$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft File: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json) Hash identifier: 5QOYqVJevSyMQAT3zFPzbC98ACHSiBJHkwB5GNYPjCw= Subject key identifier: 36:5A:B5:3D:09:A1:6A:8F:01:32:6D:78:1F:3F:99:23:3D:51:FA:08 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft Manifest number: 109A Signing time: Fri 16 May 2025 17:33:36 +0000 Manifest this update: Fri 16 May 2025 17:33:35 +0000 Manifest next update: Fri 23 May 2025 17:33:35 +0000 Files and hashes: 1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: S+peWcztIP5v7oHijJ+DU/roEUO44Zq1BhZc9p0vozQ=) 2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: May 16 17:33:35 2025 GMT Not After : May 23 17:33:35 2025 GMT Subject: CN=682776ef-6952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:f2:b5:c0:3f:52:b7:1d:0b:af:6e:c5:e2: c4:a5:c6:e1:74:58:d1:29:af:a8:00:40:bc:79:65: 69:9f:17:3d:90:ab:02:36:66:6e:22:e7:82:c9:c9: 54:d1:22:fb:52:da:9e:7b:44:49:a6:8a:27:84:9b: fa:49:3a:2c:ac:91:a3:f5:70:3e:a9:0a:00:cc:0d: d7:16:9e:d4:61:ed:20:a7:99:7f:6b:16:8c:c6:a8: f5:da:f8:48:c1:47:0b:41:05:c7:5f:e0:e4:72:4f: 66:6d:ec:12:59:9a:93:0f:ad:bb:1b:7e:d3:e1:be: 35:94:db:b5:fe:10:91:80:4c:00:03:bd:87:d2:4e: 07:50:10:05:b9:2b:f6:46:a5:2e:19:96:e5:0f:4b: 2c:ce:c4:44:56:62:4c:b6:a7:86:30:cc:da:96:f5: 59:41:d4:4b:ea:79:4f:0b:27:c3:28:5e:c6:23:cd: e2:2c:dc:71:a9:b8:40:73:43:8b:93:5d:09:e5:cd: 69:4e:de:d6:44:45:d9:1f:a5:4e:04:5b:96:e6:97: 6e:ad:10:2a:ad:11:56:96:c1:92:e4:1b:50:82:ee: 1b:37:2f:15:0a:f1:7b:bd:c8:ca:46:d7:f5:80:ed: 29:29:37:63:90:f3:4d:72:58:a3:f1:8e:3e:ca:d4: 50:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5A:B5:3D:09:A1:6A:8F:01:32:6D:78:1F:3F:99:23:3D:51:FA:08 X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:31:bb:80:ee:5e:2e:27:bf:b9:d8:6b:44:fa:5f:f3:c7:bc: 28:e1:77:13:77:29:de:3f:77:22:dd:87:d4:72:64:88:94:c7: 80:22:4f:9c:da:4c:18:ba:27:19:91:78:47:c9:a2:0b:ca:43: 81:15:43:f6:2a:b9:11:b4:5d:d1:4d:f5:4d:8b:95:63:12:21: 75:ce:4b:19:89:4c:66:e9:03:88:4b:d0:ba:cc:d1:65:25:ce: 83:56:c5:39:3e:e8:4b:82:9c:9c:74:cc:fa:33:87:4c:71:15: 37:e7:5d:96:91:93:b2:9c:3d:1c:2a:33:0e:3d:64:39:94:84: 8f:68:54:38:81:2a:c8:37:6c:69:76:5b:fc:b6:eb:4d:13:1c: fa:0e:31:e4:0e:4b:b6:01:a6:dc:cb:a4:f4:e2:f1:e9:b1:50: 5e:79:96:45:c3:5b:75:91:85:c6:a8:e9:77:23:4b:dd:23:78: 84:72:63:40:c5:25:03:5a:08:d3:dc:6e:ea:cc:17:0e:7b:b3: 64:c8:1b:c3:53:ee:67:d1:52:d9:9b:2c:6e:f9:3b:ae:b9:00: a4:59:3d:53:28:e9:3d:41:37:76:6d:b2:42:b0:d4:dc:15:2b: f8:ba:66:c9:0b:fd:da:24:4d:4d:f0:a0:06:9c:81:02:f8:14: 3e:35:2c:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjUwNTE2MTczMzM1WhcNMjUwNTIzMTczMzM1WjAYMRYwFAYD VQQDEw02ODI3NzZlZi02OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CDytcA/UrcdC69uxeLEpcbhdFjRKa+oAEC8eWVpnxc9kKsCNmZuIueCyclU 0SL7Utqee0RJpoonhJv6STosrJGj9XA+qQoAzA3XFp7UYe0gp5l/axaMxqj12vhI wUcLQQXHX+Dkck9mbewSWZqTD627G37T4b41lNu1/hCRgEwAA72H0k4HUBAFuSv2 RqUuGZblD0sszsREVmJMtqeGMMzalvVZQdRL6nlPCyfDKF7GI83iLNxxqbhAc0OL k10J5c1pTt7WREXZH6VOBFuW5pdurRAqrRFWlsGS5BtQgu4bNy8VCvF7vcjKRtf1 gO0pKTdjkPNNclij8Y4+ytRQdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZatT0J oWqPATJteB8/mSM9UfoIMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMMbuA7l4uJ7+52GtE+l/zx7wo4XcTdyneP3ci3YfUcmSIlMeAIk+c 2kwYuicZkXhHyaILykOBFUP2KrkRtF3RTfVNi5VjEiF1zksZiUxm6QOIS9C6zNFl Jc6DVsU5PuhLgpycdMz6M4dMcRU3512WkZOynD0cKjMOPWQ5lISPaFQ4gSrIN2xp dlv8tutNExz6DjHkDku2Aabcy6T04vHpsVBeeZZFw1t1kYXGqOl3I0vdI3iEcmNA xSUDWgjT3G7qzBcOe7NkyBvDU+5n0VLZmyxu+TuuuQCkWT1TKOk9QTd2bbJCsNTc FSv4umbJC/3aJE1N8KAGnIEC+BQ+NSzn -----END CERTIFICATE-----Generated at Fri May 16 21:51:58 2025 by rpki-client