWXuK+qS q9OfAd/LFR3r/UXJCM1CnX4jnyIbYVUVBLGfW0gv2EMmYRmMiiBMyr0e/4khv6FO vCZ9dSh5vPmeEJY3SRXTa/DvTV2sU1/0uvv40aDoDc+LbaKkDVb5JmjpAiVDGnwf LomODwCzv0cYKaYVi6rQEg5FowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrZ7I+k XSZXC6bRx65k6EYudkCFMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhCJRFUR6KAm7G65SjB5oAuxyMXWKHQ/KapwMwhSmB+k8airXU7RIO CvFWmr6MP3Q9Jf/S/BpE8Eg9otmOn/dxn0t58QHVAHrPqsQwEgeU8he/rdcOjAHx cRK/XQbFFYzklNE5XNsJp16zPcx5OTI5YVI2uVMrlWOw7TkNsAznnEg1mwpFTnYc 7AzotPOBtOtldH9dn/U0qB0OBBLnZUX+eOt07K1l4iYchT9CnmQl1GB93Lemk+FF 6lEyTbxL8DI4rL+Y8xfpjzBoL4MpFTG73dQq+wH0UAymIMAhKR5xnDylHH8l+fAL x6NDEeRExtN6/HOyawOGrcCwI9J8A5hM -----END CERTIFICATE-----Generated at Tue Apr 22 23:18:38 2025 by rpki-client