$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft File: tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json) Hash identifier: NFidELbHjAEY0y8qM7wgUczYBUJ1pdKSvyqs6YUhTtU= Subject key identifier: A4:23:45:2D:77:CA:A6:FB:5D:0C:53:AD:E2:CD:2B:61:20:7F:8D:3A Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 Certificate issuer: /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft Manifest number: 01A1 Signing time: Sat 31 May 2025 03:02:57 +0000 Manifest this update: Sat 31 May 2025 03:02:57 +0000 Manifest next update: Sat 07 Jun 2025 03:02:57 +0000 Files and hashes: 1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: je43z7sugAz3i/tVYqqou2+UBuRR5T62MxOZe779eYA=) 2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: +f458BpYNQXJWNiE1S64iQtoNN+WOZY8faBLRWwapzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Validity Not Before: May 31 03:02:57 2025 GMT Not After : Jun 7 03:02:57 2025 GMT Subject: CN=683a7161-4334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:4f:83:dc:12:bf:16:fd:44:1d:d4:c0:63: 4d:46:db:af:a2:ea:bd:2b:93:5e:97:06:be:72:1b: bd:6f:81:44:c8:2a:89:8b:25:f6:fe:4a:7d:c0:b5: 1f:40:80:80:a3:b0:1f:c1:02:97:5f:3d:90:c9:c2: 61:ca:80:3b:73:68:05:79:61:1f:43:45:82:96:4a: 3b:19:ed:92:00:08:2a:c7:df:14:d8:8d:70:18:22: 7c:eb:11:5d:0a:be:ee:d8:5e:93:43:78:c2:6e:4a: f2:e8:2e:d9:64:c5:3e:82:f4:7a:b8:e8:15:7a:bf: 1a:59:17:68:93:dc:68:20:a9:bd:16:71:0e:92:fc: 3f:1c:f6:ed:e5:bd:32:b2:8d:76:71:e4:a1:52:24: cf:5a:49:5e:7b:73:e9:0b:97:72:b8:00:ed:27:fa: 4d:77:66:f9:1b:4f:ff:45:09:24:9f:8d:7a:fd:24: 13:77:00:5a:e3:83:05:29:88:20:e5:d1:54:dc:ba: 79:0a:d4:a2:10:a9:21:a0:61:a9:8d:d4:2f:ae:f1: 00:33:14:a9:ab:9f:dd:b3:e9:d6:1c:d3:51:e0:54: 2f:7c:48:08:31:9e:b5:8f:c1:1d:f6:0e:26:9e:25: 55:13:ca:e4:8a:08:70:d4:77:53:1b:9a:e9:d1:99: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:45:2D:77:CA:A6:FB:5D:0C:53:AD:E2:CD:2B:61:20:7F:8D:3A X509v3 Authority Key Identifier: keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a4:9f:e1:20:5b:b7:55:5e:6b:2a:7f:13:42:08:89:5e:4e: 2d:f5:3d:c0:7b:0e:82:23:d1:77:37:7a:10:47:89:fe:c2:48: 45:62:df:12:aa:98:79:24:8c:ff:00:67:01:10:b9:62:be:e5: 58:24:d1:0e:e2:f5:ce:dc:63:40:f7:9c:1a:86:de:f9:06:a4: 93:b4:63:8c:07:e2:03:c9:9f:bc:73:a2:cc:78:15:ed:b9:e7: c8:1a:14:6f:7d:79:01:49:eb:a4:31:d3:69:9c:16:d0:a0:ec: e1:14:f8:95:55:18:b8:4b:df:62:2e:0d:53:ff:96:64:4f:3f: ef:b2:49:69:68:01:7c:88:d4:9d:6c:b0:dc:15:99:2b:b7:b3: 3b:9c:3f:e2:fe:4d:6c:b7:aa:17:df:23:bc:42:73:62:18:8d: ae:95:77:a3:fd:c1:2e:07:23:82:ef:5d:ff:98:5c:88:52:2b: e3:a2:a9:e6:e4:9e:2d:a6:c6:99:4c:71:01:8d:1a:3a:3d:32: b2:bf:6d:0b:65:57:42:fe:d0:9e:f3:71:88:bd:f1:d8:13:81: 40:f8:d7:ec:49:c3:b2:65:08:94:7e:f8:4b:1e:cc:13:62:d0: 4d:6a:92:40:e0:a9:8a:63:2a:09:f1:33:68:02:12:f4:79:9b: 92:10:ba:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2OEIxMTAvBgNVBAUTKEI1RTlEREM2QkYwOUY4OTQ1ODU1NjA4NzQ0MkQ5NDhD NDQwMzQ1MzAwHhcNMjUwNTMxMDMwMjU3WhcNMjUwNjA3MDMwMjU3WjAYMRYwFAYD VQQDEw02ODNhNzE2MS00MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphhPg9wSvxb9RB3UwGNNRtuvouq9K5Nelwa+chu9b4FEyCqJiyX2/kp9wLUf QICAo7AfwQKXXz2QycJhyoA7c2gFeWEfQ0WClko7Ge2SAAgqx98U2I1wGCJ86xFd Cr7u2F6TQ3jCbkry6C7ZZMU+gvR6uOgVer8aWRdok9xoIKm9FnEOkvw/HPbt5b0y so12ceShUiTPWklee3PpC5dyuADtJ/pNd2b5G0//RQkkn416/SQTdwBa44MFKYgg 5dFU3Lp5CtSiEKkhoGGpjdQvrvEAMxSpq5/ds+nWHNNR4FQvfEgIMZ61j8Ed9g4m niVVE8rkighw1HdTG5rp0ZnjzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQjRS13 yqb7XQxTreLNK2Egf406MB8GA1UdIwQYMBaAFLXp3ca/CfiUWFVgh0QtlIxEA0Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4Qi8xRjdCMUQwOEMz OEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1KUllWV0NIUkMyVWpFUURS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RlbmR4cjhKLUpSWVZXQ0hSQzJVakVRRFJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY4Qi8xRjdCMUQwOEMzOEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1K UllWV0NIUkMyVWpFUURSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkpJ/hIFu3VV5rKn8TQgiJXk4t9T3Aew6CI9F3N3oQR4n+wkhFYt8S qph5JIz/AGcBELlivuVYJNEO4vXO3GNA95waht75BqSTtGOMB+IDyZ+8c6LMeBXt uefIGhRvfXkBSeukMdNpnBbQoOzhFPiVVRi4S99iLg1T/5ZkTz/vsklpaAF8iNSd bLDcFZkrt7M7nD/i/k1st6oX3yO8QnNiGI2ulXej/cEuByOC713/mFyIUivjoqnm 5J4tpsaZTHEBjRo6PTKyv20LZVdC/tCe83GIvfHYE4FA+NfsScOyZQiUfvhLHswT YtBNapJA4KmKYyoJ8TNoAhL0eZuSELoZ -----END CERTIFICATE-----Generated at Sat May 31 17:11:28 2025 by rpki-client