$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: np/cndnO2+uM3BSZSfcdd+PumdmErGf7q+I3Gj+e3kM= Subject key identifier: E8:94:D2:05:9F:2B:A8:17:CD:EE:91:EC:B9:AA:2A:52:91:F7:EB:2C Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 01E1 Signing time: Sat 19 Jul 2025 02:52:01 +0000 Manifest this update: Sat 19 Jul 2025 02:52:01 +0000 Manifest next update: Sat 26 Jul 2025 02:52:01 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: HJLJF2fyE286MEyyh3mkw9ubO4xqZrbCV3cpvW4sX4U=) 2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=) 3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Jul 19 02:52:01 2025 GMT Not After : Jul 26 02:52:01 2025 GMT Subject: CN=687b0851-6c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:a2:f2:17:a6:7d:a9:18:f5:37:19:5e:e9: 7e:b7:4e:49:85:69:11:a6:ed:e2:8f:fd:0f:47:6b: 86:a8:31:ab:d1:19:8f:38:27:eb:9a:dd:1d:2c:3d: 29:c1:9b:ed:e9:cc:0a:ad:ed:9c:af:77:63:af:9c: ab:34:36:45:ac:43:ec:3a:cd:de:7d:b7:11:4d:4d: 95:ac:f8:76:51:70:e4:15:4d:57:7f:f5:94:40:a2: b2:9c:ec:fa:41:ae:07:30:2a:33:6b:1e:65:db:14: c0:1f:e1:d3:c9:66:b3:25:22:bb:ce:08:a7:d9:d6: a4:2a:fc:44:cb:a0:01:db:e1:7e:0c:eb:40:f1:8b: 2e:31:3b:79:c2:ec:a0:23:2f:f0:ad:97:f6:9c:71: 25:ff:13:89:7f:ae:8b:50:1f:c7:7f:9c:84:95:1b: f6:bf:4c:ac:89:74:c3:45:c4:68:90:db:8a:e8:94: 3d:2d:4a:40:99:f7:a4:3e:33:b0:e3:9b:aa:07:de: 08:00:1d:3d:43:f1:dd:a6:82:af:60:50:d3:dc:36: 04:0b:10:49:6f:82:03:f2:36:2a:50:4c:91:ba:9c: 9b:1b:12:7c:13:1c:4b:bc:f6:e1:9a:0d:ac:05:fd: c7:17:04:2a:a6:c4:e2:40:13:04:64:2b:05:de:0b: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:94:D2:05:9F:2B:A8:17:CD:EE:91:EC:B9:AA:2A:52:91:F7:EB:2C X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:06:27:96:1f:90:44:1b:c4:f6:4c:77:5d:d4:73:f9:35:64: 9d:8c:38:8b:e6:ec:d9:3d:8c:4e:5b:03:1a:8c:2a:ae:02:c0: ef:8b:61:e9:a7:b7:e1:b2:96:b3:f8:82:40:8b:65:dc:40:5a: 6b:69:90:62:18:66:0d:d1:3e:bd:89:49:0c:ff:7e:f0:b2:9b: cb:90:43:ba:86:d4:18:8b:f5:92:1c:2f:e8:a8:05:35:43:29: 0c:e3:3a:e3:02:d3:97:4f:b0:3c:19:01:44:66:f8:50:2a:3e: c1:7f:32:4a:6a:99:9e:ea:44:01:43:3e:d6:e7:f8:5e:87:27: 6a:78:48:fb:3a:d3:f1:63:26:ef:00:66:9e:53:ad:fa:e7:78: c8:2b:fa:3b:c8:72:7c:e4:38:3d:6e:e6:97:b7:9a:86:5e:cd: f7:7a:22:13:f4:24:3e:98:77:a2:a8:f7:0b:4f:9b:81:60:76: 24:16:c4:5a:d5:42:73:2b:61:29:e2:e6:5a:71:b2:f9:b4:7d: 82:99:ad:c7:58:ad:e8:9a:89:35:1c:97:4e:1f:8e:df:ac:ea: a0:29:e6:5e:37:08:e4:54:7a:b0:9c:a2:01:82:0b:21:04:02: 37:69:5a:f2:81:17:aa:01:3c:dd:a0:34:2a:2c:71:fe:07:c5: b8:bf:1c:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjUwNzE5MDI1MjAxWhcNMjUwNzI2MDI1MjAxWjAYMRYwFAYD VQQDEw02ODdiMDg1MS02YzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iCi8hemfakY9TcZXul+t05JhWkRpu3ij/0PR2uGqDGr0RmPOCfrmt0dLD0p wZvt6cwKre2cr3djr5yrNDZFrEPsOs3efbcRTU2VrPh2UXDkFU1Xf/WUQKKynOz6 Qa4HMCozax5l2xTAH+HTyWazJSK7zgin2dakKvxEy6AB2+F+DOtA8YsuMTt5wuyg Iy/wrZf2nHEl/xOJf66LUB/Hf5yElRv2v0ysiXTDRcRokNuK6JQ9LUpAmfekPjOw 45uqB94IAB09Q/HdpoKvYFDT3DYECxBJb4ID8jYqUEyRupybGxJ8ExxLvPbhmg2s Bf3HFwQqpsTiQBMEZCsF3gtZvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiU0gWf K6gXze6R7LmqKlKR9+ssMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiBieWH5BEG8T2THdd1HP5NWSdjDiL5uzZPYxOWwMajCquAsDvi2Hp p7fhspaz+IJAi2XcQFpraZBiGGYN0T69iUkM/37wspvLkEO6htQYi/WSHC/oqAU1 QykM4zrjAtOXT7A8GQFEZvhQKj7BfzJKapme6kQBQz7W5/hehydqeEj7OtPxYybv AGaeU63653jIK/o7yHJ85Dg9buaXt5qGXs33eiIT9CQ+mHeiqPcLT5uBYHYkFsRa 1UJzK2Ep4uZacbL5tH2Cma3HWK3omok1HJdOH47frOqgKeZeNwjkVHqwnKIBggsh BAI3aVrygReqATzdoDQqLHH+B8W4vxy2 -----END CERTIFICATE-----Generated at Sun Jul 20 15:12:43 2025 by rpki-client