$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json) Hash identifier: 0V+uPxOsl1DimBmleg2ndWwwdMaQB1xZeHed1aEmnBw= Subject key identifier: 30:8E:2F:3F:E6:F6:88:34:EC:77:1A:C5:12:DA:52:8B:9D:70:D0:EC Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft Manifest number: 3E Signing time: Sun 11 May 2025 06:14:24 +0000 Manifest this update: Sun 11 May 2025 06:14:23 +0000 Manifest next update: Sun 18 May 2025 06:14:23 +0000 Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: z7psxA70Xo8007Nu8k3JO4Lg7RWvr4V27kz4MG/2Kcc=) 2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Validity Not Before: May 11 06:14:23 2025 GMT Not After : May 18 06:14:23 2025 GMT Subject: CN=68204040-3f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:c8:90:70:6a:cb:d2:4f:75:d0:e9:82:9c: db:1d:9a:ac:1a:92:59:c1:44:97:59:9a:d1:46:f3: 2a:dd:21:c6:70:58:92:30:86:30:57:8e:5b:d8:fb: 92:73:f9:46:85:1f:91:5f:62:54:99:55:95:06:ad: fc:cf:1c:6c:4c:47:3b:76:f7:b9:5c:99:45:af:a5: 18:46:51:2f:0f:b6:f8:4d:5b:f5:2f:92:d0:70:cb: 2d:32:6f:ee:a6:f3:2a:4f:96:07:b2:6e:2b:71:fc: 6e:88:2d:94:87:51:1e:72:e3:a1:85:3b:d4:18:e1: 99:f7:a3:2f:37:64:28:83:5c:81:fa:41:45:11:a9: c0:75:5f:fc:4b:ce:d2:82:25:8d:74:a6:b6:f0:d2: 38:64:6c:05:72:aa:6d:30:d9:ee:18:e5:e0:be:4d: f6:61:9e:15:e1:cd:fc:b1:3d:02:ec:2b:67:0d:a0: b2:f4:a9:c1:89:6f:1c:5e:b9:4f:fb:3e:df:34:43: b5:c3:8a:d4:6c:26:92:df:b6:d6:42:4e:9c:64:58: 8b:d3:54:8a:b4:57:17:c0:0a:f6:dd:ec:c5:81:c2: 41:99:a3:91:04:5c:6e:c1:9a:5f:ba:73:71:12:e0: 91:7d:8f:ab:24:8d:83:ae:05:d9:ae:05:8d:e7:e2: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8E:2F:3F:E6:F6:88:34:EC:77:1A:C5:12:DA:52:8B:9D:70:D0:EC X509v3 Authority Key Identifier: keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:64:c5:51:38:9a:6d:6f:84:d6:12:6d:32:a8:2a:3b:2f:98: b4:0c:9d:92:d9:f8:7a:e8:0f:be:57:3a:21:36:8b:68:ed:cd: 21:2e:cc:1c:d8:fd:f6:b9:be:bc:62:1b:a7:a1:6b:ab:eb:01: a6:68:70:62:23:34:e3:f6:19:01:30:d2:78:61:a2:d6:eb:e7: 87:d4:65:e7:6f:43:9b:72:a7:57:42:df:0a:c3:1e:d9:32:8d: 50:e6:ea:2d:28:e3:e1:32:3d:8d:64:78:2f:4d:92:7d:d5:cf: 62:f4:7e:eb:21:89:4b:65:ec:62:ba:83:7f:01:27:9b:b2:8b: 6b:84:60:8e:1d:2e:52:aa:e5:92:8c:5c:91:0e:93:37:50:23: ce:f8:d3:c7:f5:53:82:a5:d3:2d:c9:ba:64:25:46:48:f6:e4: a4:76:c4:20:f2:b1:34:0b:56:7c:65:9c:f3:9b:b0:47:62:07: 75:b3:9f:d1:ab:fd:0c:d5:1b:2d:09:2f:c5:c7:04:27:a0:09: 9b:9a:49:e8:f9:de:60:0c:3c:43:86:01:68:02:43:da:1e:bf: 2e:38:e0:d7:3c:5a:f6:46:f9:ed:a3:38:27:3f:b8:ba:d6:e0: 6a:35:88:47:df:cc:9a:6e:5e:70:da:85:fc:5d:c0:60:06:00: 2d:19:64:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTY2MDExMC8GA1UEBRMoNENCMEI5NUI0QkRDMjMzMTRGMjgzRUY3MzlBOTZBN0M2 NThDMEE2QzAeFw0yNTA1MTEwNjE0MjNaFw0yNTA1MTgwNjE0MjNaMBgxFjAUBgNV BAMTDTY4MjA0MDQwLTNmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCunMiQcGrL0k910OmCnNsdmqwaklnBRJdZmtFG8yrdIcZwWJIwhjBXjlvY+5Jz +UaFH5FfYlSZVZUGrfzPHGxMRzt297lcmUWvpRhGUS8PtvhNW/UvktBwyy0yb+6m 8ypPlgeybitx/G6ILZSHUR5y46GFO9QY4Zn3oy83ZCiDXIH6QUURqcB1X/xLztKC JY10prbw0jhkbAVyqm0w2e4Y5eC+TfZhnhXhzfyxPQLsK2cNoLL0qcGJbxxeuU/7 Pt80Q7XDitRsJpLfttZCTpxkWIvTVIq0VxfACvbd7MWBwkGZo5EEXG7Bml+6c3ES 4JF9j6skjYOuBdmuBY3n4lufAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMI4vP+b2 iDTsdxrFEtpSi51w0OwwHwYDVR0jBBgwFoAUTLC5W0vcIzFPKD73OalqfGWMCmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjYwLzAxQzUyQTMwRDI0 MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpGUEtENzNPYWxxZkdXTUNt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExDNVcwdmNJekZQS0Q3M09hbHFmR1dNQ213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjYwLzAxQzUyQTMwRDI0MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpG UEtENzNPYWxxZkdXTUNtdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRkxVE4mm1vhNYSbTKoKjsvmLQMnZLZ+HroD75XOiE2i2jtzSEuzBzY /fa5vrxiG6eha6vrAaZocGIjNOP2GQEw0nhhotbr54fUZedvQ5typ1dC3wrDHtky jVDm6i0o4+EyPY1keC9Nkn3Vz2L0fushiUtl7GK6g38BJ5uyi2uEYI4dLlKq5ZKM XJEOkzdQI87408f1U4Kl0y3JumQlRkj25KR2xCDysTQLVnxlnPObsEdiB3Wzn9Gr /QzVGy0JL8XHBCegCZuaSej53mAMPEOGAWgCQ9oevy444Nc8WvZG+e2jOCc/uLrW 4Go1iEffzJpuXnDahfxdwGAGAC0ZZGQ= -----END CERTIFICATE-----Generated at Sun May 11 22:08:27 2025 by rpki-client