$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: P4dJQ17vzENlliGe7nd70Wrvpzc1x/0EfewyseYfR0o= Subject key identifier: D6:77:5D:A2:CE:78:79:65:75:3F:41:73:A6:03:EA:74:7D:9D:5A:92 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 069C Signing time: Fri 30 May 2025 22:24:37 +0000 Manifest this update: Fri 30 May 2025 22:24:36 +0000 Manifest next update: Fri 06 Jun 2025 22:24:36 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: fpDZrV26RnHMz5mFiPIm5V/2GkGrdsQURPK/QFcwYw4=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: May 30 22:24:36 2025 GMT Not After : Jun 6 22:24:36 2025 GMT Subject: CN=683a3025-3895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:b9:27:88:40:5b:16:9d:26:20:0a:51:7e: df:7a:8b:b5:8d:f7:98:ab:15:12:83:df:a0:dc:c3: 0e:b7:0b:43:2b:9d:d0:3d:b2:d9:a7:9a:45:97:f2: b5:c9:52:9d:d7:2d:80:7f:8e:1f:11:bf:5c:ae:43: a6:5f:b4:6f:a2:0e:8f:bb:f3:01:92:98:ab:80:8f: 47:fd:ce:e5:39:b0:4b:c0:4b:f5:fd:15:4e:ae:04: 25:c1:3c:41:7c:e1:2c:a8:20:59:52:8d:be:06:8d: 41:56:8c:ef:f9:d0:44:5c:bf:26:97:cd:15:ed:79: c8:c7:2b:b9:59:c1:38:4c:5d:29:b6:dc:d9:56:47: 27:0d:e6:6f:c0:dd:73:29:c0:c3:bd:ad:61:47:00: 73:2c:64:af:45:4a:bd:b5:27:79:b6:e1:7c:26:bb: 1d:8c:83:d8:58:b1:19:9b:f2:82:ad:88:56:a2:1b: 0a:a3:02:e9:15:73:7c:14:f7:a5:0e:f9:b7:26:be: 7a:67:14:21:df:e5:c5:3c:da:f2:7b:80:f7:d1:88: 5d:61:54:af:54:0d:f9:c5:54:4d:6b:3f:a4:f0:bc: 9e:39:8c:71:22:ea:b4:6c:0e:80:25:2d:c2:2c:d3: 0e:56:0d:be:f6:18:a4:1e:7f:ac:e9:f5:b5:1d:4f: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:5D:A2:CE:78:79:65:75:3F:41:73:A6:03:EA:74:7D:9D:5A:92 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:4f:d5:f6:78:6a:d4:0a:d1:de:d7:25:76:aa:bd:eb:18: 48:97:52:ea:54:57:51:53:ed:34:de:4c:9d:d8:e5:3e:2e:6c: a1:59:34:b3:3e:9c:78:90:81:69:aa:1e:8d:3f:fe:be:39:5b: fd:29:3e:87:d9:8e:ec:dc:5f:c6:ea:3d:86:15:a2:2c:61:d0: c0:58:bc:86:62:2f:e0:1e:4f:07:0e:5c:f7:1b:b5:08:04:d7: 7a:80:0c:ad:60:58:f3:9f:c6:21:36:90:e8:e6:79:1d:3b:28: f7:50:fc:21:06:88:fb:04:93:8e:11:f8:5a:a5:93:6b:77:90: 65:d8:ac:00:12:55:8f:e2:8e:89:53:3c:4a:df:db:2f:86:30: 72:aa:cb:90:c8:89:5e:f4:f3:58:c7:54:ac:1c:28:ca:43:8d: 02:e3:3f:8c:fb:23:19:04:b4:3b:a7:f3:2f:ff:cf:7a:fe:83: 7d:b3:83:56:70:01:2b:99:6b:dd:e0:10:29:00:f4:1f:bc:8a: a0:8b:fa:32:5a:ad:c8:ea:75:f3:f2:25:ca:fe:bc:93:ca:f6: 70:43:bd:e6:ff:20:7f:80:d6:86:00:c1:f3:85:90:4f:84:90: 65:79:7d:b6:2b:24:01:21:48:f1:8b:a4:ee:bd:67:70:37:53: 80:93:70:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjUwNTMwMjIyNDM2WhcNMjUwNjA2MjIyNDM2WjAYMRYwFAYD VQQDEw02ODNhMzAyNS0zODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhe5J4hAWxadJiAKUX7feou1jfeYqxUSg9+g3MMOtwtDK53QPbLZp5pFl/K1 yVKd1y2Af44fEb9crkOmX7Rvog6Pu/MBkpirgI9H/c7lObBLwEv1/RVOrgQlwTxB fOEsqCBZUo2+Bo1BVozv+dBEXL8ml80V7XnIxyu5WcE4TF0pttzZVkcnDeZvwN1z KcDDva1hRwBzLGSvRUq9tSd5tuF8JrsdjIPYWLEZm/KCrYhWohsKowLpFXN8FPel Dvm3Jr56ZxQh3+XFPNrye4D30YhdYVSvVA35xVRNaz+k8LyeOYxxIuq0bA6AJS3C LNMOVg2+9hikHn+s6fW1HU8X2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ3XaLO eHlldT9Bc6YD6nR9nVqSMB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvSE/V9nhq1ArR3tcldqq96xhIl1LqVFdRU+003kyd2OU+LmyhWTSz Ppx4kIFpqh6NP/6+OVv9KT6H2Y7s3F/G6j2GFaIsYdDAWLyGYi/gHk8HDlz3G7UI BNd6gAytYFjzn8YhNpDo5nkdOyj3UPwhBoj7BJOOEfhapZNrd5Bl2KwAElWP4o6J UzxK39svhjByqsuQyIle9PNYx1SsHCjKQ40C4z+M+yMZBLQ7p/Mv/896/oN9s4NW cAErmWvd4BApAPQfvIqgi/oyWq3I6nXz8iXK/ryTyvZwQ73m/yB/gNaGAMHzhZBP hJBleX22KyQBIUjxi6TuvWdwN1OAk3BL -----END CERTIFICATE-----Generated at Sat May 31 17:56:19 2025 by rpki-client