$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: ne4lKrL0LWahfJrY+Xxan0HHPsbc0Y7/ROPahv2RCOs= Subject key identifier: D3:68:BE:34:55:41:BD:BC:59:55:59:DF:9D:DB:A5:55:F0:AB:DD:F0 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 0182 Signing time: Sat 05 Apr 2025 03:04:57 +0000 Manifest this update: Sat 05 Apr 2025 03:04:57 +0000 Manifest next update: Sat 12 Apr 2025 03:04:57 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: gEGRWcanofWwt3vYI4X7DezLQXfvKVuGA/ay+yOGB5I=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC Validity Not Before: Apr 5 03:04:57 2025 GMT Not After : Apr 12 03:04:57 2025 GMT Subject: CN=67f09dd9-8d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f1:01:c2:c3:7f:7f:21:0c:90:a5:b7:16:18: 68:1c:ae:7a:60:19:38:35:7f:63:c4:69:7f:b5:e9: 86:ff:6c:8a:5c:47:68:9b:5a:8d:c1:17:3d:89:61: f4:ac:80:85:f2:8b:a1:0f:ce:87:72:d2:55:8c:00: 98:a9:4e:07:ab:0e:2e:11:a4:60:81:66:e7:7c:86: 04:99:fc:8c:d3:ee:e1:29:87:ec:0b:d1:39:4b:f5: f1:26:15:70:e0:74:fc:0e:d6:39:8a:d4:c7:1e:12: 50:3e:69:07:36:77:fe:9c:32:5f:f6:50:ab:b1:f5: 78:44:03:a9:a7:29:02:0a:43:fa:ed:0a:39:f0:f9: 83:15:57:50:f8:28:19:fa:42:b2:b7:32:ab:df:6e: 26:9f:73:2b:89:75:82:48:9a:3b:bc:73:ef:89:4a: f1:7a:54:79:61:7f:d2:02:64:d5:ed:de:63:24:2d: fd:fc:0a:40:94:cd:9e:b1:c1:8f:a2:d1:91:31:db: b7:6c:68:32:cf:4d:43:ec:ce:df:98:b7:0a:f2:66: 54:88:3e:ca:64:94:34:dd:03:42:fe:12:14:83:3c: 98:94:46:cd:6d:e2:9a:db:c7:22:25:75:42:44:74: 42:c3:8e:b6:82:13:48:c8:ba:25:4d:3d:77:5e:0d: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:68:BE:34:55:41:BD:BC:59:55:59:DF:9D:DB:A5:55:F0:AB:DD:F0 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:23:2f:06:a3:d2:ce:61:86:bd:9e:28:b6:fe:b3:ba:b0:29: b5:75:d5:cc:ee:e8:95:22:e2:4f:e8:a5:66:ed:1d:87:36:18: 4a:cf:e4:d6:a6:d0:06:f1:b2:63:24:2a:75:1e:e9:f5:3b:44: 5c:90:bf:89:5d:39:c3:a0:f6:3d:96:18:e8:ee:fc:94:f6:47: 2c:29:6c:bb:3b:3f:8d:c6:b5:c1:2c:92:c3:b4:4a:b1:d7:0c: 62:00:18:02:0c:d2:87:24:40:b6:b4:ae:9d:35:17:70:8f:38: 3c:40:e7:c5:b2:fe:80:89:2c:4a:59:9b:a7:ae:50:06:d6:ec: 9a:9c:3a:ea:9b:e8:aa:4a:63:52:9a:33:e3:34:5c:69:d1:38: 04:13:3e:b6:6d:11:85:95:35:9d:dd:2e:60:09:54:13:b9:02: 40:29:9b:c4:38:f0:36:7f:dd:a1:48:8d:f3:5e:13:8e:81:a7: d6:07:f0:38:03:d5:da:6d:36:fe:52:90:bf:27:a5:9a:af:3b: 78:da:e2:7b:bf:87:25:98:f4:4d:58:3e:40:b1:f3:93:ed:34: 77:9d:43:74:8b:53:cb:72:82:29:31:b8:78:3e:3b:71:3a:51: 55:ed:49:83:06:19:f0:a3:7a:ed:c7:c7:ff:0b:98:3e:02:91: ca:1a:07:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUwNDA1MDMwNDU3WhcNMjUwNDEyMDMwNDU3WjAYMRYwFAYD VQQDEw02N2YwOWRkOS04ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fEBwsN/fyEMkKW3FhhoHK56YBk4NX9jxGl/temG/2yKXEdom1qNwRc9iWH0 rICF8ouhD86HctJVjACYqU4Hqw4uEaRggWbnfIYEmfyM0+7hKYfsC9E5S/XxJhVw 4HT8DtY5itTHHhJQPmkHNnf+nDJf9lCrsfV4RAOppykCCkP67Qo58PmDFVdQ+CgZ +kKytzKr324mn3MriXWCSJo7vHPviUrxelR5YX/SAmTV7d5jJC39/ApAlM2escGP otGRMdu3bGgyz01D7M7fmLcK8mZUiD7KZJQ03QNC/hIUgzyYlEbNbeKa28ciJXVC RHRCw462ghNIyLolTT13Xg3LxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNovjRV Qb28WVVZ353bpVXwq93wMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzIy8Go9LOYYa9nii2/rO6sCm1ddXM7uiVIuJP6KVm7R2HNhhKz+TW ptAG8bJjJCp1Hun1O0RckL+JXTnDoPY9lhjo7vyU9kcsKWy7Oz+NxrXBLJLDtEqx 1wxiABgCDNKHJEC2tK6dNRdwjzg8QOfFsv6AiSxKWZunrlAG1uyanDrqm+iqSmNS mjPjNFxp0TgEEz62bRGFlTWd3S5gCVQTuQJAKZvEOPA2f92hSI3zXhOOgafWB/A4 A9XabTb+UpC/J6Warzt42uJ7v4clmPRNWD5AsfOT7TR3nUN0i1PLcoIpMbh4Pjtx OlFV7UmDBhnwo3rtx8f/C5g+ApHKGgdt -----END CERTIFICATE-----Generated at Sun Apr 6 19:59:33 2025 by rpki-client