$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: jIDtxRMxStMt24FSAY06liPtWjUBReGqHkDM26yAS08= Subject key identifier: EC:0C:B4:00:DF:50:41:C9:00:29:C5:EB:1D:72:C9:8A:46:82:33:91 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 067F Signing time: Wed 02 Apr 2025 22:16:50 +0000 Manifest this update: Wed 02 Apr 2025 22:16:50 +0000 Manifest next update: Wed 09 Apr 2025 22:16:50 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: QDlMknWRSeAw1nXaEWLTAwu5065NB9DA9vugsaxGYrY=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D Validity Not Before: Apr 2 22:16:50 2025 GMT Not After : Apr 9 22:16:50 2025 GMT Subject: CN=67edb752-a331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:46:d1:bd:60:41:fe:5e:14:1f:25:d5:9a: 58:8a:80:25:cb:58:fd:01:8a:bf:4b:a4:ac:d0:2c: 35:a7:15:3e:a4:0a:fe:cd:88:2f:c6:ab:c5:a5:4e: 52:8d:a5:11:f9:cc:b9:71:dd:40:6e:64:fb:d8:70: 6b:f8:a7:a9:bd:b5:3c:10:3e:95:05:5e:0a:e3:a1: 2f:b6:c5:c0:b1:ad:b6:de:eb:c6:e2:75:84:49:ae: ef:6f:ec:e1:40:e5:2d:24:dc:dd:a4:35:84:fe:3a: 52:8c:2d:be:f6:ed:47:85:7d:50:d5:b9:e3:f0:9a: bc:94:49:a4:c6:f7:ad:7b:5a:49:65:a2:12:0a:bc: 18:91:25:34:b7:1a:f2:a3:3d:ef:70:ae:c3:35:53: db:1b:0d:2d:9b:8d:7b:55:dc:c2:c0:20:1a:dd:b4: e9:ef:a1:55:c4:7e:ae:65:eb:60:8a:e7:ce:c1:e6: 84:af:b0:d9:5f:e5:3e:31:35:b3:13:1b:e5:a8:d5: 34:f4:53:6a:18:da:91:49:6a:41:7b:1d:f8:12:f9: c8:23:62:8f:7a:cc:65:82:84:71:d2:55:ec:4e:65: 33:22:26:21:96:e5:3e:b8:76:e0:3b:25:a9:e6:b7: 4d:12:48:64:e3:1a:d8:7d:f2:c5:02:ce:71:5a:9c: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0C:B4:00:DF:50:41:C9:00:29:C5:EB:1D:72:C9:8A:46:82:33:91 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:ca:3f:de:88:83:5f:4d:f5:ef:06:36:47:61:86:c8:8d: 0f:12:c2:b4:d6:f1:82:9b:5c:b2:f7:7d:ce:a0:b4:36:e8:03: 37:e0:29:6a:2d:d0:c5:fa:08:4d:e9:b2:c8:46:e2:b2:40:dc: db:1b:95:37:53:46:c8:38:c6:27:4e:39:d9:e9:2b:f0:03:8a: 18:57:77:a0:3c:86:f5:82:ad:73:e0:88:16:ba:b0:0b:e4:16: 95:66:7a:60:2b:21:82:0a:0c:86:f6:db:5a:17:10:6a:00:96: 16:cd:cb:d3:2a:4e:3e:b0:e5:78:be:0f:e5:61:3b:57:66:0c: a5:8e:83:e5:3b:18:45:59:25:b9:fe:05:46:e8:54:b0:6b:8a: bf:2c:e5:74:80:51:1f:8e:6c:36:30:99:a2:29:3e:26:a1:82: a7:34:0f:b5:36:9c:07:c6:b4:07:47:a1:98:73:fd:c4:34:91: a7:ee:c5:3e:f1:da:57:18:96:c3:6c:e9:72:e5:a4:ef:ed:4d: 9c:ab:d0:d2:03:38:60:99:b1:26:f9:c5:33:fe:d8:14:03:07: 73:9f:c8:71:b8:66:c9:f8:fa:03:20:4d:45:99:12:6a:63:6b: bf:6e:ed:c4:7f:eb:34:75:b2:09:86:a8:e7:77:cf:e3:c9:d3: 67:57:d6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjUwNDAyMjIxNjUwWhcNMjUwNDA5MjIxNjUwWjAYMRYwFAYD VQQDEw02N2VkYjc1Mi1hMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnphG0b1gQf5eFB8l1ZpYioAly1j9AYq/S6Ss0Cw1pxU+pAr+zYgvxqvFpU5S jaUR+cy5cd1AbmT72HBr+KepvbU8ED6VBV4K46EvtsXAsa223uvG4nWESa7vb+zh QOUtJNzdpDWE/jpSjC2+9u1HhX1Q1bnj8Jq8lEmkxvete1pJZaISCrwYkSU0txry oz3vcK7DNVPbGw0tm417VdzCwCAa3bTp76FVxH6uZetgiufOweaEr7DZX+U+MTWz ExvlqNU09FNqGNqRSWpBex34EvnII2KPesxlgoRx0lXsTmUzIiYhluU+uHbgOyWp 5rdNEkhk4xrYffLFAs5xWpy0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwMtADf UEHJACnF6x1yyYpGgjORMB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfoMo/3oiDX0317wY2R2GGyI0PEsK01vGCm1yy933OoLQ26AM34Clq LdDF+ghN6bLIRuKyQNzbG5U3U0bIOMYnTjnZ6SvwA4oYV3egPIb1gq1z4IgWurAL 5BaVZnpgKyGCCgyG9ttaFxBqAJYWzcvTKk4+sOV4vg/lYTtXZgyljoPlOxhFWSW5 /gVG6FSwa4q/LOV0gFEfjmw2MJmiKT4moYKnNA+1NpwHxrQHR6GYc/3ENJGn7sU+ 8dpXGJbDbOly5aTv7U2cq9DSAzhgmbEm+cUz/tgUAwdzn8hxuGbJ+PoDIE1FmRJq Y2u/bu3Ef+s0dbIJhqjnd8/jydNnV9Zg -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:06 2025 by rpki-client