$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: fnwrNJ9Yi9DzuYEV+aei/cBe/UC37Jeonob/1CiWtpE= Subject key identifier: EA:9F:C2:38:18:B6:D2:F5:36:E1:91:9E:63:89:55:80:8A:2F:23:90 Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0B5E Signing time: Fri 30 May 2025 19:16:59 +0000 Manifest this update: Fri 30 May 2025 19:16:59 +0000 Manifest next update: Fri 06 Jun 2025 19:16:59 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: m2C/5fRzv5cHyAVmB4SWktyaYcHkyKyIYDlT7sgwcL4=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: XDeDVN+pHUEVt+DCqatZGjQaIovu0vNRnw8eGH3pRAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: May 30 19:16:59 2025 GMT Not After : Jun 6 19:16:59 2025 GMT Subject: CN=683a042b-1a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:6d:6f:4f:43:08:08:b5:ec:7e:ea:be:5f: 30:e4:0c:90:9f:2b:16:1c:85:5b:b7:dc:f7:c6:be: 3b:cd:a7:b1:76:7e:aa:b0:a9:92:9f:6d:1c:62:35: d5:ef:12:3e:49:a5:98:68:d7:75:16:5e:a3:d0:e5: e2:9f:d6:b6:60:45:e2:f1:10:9f:c9:b2:d3:f4:59: 3b:74:4e:7d:39:31:9f:78:6d:b3:ed:2a:03:a4:8a: 87:15:c5:b3:4a:cf:2d:35:ae:30:28:5d:0f:ba:ed: 47:e9:ce:dd:47:02:6d:d8:94:3d:a5:c6:4a:63:ad: 7a:80:2d:95:53:86:80:84:69:b5:83:0d:7a:d6:e8: ef:71:f1:86:c3:92:b1:05:fe:ea:87:0c:ec:47:ab: 5a:94:6e:31:03:12:f9:c2:52:8f:20:c9:9e:b9:1e: cb:1e:23:a0:ff:1c:b7:98:af:2c:0c:08:63:df:95: 6e:82:c4:40:47:d9:48:ad:0c:05:93:66:d0:06:d9: b9:53:e2:6d:34:b5:e5:28:00:7b:ad:37:86:0f:3f: e7:c0:d3:d6:a1:d7:c5:7f:cc:b4:a4:0a:60:95:8a: 8f:08:e0:a8:8b:f1:6e:d4:7f:a8:3d:71:01:43:15: 5d:bf:69:65:77:51:ab:6d:35:60:72:01:70:b1:ef: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9F:C2:38:18:B6:D2:F5:36:E1:91:9E:63:89:55:80:8A:2F:23:90 X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ba:85:a7:22:9e:47:62:8f:1b:9b:79:f8:e6:f5:60:0c:9b: 25:c9:a7:bf:a2:dc:9f:70:e4:e9:77:94:58:44:e8:a5:56:65: 1e:eb:b3:3a:83:af:a4:84:65:71:d2:bc:76:7d:1a:9e:cc:4a: bd:a7:23:0b:2c:28:69:ee:50:8f:d2:5d:75:27:6a:24:d9:17: 12:88:82:65:73:e7:35:11:6f:ce:12:84:1e:b6:3a:24:d7:65: bb:8f:3c:ae:c5:84:24:c7:67:99:81:21:8e:45:34:bc:37:1a: 89:af:e0:fe:74:99:8e:f5:06:f8:a4:07:b1:50:78:0a:3f:c9: c5:f7:6d:ec:69:ba:35:39:a3:f6:f9:6d:73:6a:e8:87:b3:11: c4:f0:1d:16:39:7b:8f:48:07:6f:bc:de:4b:d9:64:1f:64:b1: c2:fa:ea:35:4d:9e:53:bb:24:f1:12:b4:b5:c8:6b:68:1e:2f: e8:37:7f:ab:ac:50:a9:fc:c2:26:2a:bf:b3:31:50:01:0f:f2: 6b:10:e0:57:fd:47:c6:87:91:b7:84:50:65:c0:9a:15:20:19: 35:17:53:d3:03:2a:b2:19:dd:77:dd:7a:51:fb:1f:c2:e1:c6: 14:8f:4c:50:ea:4a:92:91:dd:25:de:68:c7:83:e3:9a:1d:09: c8:f8:1a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjUwNTMwMTkxNjU5WhcNMjUwNjA2MTkxNjU5WjAYMRYwFAYD VQQDEw02ODNhMDQyYi0xYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE9tb09DCAi17H7qvl8w5AyQnysWHIVbt9z3xr47zaexdn6qsKmSn20cYjXV 7xI+SaWYaNd1Fl6j0OXin9a2YEXi8RCfybLT9Fk7dE59OTGfeG2z7SoDpIqHFcWz Ss8tNa4wKF0Puu1H6c7dRwJt2JQ9pcZKY616gC2VU4aAhGm1gw161ujvcfGGw5Kx Bf7qhwzsR6talG4xAxL5wlKPIMmeuR7LHiOg/xy3mK8sDAhj35VugsRAR9lIrQwF k2bQBtm5U+JtNLXlKAB7rTeGDz/nwNPWodfFf8y0pApglYqPCOCoi/Fu1H+oPXEB QxVdv2lld1GrbTVgcgFwse/gjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqfwjgY ttL1NuGRnmOJVYCKLyOQMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFuoWnIp5HYo8bm3n45vVgDJslyae/otyfcOTpd5RYROilVmUe67M6 g6+khGVx0rx2fRqezEq9pyMLLChp7lCP0l11J2ok2RcSiIJlc+c1EW/OEoQetjok 12W7jzyuxYQkx2eZgSGORTS8NxqJr+D+dJmO9Qb4pAexUHgKP8nF923sabo1OaP2 +W1zauiHsxHE8B0WOXuPSAdvvN5L2WQfZLHC+uo1TZ5TuyTxErS1yGtoHi/oN3+r rFCp/MImKr+zMVABD/JrEOBX/UfGh5G3hFBlwJoVIBk1F1PTAyqyGd133XpR+x/C 4cYUj0xQ6kqSkd0l3mjHg+OaHQnI+BpE -----END CERTIFICATE-----Generated at Sat May 31 16:25:55 2025 by rpki-client