$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: T2ICFU+tsSvyPIdwX7WBYM7vVlslfcIwZSt3jAl0W58= Subject key identifier: 97:EC:CF:83:A9:FA:F2:DC:C6:F3:4D:E6:57:38:35:DA:F7:3A:87:80 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 03FB Signing time: Sat 31 May 2025 00:44:28 +0000 Manifest this update: Sat 31 May 2025 00:44:28 +0000 Manifest next update: Sat 07 Jun 2025 00:44:28 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: xmBWvdIbefDOfL0k8UrdKOaW75K//ndc7t7OyhH2K1Q=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: 1iuXJipvz24oOntaPEU1wj4mqlPSsDFfiyLqXTsQZv4=) 3: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: May 31 00:44:28 2025 GMT Not After : Jun 7 00:44:28 2025 GMT Subject: CN=683a50ec-20fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:e7:84:7b:ae:00:72:14:e3:4d:ab:9c:d4: 28:4f:61:30:00:6b:a2:9b:9f:1e:28:0e:cd:69:8e: e9:7b:36:2d:ff:3f:f6:36:23:d7:c7:36:fd:4b:b3: 92:f0:1c:38:57:3c:9c:d7:57:24:00:94:63:25:c4: 17:24:95:fb:14:3f:11:4c:f4:96:9f:30:31:5d:59: 41:79:88:56:4b:5a:c9:de:5e:2d:31:dd:aa:e3:12: a0:e6:02:97:60:7f:72:e1:9b:dd:96:6e:2b:2d:c1: 65:1c:77:f1:c4:4d:6b:39:af:f3:7d:05:8b:79:ab: 7e:ae:82:ba:65:4b:6a:85:77:7f:d4:23:10:5c:c1: c0:64:55:5b:98:74:44:50:50:fc:6f:2d:41:93:1d: e4:79:3d:66:28:d1:83:02:02:f3:fa:32:d9:d6:1d: a6:84:39:e8:cd:75:6c:6e:4d:6d:d6:c5:30:13:81: 01:74:11:26:1a:25:82:17:af:1f:67:a5:ad:13:5f: 5b:2c:f8:a7:6c:0f:a9:bd:e9:dc:5f:a5:be:db:a8: 41:f4:fa:25:65:83:73:3c:96:ba:f3:6a:f9:70:05: 52:06:c4:ec:6a:9c:a9:7e:0c:1d:86:de:2f:0e:ee: 58:a1:bd:ec:7b:9a:92:5e:67:cc:37:68:1a:c1:23: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:CF:83:A9:FA:F2:DC:C6:F3:4D:E6:57:38:35:DA:F7:3A:87:80 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:64:4c:b3:fa:90:52:cc:38:13:6e:45:98:0b:fc:1f:85:be: 47:04:99:11:28:76:70:9c:82:10:a9:08:38:17:7b:3c:41:21: 7f:b1:65:68:c6:53:5f:0b:d7:2f:30:6d:7c:e3:77:4f:e3:74: 8d:ae:67:4f:38:8f:8b:8a:43:e5:fa:24:e0:fb:4a:eb:0e:be: 82:1a:e0:d9:a2:d8:ac:87:57:b8:14:d0:db:37:89:af:ed:5d: 47:f0:0f:ff:8a:55:89:24:1c:63:39:3f:5a:08:d5:a2:32:82: 08:08:90:ec:94:f3:5c:29:57:b7:cd:49:52:a3:94:bc:a5:f4: d1:ad:39:e4:de:b6:2e:24:a9:ef:b8:19:f1:51:08:b0:4a:5b: 93:61:76:44:4d:4b:13:18:f8:06:da:3a:15:9d:96:31:c0:d0: dc:d7:fc:d4:13:f8:cf:a8:cd:ae:72:e4:94:85:b2:90:c5:85: da:35:f1:56:d7:d5:f8:44:4e:b9:f7:b8:b6:da:d5:2b:8e:d8: f5:24:5f:d8:e5:ab:79:68:bf:b1:1d:b6:1e:1b:d0:14:cd:12: 58:23:87:db:91:ea:b2:2e:d2:bc:4b:4d:2b:94:d7:d2:c5:fd: 16:27:7e:a9:b1:8d:52:2e:2d:ac:20:25:9d:2f:f1:aa:9a:cf: df:b0:23:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwNTMxMDA0NDI4WhcNMjUwNjA3MDA0NDI4WjAYMRYwFAYD VQQDEw02ODNhNTBlYy0yMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f3nhHuuAHIU402rnNQoT2EwAGuim58eKA7NaY7pezYt/z/2NiPXxzb9S7OS 8Bw4Vzyc11ckAJRjJcQXJJX7FD8RTPSWnzAxXVlBeYhWS1rJ3l4tMd2q4xKg5gKX YH9y4Zvdlm4rLcFlHHfxxE1rOa/zfQWLeat+roK6ZUtqhXd/1CMQXMHAZFVbmHRE UFD8by1Bkx3keT1mKNGDAgLz+jLZ1h2mhDnozXVsbk1t1sUwE4EBdBEmGiWCF68f Z6WtE19bLPinbA+pvencX6W+26hB9PolZYNzPJa682r5cAVSBsTsapypfgwdht4v Du5Yob3se5qSXmfMN2gawSM1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfsz4Op +vLcxvNN5lc4Ndr3OoeAMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHZEyz+pBSzDgTbkWYC/wfhb5HBJkRKHZwnIIQqQg4F3s8QSF/sWVo xlNfC9cvMG1843dP43SNrmdPOI+LikPl+iTg+0rrDr6CGuDZotish1e4FNDbN4mv 7V1H8A//ilWJJBxjOT9aCNWiMoIICJDslPNcKVe3zUlSo5S8pfTRrTnk3rYuJKnv uBnxUQiwSluTYXZETUsTGPgG2joVnZYxwNDc1/zUE/jPqM2ucuSUhbKQxYXaNfFW 19X4RE6597i22tUrjtj1JF/Y5at5aL+xHbYeG9AUzRJYI4fbkeqyLtK8S00rlNfS xf0WJ36psY1SLi2sICWdL/Gqms/fsCMu -----END CERTIFICATE-----Generated at Sat May 31 16:49:12 2025 by rpki-client