$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json) Hash identifier: vXDTEmpFUNz8aZ13bYu1BxaehL8fJohGw97FZFBrtA8= Subject key identifier: 32:DE:CE:E0:4C:74:82:A2:E0:8E:81:54:7E:10:92:48:1F:D9:CE:29 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft Manifest number: 0707 Signing time: Fri 30 May 2025 22:07:21 +0000 Manifest this update: Fri 30 May 2025 22:07:21 +0000 Manifest next update: Fri 06 Jun 2025 22:07:21 +0000 Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: bEs3d6rfpadRvBTOufoOt1KR+6NOY+fKVPlqnTd8mUk=) 2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: COBPm0g4nlJAOhrh0hQYrpWCggmct2exc7fAFXJ645A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: May 30 22:07:21 2025 GMT Not After : Jun 6 22:07:21 2025 GMT Subject: CN=683a2c19-087d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:b1:80:23:52:21:b3:17:42:84:89:a2:6e: 0d:86:bb:1e:58:5d:27:b4:7f:35:b1:93:62:38:85: f1:a6:7e:4e:bd:4c:aa:4d:fb:02:68:17:b1:d2:00: 32:ad:b2:58:48:0e:52:f2:ba:72:25:be:74:e6:17: 9b:a8:a8:78:c7:fd:bc:23:4a:c7:6c:98:a0:07:80: 02:24:f5:39:64:c6:ad:1c:5c:e7:25:c7:75:96:31: e1:a6:92:ae:60:4d:3a:53:5e:37:c4:d9:e6:e5:13: b0:02:25:94:5b:dd:a2:7a:c8:4c:2e:66:88:52:74: b8:2f:50:b2:b4:da:f6:d5:04:de:04:3c:de:35:83: 7b:5c:ba:06:5a:07:92:62:b8:6d:9b:e8:78:c4:d5: cb:59:08:ab:17:06:6e:54:55:ab:92:01:2c:a0:27: 13:ea:08:15:bd:09:37:a0:c7:07:0f:2a:76:34:13: c2:a4:17:2e:e3:d1:03:9b:8f:6f:be:79:14:64:a8: 33:54:0a:73:f5:90:65:4c:99:09:31:5c:b4:1c:2b: 1a:f8:b4:ed:b7:f0:e1:83:a6:c1:9a:07:46:5d:83: 9b:bd:24:73:92:58:87:1d:d8:6f:dd:ea:15:e8:b0: 5e:ad:b9:22:95:8b:15:ec:c4:b5:b4:e8:95:4b:a9: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DE:CE:E0:4C:74:82:A2:E0:8E:81:54:7E:10:92:48:1F:D9:CE:29 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f0:17:d6:08:be:d4:9f:8b:21:b2:1f:4b:15:6e:49:03:24: fa:23:2c:73:27:23:78:5e:6c:5d:f1:d9:c3:e6:8a:1b:fa:bc: 32:aa:17:fe:77:fd:f5:d7:28:36:37:c1:58:20:fe:57:18:72: 02:26:33:b5:ba:5a:b7:e6:dc:a7:e5:c9:84:ac:49:37:bf:4e: d1:9b:80:e2:f0:95:e6:bf:c9:7c:49:3f:33:aa:d0:ec:3e:e9: 24:7e:5b:9c:a4:aa:6e:3c:a7:15:36:f1:24:30:d6:54:d0:b9: 7c:3b:d3:44:e2:25:d4:ba:ab:40:93:ab:74:dd:9e:de:05:97: 24:3b:de:31:81:4e:b8:6c:c4:18:c8:8a:25:8d:8c:58:8d:8d: 72:2f:17:3c:5c:83:20:ea:8e:8f:c1:05:2d:d5:a4:fa:04:dd: fe:df:b2:04:2a:8d:0c:09:a8:99:87:54:3d:69:c1:00:4b:91: 4e:b4:49:14:6b:86:fe:e4:76:7a:99:3b:7e:e9:b3:a4:9f:7d: 8b:4b:96:95:ab:64:7f:ab:ad:56:f1:91:59:32:f4:ec:bd:b5: 22:1f:e8:b5:0b:49:e9:87:5b:e8:d5:d2:12:13:2b:8d:b9:fb: dc:3d:94:d2:d0:47:de:2c:39:d9:68:7d:a1:89:00:6b:c7:bc: 07:34:26:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjUwNTMwMjIwNzIxWhcNMjUwNjA2MjIwNzIxWjAYMRYwFAYD VQQDEw02ODNhMmMxOS0wODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkGxgCNSIbMXQoSJom4NhrseWF0ntH81sZNiOIXxpn5OvUyqTfsCaBex0gAy rbJYSA5S8rpyJb505hebqKh4x/28I0rHbJigB4ACJPU5ZMatHFznJcd1ljHhppKu YE06U143xNnm5ROwAiWUW92ieshMLmaIUnS4L1CytNr21QTeBDzeNYN7XLoGWgeS Yrhtm+h4xNXLWQirFwZuVFWrkgEsoCcT6ggVvQk3oMcHDyp2NBPCpBcu49EDm49v vnkUZKgzVApz9ZBlTJkJMVy0HCsa+LTtt/Dhg6bBmgdGXYObvSRzkliHHdhv3eoV 6LBerbkilYsV7MS1tOiVS6kBBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLezuBM dIKi4I6BVH4Qkkgf2c4pMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM8BfWCL7Un4shsh9LFW5JAyT6IyxzJyN4Xmxd8dnD5oob+rwyqhf+ d/311yg2N8FYIP5XGHICJjO1ulq35tyn5cmErEk3v07Rm4Di8JXmv8l8ST8zqtDs PukkflucpKpuPKcVNvEkMNZU0Ll8O9NE4iXUuqtAk6t03Z7eBZckO94xgU64bMQY yIoljYxYjY1yLxc8XIMg6o6PwQUt1aT6BN3+37IEKo0MCaiZh1Q9acEAS5FOtEkU a4b+5HZ6mTt+6bOkn32LS5aVq2R/q61W8ZFZMvTsvbUiH+i1C0nph1vo1dISEyuN ufvcPZTS0EfeLDnZaH2hiQBrx7wHNCY1 -----END CERTIFICATE-----Generated at Sat May 31 16:03:36 2025 by rpki-client