$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: VquAgzeBpFxla5V/5gyALtawlUp7/aQaxdIyoA8TmzA= Subject key identifier: B5:DF:ED:BA:95:23:D5:7E:EC:48:CB:C6:FF:0C:33:C3:61:43:4D:21 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 0748 Signing time: Fri 30 May 2025 21:54:34 +0000 Manifest this update: Fri 30 May 2025 21:54:34 +0000 Manifest next update: Fri 06 Jun 2025 21:54:34 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: ICfmD3VJFspLamz4UYNOAOfznY39sLSGdgVY7Fw3CAc=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: l0d5U/HukOAxqR+/ThmuC5REmFDut/5BnvDM1762AlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: May 30 21:54:34 2025 GMT Not After : Jun 6 21:54:34 2025 GMT Subject: CN=683a291a-eb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:bd:a0:29:75:03:d7:57:d8:d0:d7:9a:8a: 03:26:78:bd:e2:14:b8:a3:6e:88:8f:ad:e3:63:46: ed:48:da:7e:9b:6e:68:81:27:7b:58:02:28:a1:df: 28:b0:1e:4a:e7:33:36:61:a8:4e:a3:26:46:82:b4: ff:3c:d6:05:ba:ab:fd:8f:de:6d:0a:5d:09:8a:95: 21:22:3a:e6:2f:58:d3:e5:c4:82:ba:d7:09:41:fe: 29:43:74:5f:5e:9e:ab:03:58:60:d9:62:14:c3:c0: 49:3c:4b:41:14:8e:24:c7:c0:3c:57:10:21:2e:3e: ed:d8:be:d9:13:bb:66:d6:9f:3f:3a:7a:a0:7b:89: e5:9b:27:2e:63:6c:cd:72:5a:42:71:84:4f:82:cb: 96:12:cf:55:90:dc:9b:ca:9e:fc:61:f3:ee:7c:92: ed:cc:4e:60:ba:86:6f:0d:09:45:76:d2:50:fd:48: b0:28:ac:f1:f8:ed:7e:58:52:d6:e2:95:80:d7:ff: 6c:c9:e2:a4:de:b5:6d:f0:52:d0:4a:c7:46:b6:3c: ba:c5:72:4f:a6:df:3a:67:55:ff:66:f8:07:4f:3c: 70:0d:7e:84:85:ef:d6:71:f8:22:ea:5b:83:8d:59: 8f:35:3b:3f:cf:92:86:83:24:bb:fa:41:e3:e5:de: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:ED:BA:95:23:D5:7E:EC:48:CB:C6:FF:0C:33:C3:61:43:4D:21 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b0:fd:b7:8d:e1:67:bd:f4:7d:5b:51:a7:fd:70:c0:29:0d: a3:e2:bc:50:3a:23:b3:01:07:e4:fe:24:8c:0e:8b:5c:fd:c4: bb:08:e9:7c:d8:96:72:2b:02:c1:a1:31:51:0c:5d:1f:aa:ea: b9:18:c7:43:cc:9b:7b:f9:7e:de:4f:29:1b:5a:16:48:6f:a2: e5:51:ee:53:86:06:61:07:56:72:87:0c:a7:0e:14:ff:88:5f: 86:ea:fa:c4:10:80:e5:8f:67:91:03:02:67:ab:4f:8a:a8:7c: 2a:47:95:a9:a6:ed:ed:5f:3d:a4:04:e8:44:07:14:98:a8:b6: 25:2b:c2:aa:e0:66:06:cd:1c:5b:f3:e8:9c:5b:0d:1e:c5:c1: eb:d1:8a:15:79:ef:9f:42:0e:c1:89:b9:9a:9a:da:39:24:af: 67:ae:8d:26:e5:f0:23:97:d8:a3:7d:c2:c8:6c:19:2b:74:02: c7:51:0b:76:c1:14:64:f2:85:a8:88:ac:27:47:bc:bd:ae:13: 53:9e:a3:77:5b:f5:e6:f9:c4:b4:80:d9:a6:4f:bd:fc:a2:de: a5:9a:e6:be:72:6a:d2:7f:dc:f7:92:6b:88:b6:c8:c9:df:3f: da:84:99:88:b1:d9:90:d8:08:42:be:c9:59:1a:1a:cf:0e:68: 69:78:6e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjUwNTMwMjE1NDM0WhcNMjUwNjA2MjE1NDM0WjAYMRYwFAYD VQQDEw02ODNhMjkxYS1lYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDO9oCl1A9dX2NDXmooDJni94hS4o26Ij63jY0btSNp+m25ogSd7WAIood8o sB5K5zM2YahOoyZGgrT/PNYFuqv9j95tCl0JipUhIjrmL1jT5cSCutcJQf4pQ3Rf Xp6rA1hg2WIUw8BJPEtBFI4kx8A8VxAhLj7t2L7ZE7tm1p8/Onqge4nlmycuY2zN clpCcYRPgsuWEs9VkNybyp78YfPufJLtzE5guoZvDQlFdtJQ/UiwKKzx+O1+WFLW 4pWA1/9syeKk3rVt8FLQSsdGtjy6xXJPpt86Z1X/ZvgHTzxwDX6Ehe/Wcfgi6luD jVmPNTs/z5KGgyS7+kHj5d7IQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXf7bqV I9V+7EjLxv8MM8NhQ00hMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSsP23jeFnvfR9W1Gn/XDAKQ2j4rxQOiOzAQfk/iSMDotc/cS7COl8 2JZyKwLBoTFRDF0fquq5GMdDzJt7+X7eTykbWhZIb6LlUe5ThgZhB1ZyhwynDhT/ iF+G6vrEEIDlj2eRAwJnq0+KqHwqR5Wppu3tXz2kBOhEBxSYqLYlK8Kq4GYGzRxb 8+icWw0excHr0YoVee+fQg7Bibmamto5JK9nro0m5fAjl9ijfcLIbBkrdALHUQt2 wRRk8oWoiKwnR7y9rhNTnqN3W/Xm+cS0gNmmT738ot6lmua+cmrSf9z3kmuItsjJ 3z/ahJmIsdmQ2AhCvslZGhrPDmhpeG7C -----END CERTIFICATE-----Generated at Sat May 31 14:55:06 2025 by rpki-client