$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft File: TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json) Hash identifier: LAZRffvZQAlXfR5nuPRqT1dkmNKRbQBFjW8pDGrTneo= Subject key identifier: D6:5B:74:32:5B:BC:16:59:E8:0E:2B:99:9D:53:4B:B0:1D:34:88:26 Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C Certificate issuer: /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft Manifest number: 6C Signing time: Sun 01 Jun 2025 06:44:01 +0000 Manifest this update: Sun 01 Jun 2025 06:44:01 +0000 Manifest next update: Sun 08 Jun 2025 06:44:01 +0000 Files and hashes: 1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: S9kwC/N2zXOT3gibi4Yw4CNyyEkHtdK3lJViDrFLUHA=) 2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: m6Ln5a7ZSeIX81Tm2886H7n9SlKXj8hnsIcbsYsTN7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C Validity Not Before: Jun 1 06:44:01 2025 GMT Not After : Jun 8 06:44:01 2025 GMT Subject: CN=683bf6b1-ed45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:84:7a:b2:77:ea:72:40:31:9c:e3:51:48: cf:8f:bb:ba:70:bc:0d:ca:23:bf:8c:67:ee:66:18: dd:4c:50:d4:1a:f5:b5:2f:42:65:1c:ce:2e:37:95: 82:eb:b4:1a:98:23:5b:53:a1:dc:bf:cb:2f:63:aa: 0c:cc:07:d0:16:11:83:42:eb:f4:56:8b:b8:09:38: 71:91:7c:c6:9f:fc:d3:ee:6b:27:59:f8:49:da:69: 83:66:bf:62:06:39:ee:1e:ce:11:dd:f6:2d:96:0d: 35:56:b4:8e:fd:0f:c5:bb:ce:03:f7:e0:7f:6f:66: 69:91:0e:82:6d:5f:4e:51:d4:c6:af:b6:a5:65:86: fa:2a:60:9e:46:a5:d3:6d:41:02:0d:e5:58:12:df: 72:90:12:98:0d:f9:4f:13:a6:3c:c1:6b:28:c3:a6: 28:61:e4:5a:43:45:1d:52:b4:30:4c:4c:c3:8b:4f: ec:ed:4c:02:56:da:c7:74:fe:1b:88:1f:a2:a4:d8: fb:aa:49:91:3b:6a:61:35:79:c1:7d:af:3b:ce:0c: ca:6b:bf:8e:d8:7a:2e:55:70:3e:28:52:af:cd:a7: 36:ce:bb:32:c6:bc:53:9c:e6:5d:ee:45:f9:d7:56: 85:92:04:f6:03:4b:ed:e1:be:01:3b:f5:ef:43:0c: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5B:74:32:5B:BC:16:59:E8:0E:2B:99:9D:53:4B:B0:1D:34:88:26 X509v3 Authority Key Identifier: keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:43:f4:13:dd:21:ae:c6:9c:a6:10:35:03:ea:93:e8:ac:ac: da:ec:c0:97:4e:be:37:13:69:8f:45:57:17:44:cf:c7:f6:e0: 45:03:2d:6c:4b:cc:2e:db:92:a4:ea:6d:52:0c:25:e4:16:73: 6f:7e:c9:59:17:a3:28:a2:b0:51:a0:89:11:dc:89:31:89:79: 04:a4:14:89:06:a4:2c:96:21:74:ab:09:df:9e:97:5b:1f:a2: 0d:61:6c:44:65:70:3e:01:78:87:0a:08:47:0b:41:fe:e8:64: 5d:1e:cf:ec:90:63:b8:12:da:2f:3a:3c:9b:19:f7:98:ae:01: 5d:e7:34:ab:9f:a0:03:3a:e0:20:c2:c8:35:bf:ba:52:a5:4b: 7a:cf:0b:6c:70:00:ac:c4:2f:09:fe:21:6d:4b:d0:0e:42:2a: 6f:52:85:55:27:47:d0:0f:a3:00:c4:a8:35:6b:b3:01:52:e0: 9d:20:0c:75:ef:7d:00:f5:a6:0f:76:48:68:5b:b7:f2:29:dc: 3a:c8:51:e0:f0:8c:cd:71:3f:05:62:5c:0e:4d:35:af:8d:91: 0a:23:63:6b:8e:62:1e:21:c6:5b:fd:37:26:7d:72:35:8e:29: 2f:27:15:8f:09:d4:7d:2e:22:27:00:18:4b:d1:58:0a:a3:57: d4:10:3a:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODI1RDExMC8GA1UEBRMoNENBMDJFQzExMTg3NEFFMEU3RDA1NTVBMjVGRjMzMDJG OTEyRUI4QzAeFw0yNTA2MDEwNjQ0MDFaFw0yNTA2MDgwNjQ0MDFaMBgxFjAUBgNV BAMTDTY4M2JmNmIxLWVkNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB7IR6snfqckAxnONRSM+Pu7pwvA3KI7+MZ+5mGN1MUNQa9bUvQmUczi43lYLr tBqYI1tTody/yy9jqgzMB9AWEYNC6/RWi7gJOHGRfMaf/NPuaydZ+EnaaYNmv2IG Oe4ezhHd9i2WDTVWtI79D8W7zgP34H9vZmmRDoJtX05R1MavtqVlhvoqYJ5GpdNt QQIN5VgS33KQEpgN+U8TpjzBayjDpihh5FpDRR1StDBMTMOLT+ztTAJW2sd0/huI H6Kk2PuqSZE7amE1ecF9rzvODMprv47Yei5VcD4oUq/NpzbOuzLGvFOc5l3uRfnX VoWSBPYDS+3hvgE79e9DDMnZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1lt0Mlu8 FlnoDiuZnVNLsB00iCYwHwYDVR0jBBgwFoAUTKAuwRGHSuDn0FVaJf8zAvkS64ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MjVEL0RENzFENTY4QTQ0 NjExRUY4RDU4QTYyNEM0RjlBRTAyL1RLQXV3UkdIU3VEbjBGVmFKZjh6QXZrUzY0 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEtBdXdSR0hTdURuMEZWYUpmOHpBdmtTNjR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MjVEL0RENzFENTY4QTQ0NjExRUY4RDU4QTYyNEM0RjlBRTAyL1RLQXV3UkdIU3VE bjBGVmFKZjh6QXZrUzY0dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5D9BPdIa7GnKYQNQPqk+isrNrswJdOvjcTaY9FVxdEz8f24EUDLWxL zC7bkqTqbVIMJeQWc29+yVkXoyiisFGgiRHciTGJeQSkFIkGpCyWIXSrCd+el1sf og1hbERlcD4BeIcKCEcLQf7oZF0ez+yQY7gS2i86PJsZ95iuAV3nNKufoAM64CDC yDW/ulKlS3rPC2xwAKzELwn+IW1L0A5CKm9ShVUnR9APowDEqDVrswFS4J0gDHXv fQD1pg92SGhbt/Ip3DrIUeDwjM1xPwViXA5NNa+NkQojY2uOYh4hxlv9NyZ9cjWO KS8nFY8J1H0uIicAGEvRWAqjV9QQOl0= -----END CERTIFICATE-----Generated at Mon Jun 2 18:47:16 2025 by rpki-client