$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft File: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json) Hash identifier: ob+LQK2yfZme30QPVvE/iUZNsOm3aAx7nC7dU+3nQPk= Subject key identifier: 05:F6:D7:C8:04:D4:0F:0E:FE:00:E2:FB:3A:F1:6C:3A:64:7A:DC:9A Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft Manifest number: 0196 Signing time: Sat 29 Mar 2025 03:16:58 +0000 Manifest this update: Sat 29 Mar 2025 03:16:58 +0000 Manifest next update: Sat 05 Apr 2025 03:16:58 +0000 Files and hashes: 1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: Na1IYF7N8Bgsi3hLlQMGyXFG4A6yaCfa9rQ8QOmXx8k=) 2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: SfBIuFEDYAsg/PjbIyvrebKLGz8pJBF9jxSue0KstdM=) 3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: lCTFWO52KOr69lusfCiS3+JRVxXhg/uGiSXfH+UxNNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918664E Validity Not Before: Mar 29 03:16:58 2025 GMT Not After : Apr 5 03:16:58 2025 GMT Subject: CN=67e7662a-a2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:fe:f7:41:f0:8e:7c:b9:9c:a4:64:f1:e3: e6:1a:cc:11:10:fc:5a:37:cb:f0:d6:61:57:7e:a9: f2:63:4c:08:c4:0c:03:f6:cc:cf:f1:30:28:8c:ed: 37:70:f3:ed:41:fc:e0:ec:8d:ba:9b:1e:f1:32:44: 2f:7d:28:c3:01:70:2a:29:46:92:b8:04:22:5c:00: 2c:fd:e2:ee:29:05:d8:69:8b:ce:d9:d7:50:b2:a6: 6c:f5:65:3c:d1:39:91:4e:c6:ca:98:24:a3:46:13: 5c:96:c4:1b:a8:d3:45:bc:ef:5f:ae:6a:08:f4:39: 8b:f2:7f:1e:d8:20:d2:93:d1:4f:57:bf:7a:bf:94: ad:6f:bb:72:08:d0:cd:e9:89:53:a3:67:23:d4:a2: 88:29:97:41:6c:eb:51:f9:f6:3a:5b:3c:6f:df:de: a0:6e:5a:f4:e5:27:4f:41:5c:f1:c0:27:93:0e:39: 69:62:d6:e9:88:ae:74:54:31:b8:ed:b8:27:27:63: 96:67:9c:a2:64:53:88:b3:1b:f1:ff:8c:b9:bf:84: b6:04:4a:8e:91:1f:b1:fe:35:ee:2c:ef:bd:31:54: 71:a0:ec:b9:41:47:08:9c:ef:5b:d5:6d:f1:97:b5: 60:a6:e6:07:2c:3f:3b:6f:67:60:c1:12:53:b3:ae: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F6:D7:C8:04:D4:0F:0E:FE:00:E2:FB:3A:F1:6C:3A:64:7A:DC:9A X509v3 Authority Key Identifier: keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:92:ac:04:43:a1:46:9b:87:07:5a:4f:4d:a8:ea:71:96:70: 1b:16:36:03:ff:24:b1:5a:38:7b:9c:3c:20:a6:5b:51:81:5a: 35:cd:f7:8f:72:2f:89:1b:68:8d:9a:85:24:62:46:3f:8c:be: 45:bd:ab:f6:7b:dd:70:a5:0e:7d:7e:ac:d3:c9:30:aa:c9:46: f9:aa:20:7a:c9:75:e8:c5:95:9b:1e:6b:7f:bc:00:b1:d3:82: 47:a5:ff:b9:9f:3f:d3:20:10:fb:f5:b4:28:d9:11:9e:5c:c8: 05:ad:11:c4:5f:36:72:81:e7:20:67:ce:bb:9d:eb:b2:5e:a7: f3:8f:8d:d1:68:72:f2:f1:96:c0:a2:b6:27:91:32:ad:9c:dc: e9:4d:51:f6:38:cb:3a:21:e1:65:91:04:5f:86:d0:af:7b:98: 5f:7b:67:be:5b:27:57:46:eb:c3:41:4d:34:74:f3:bc:8a:8a: 79:cc:8f:b8:47:16:b6:c9:a2:8d:84:96:6a:04:88:85:31:8e: cf:92:39:cd:d8:67:0e:22:80:ef:c9:28:75:45:16:c8:4a:19: 04:b8:84:2d:5d:06:a8:c8:2f:a8:4e:f8:e0:95:f9:8f:73:5a: e2:fe:55:1a:40:ef:69:29:38:a9:df:43:07:6a:35:f3:4a:1c: 4b:b2:20:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC ODUwNzE1QjkwHhcNMjUwMzI5MDMxNjU4WhcNMjUwNDA1MDMxNjU4WjAYMRYwFAYD VQQDEw02N2U3NjYyYS1hMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GL+90Hwjny5nKRk8ePmGswREPxaN8vw1mFXfqnyY0wIxAwD9szP8TAojO03 cPPtQfzg7I26mx7xMkQvfSjDAXAqKUaSuAQiXAAs/eLuKQXYaYvO2ddQsqZs9WU8 0TmRTsbKmCSjRhNclsQbqNNFvO9frmoI9DmL8n8e2CDSk9FPV796v5Stb7tyCNDN 6YlTo2cj1KKIKZdBbOtR+fY6Wzxv396gblr05SdPQVzxwCeTDjlpYtbpiK50VDG4 7bgnJ2OWZ5yiZFOIsxvx/4y5v4S2BEqOkR+x/jXuLO+9MVRxoOy5QUcInO9b1W3x l7VgpuYHLD87b2dgwRJTs66cBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX218gE 1A8O/gDi+zrxbDpketyaMB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY0RS9ERjkwMEUzNkNFRTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6 ekNNbEMxWl9JRmE0VUhGYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAakqwEQ6FGm4cHWk9NqOpxlnAbFjYD/ySxWjh7nDwgpltRgVo1zfeP ci+JG2iNmoUkYkY/jL5Fvav2e91wpQ59fqzTyTCqyUb5qiB6yXXoxZWbHmt/vACx 04JHpf+5nz/TIBD79bQo2RGeXMgFrRHEXzZygecgZ867neuyXqfzj43RaHLy8ZbA orYnkTKtnNzpTVH2OMs6IeFlkQRfhtCve5hfe2e+WydXRuvDQU00dPO8iop5zI+4 Rxa2yaKNhJZqBIiFMY7PkjnN2GcOIoDvySh1RRbIShkEuIQtXQaoyC+oTvjglfmP c1ri/lUaQO9pKTip30MHajXzShxLsiDX -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:50 2025 by rpki-client