$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: xZe8++6HoD7i8vKnqoLGahOqjXmxoP4K86vFYx0kEhs= Subject key identifier: D2:F0:FD:1F:C8:0B:08:04:AD:02:37:D7:F8:5D:64:6B:2A:8B:1A:9C Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A0C Signing time: Fri 30 May 2025 20:00:14 +0000 Manifest this update: Fri 30 May 2025 20:00:13 +0000 Manifest next update: Fri 06 Jun 2025 20:00:13 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: rfUzz6XVVHi34IZs01BxfSchYE3JDamrKia6Q4+SSyQ=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: May 30 20:00:13 2025 GMT Not After : Jun 6 20:00:13 2025 GMT Subject: CN=683a0e4e-2443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:0e:20:20:c9:24:59:46:ef:10:0a:87:ec: 4b:c7:47:42:cc:51:93:77:f6:d7:11:c6:b3:37:33: e8:99:3a:81:88:57:ea:f6:1e:fd:3a:84:43:d2:79: 1e:8c:87:58:03:53:4c:5a:57:26:94:13:ac:74:bf: 60:21:b2:3f:29:60:dc:a3:0e:fc:5b:04:eb:7a:bc: f4:1f:f6:eb:14:95:90:f8:bc:d5:9d:a2:f5:0b:4c: 16:98:82:d8:ad:4d:81:c1:2c:53:15:b0:8e:94:7b: 37:07:45:6b:2d:d5:83:6e:89:9e:83:2d:aa:b0:fd: ae:af:f2:28:4e:78:b7:21:2b:94:ff:af:9e:f0:52: 6b:76:2c:9e:71:80:ae:f0:ed:66:d4:3c:9f:5f:4d: 6a:b6:0f:db:76:fb:7b:0b:9f:ea:fb:41:94:d1:55: f2:fa:b3:64:a1:dc:43:f4:6f:37:1c:d5:16:46:63: 5b:93:58:aa:88:5e:0a:7c:88:11:2e:81:45:79:ce: fb:6c:76:c3:71:79:7a:3e:b0:9e:4c:8e:29:24:1d: 19:ac:26:ee:5a:bc:5a:60:9a:1c:b1:8b:2a:91:62: 82:2f:37:87:f4:94:96:74:cf:6e:de:26:cd:cc:cd: ba:fa:ee:25:6c:21:0e:6f:98:2d:f0:fa:e1:8a:bd: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F0:FD:1F:C8:0B:08:04:AD:02:37:D7:F8:5D:64:6B:2A:8B:1A:9C X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:16:58:a8:4d:59:5d:0d:fc:57:e3:ff:92:01:df:9c:61: 99:24:ab:bc:37:75:5e:66:da:33:26:25:80:f7:27:39:ee:f2: 72:3f:5c:ab:33:ec:4d:6e:77:4a:51:d3:3a:b5:9c:8f:b9:c8: 1e:1d:ec:0c:14:25:50:69:98:3d:89:91:f6:32:55:ba:50:3c: e3:9b:ce:d4:bf:38:8b:c8:d6:b3:5a:12:e5:c1:1a:46:2e:f4: c1:aa:ce:5f:2a:7f:f3:28:42:32:b1:2d:a1:00:88:b8:16:82: 55:14:80:38:15:f2:65:5d:37:6f:bb:c8:11:fb:7a:36:ad:1a: 91:13:00:72:75:97:20:32:39:94:65:ca:d5:2d:35:31:6d:78: 26:56:7e:62:6c:3b:b5:b8:f4:4d:90:86:39:f2:53:d7:f2:5c: 0f:d0:2d:f1:13:19:93:9a:01:f0:7f:0e:aa:64:2d:84:f9:90: cf:8c:b7:60:f3:0f:86:78:64:ee:9a:4c:35:ff:26:30:e8:ff: 02:ff:c8:69:45:7c:b4:89:68:70:85:92:3a:19:ff:2e:11:f3: 0f:ff:24:e8:55:5d:84:0f:b4:b3:c2:d3:23:24:be:c0:6f:34: f6:1e:bf:53:39:3f:cf:98:64:6e:c6:04:64:0a:12:75:b5:9c: 70:71:4f:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUwNTMwMjAwMDEzWhcNMjUwNjA2MjAwMDEzWjAYMRYwFAYD VQQDEw02ODNhMGU0ZS0yNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvcOICDJJFlG7xAKh+xLx0dCzFGTd/bXEcazNzPomTqBiFfq9h79OoRD0nke jIdYA1NMWlcmlBOsdL9gIbI/KWDcow78WwTrerz0H/brFJWQ+LzVnaL1C0wWmILY rU2BwSxTFbCOlHs3B0VrLdWDbomegy2qsP2ur/IoTni3ISuU/6+e8FJrdiyecYCu 8O1m1DyfX01qtg/bdvt7C5/q+0GU0VXy+rNkodxD9G83HNUWRmNbk1iqiF4KfIgR LoFFec77bHbDcXl6PrCeTI4pJB0ZrCbuWrxaYJocsYsqkWKCLzeH9JSWdM9u3ibN zM26+u4lbCEOb5gt8Prhir1TeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLw/R/I CwgErQI31/hdZGsqixqcMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5TxZYqE1ZXQ38V+P/kgHfnGGZJKu8N3VeZtozJiWA9yc57vJyP1yr M+xNbndKUdM6tZyPucgeHewMFCVQaZg9iZH2MlW6UDzjm87UvziLyNazWhLlwRpG LvTBqs5fKn/zKEIysS2hAIi4FoJVFIA4FfJlXTdvu8gR+3o2rRqREwBydZcgMjmU ZcrVLTUxbXgmVn5ibDu1uPRNkIY58lPX8lwP0C3xExmTmgHwfw6qZC2E+ZDPjLdg 8w+GeGTumkw1/yYw6P8C/8hpRXy0iWhwhZI6Gf8uEfMP/yToVV2ED7SzwtMjJL7A bzT2Hr9TOT/PmGRuxgRkChJ1tZxwcU9D -----END CERTIFICATE-----Generated at Sat May 31 17:51:38 2025 by rpki-client