$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: +SGwYKVGGK17Ptv96+tucswLGtju0VO2yJWappRWYXg= Subject key identifier: CB:B6:F6:4F:30:ED:71:9C:A7:5C:20:71:1C:02:1E:36:8C:A9:CF:82 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34BB Signing time: Thu 08 May 2025 14:17:35 +0000 Manifest this update: Thu 08 May 2025 14:17:34 +0000 Manifest next update: Thu 15 May 2025 14:17:34 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: kaxgrt5uPaArXz0jEg2o7Yh/Lb33PUBk0eRAaO+36BY=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: May 8 14:17:34 2025 GMT Not After : May 15 14:17:34 2025 GMT Subject: CN=681cbcff-c9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:72:ca:e5:70:76:ff:12:f8:bb:77:14:44: 1e:a6:59:33:cc:32:f0:7c:ae:46:49:51:b7:80:10: c6:d8:75:d8:86:a1:fc:80:2b:25:38:35:a1:87:ed: 14:fa:48:b7:59:bf:86:26:97:32:ec:7a:da:e7:a6: 1c:fc:f1:45:85:d4:76:4d:3f:00:b7:35:c7:db:a4: 44:c3:f0:d9:1e:13:bf:80:bb:ed:86:f7:b3:e2:54: 0e:f5:31:cb:db:0f:68:58:ed:a0:d5:8e:60:8b:bb: 23:3a:2b:11:2a:ab:98:8f:79:0f:63:f1:fe:76:46: 66:4c:6e:c8:fb:26:9b:77:bd:b7:66:c9:42:37:bb: 22:39:a8:e7:5c:83:33:16:3f:a1:fd:66:82:10:10: af:82:22:dc:28:d2:03:ac:64:6a:8d:a7:cc:b2:06: fc:f4:56:3f:f3:1f:55:2c:a3:52:9b:e1:9e:c3:2a: 7d:92:ea:b1:3b:6b:f5:18:4c:39:a8:6d:c2:f4:99: b4:e0:e7:b2:68:32:cb:bf:e1:e8:52:70:eb:07:dc: 65:88:69:e9:85:06:1f:15:7d:c7:45:21:4c:63:43: 32:c3:62:ed:15:ed:6c:ea:97:5c:99:9a:91:6f:f8: ec:f4:04:0a:49:c7:c9:72:0f:7c:23:94:f4:aa:a5: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B6:F6:4F:30:ED:71:9C:A7:5C:20:71:1C:02:1E:36:8C:A9:CF:82 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:3a:00:5b:c8:42:a8:7f:55:b3:2f:c0:45:d5:fc:65:02: eb:c7:62:4c:8a:5c:eb:15:f7:55:e7:c8:8a:ca:bd:a5:b5:40: ab:f8:80:4b:09:1e:e4:ff:53:fa:a4:9e:5d:d1:b1:c9:26:ff: 64:e0:d6:3a:f5:4f:71:d5:55:70:27:b1:9a:6e:5f:d5:5f:fa: f9:3e:66:36:f7:2f:7f:0b:61:5a:3b:c9:ac:77:86:b7:02:ef: 30:5b:fc:ca:7e:85:09:b5:32:06:99:23:49:d7:12:2b:c9:f7: c5:b6:c7:a3:5a:65:56:53:b1:4a:5b:5f:ba:6b:6b:c4:29:33: 98:76:90:8d:ed:5e:7d:dd:f3:11:f7:07:ad:c4:c9:96:29:12: e4:7c:bf:96:20:b1:8e:b5:bb:0d:51:50:6a:b6:d7:cf:10:4e: 31:3a:aa:54:c0:13:80:e9:6c:46:17:c8:d4:54:75:c8:8f:b1: c6:92:7a:d8:4c:ed:80:07:3b:79:19:25:33:10:2b:8b:ce:84: 8d:aa:d4:40:a7:c3:4b:62:b5:b0:85:de:07:4c:22:9c:64:b9: 0d:10:74:3f:d2:48:b2:17:e7:c7:d5:88:58:34:83:0b:c2:96: 89:ae:a2:8a:a1:a3:8b:14:85:43:0c:a0:24:4d:fa:a0:10:fa: 14:68:c7:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwNTA4MTQxNzM0WhcNMjUwNTE1MTQxNzM0WjAYMRYwFAYD VQQDEw02ODFjYmNmZi1jOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKdyyuVwdv8S+Lt3FEQeplkzzDLwfK5GSVG3gBDG2HXYhqH8gCslODWhh+0U +ki3Wb+GJpcy7Hra56Yc/PFFhdR2TT8AtzXH26REw/DZHhO/gLvthvez4lQO9THL 2w9oWO2g1Y5gi7sjOisRKquYj3kPY/H+dkZmTG7I+yabd723ZslCN7siOajnXIMz Fj+h/WaCEBCvgiLcKNIDrGRqjafMsgb89FY/8x9VLKNSm+Gewyp9kuqxO2v1GEw5 qG3C9Jm04OeyaDLLv+HoUnDrB9xliGnphQYfFX3HRSFMY0Myw2LtFe1s6pdcmZqR b/js9AQKScfJcg98I5T0qqU1CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMu29k8w 7XGcp1wgcRwCHjaMqc+CMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXejoAW8hCqH9Vsy/ARdX8ZQLrx2JMilzrFfdV58iKyr2ltUCr+IBL CR7k/1P6pJ5d0bHJJv9k4NY69U9x1VVwJ7Gabl/VX/r5PmY29y9/C2FaO8msd4a3 Au8wW/zKfoUJtTIGmSNJ1xIryffFtsejWmVWU7FKW1+6a2vEKTOYdpCN7V593fMR 9wetxMmWKRLkfL+WILGOtbsNUVBqttfPEE4xOqpUwBOA6WxGF8jUVHXIj7HGknrY TO2ABzt5GSUzECuLzoSNqtRAp8NLYrWwhd4HTCKcZLkNEHQ/0kiyF+fH1YhYNIML wpaJrqKKoaOLFIVDDKAkTfqgEPoUaMcR -----END CERTIFICATE-----Generated at Sat May 10 01:38:34 2025 by rpki-client