$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: +zIcftCXA8104645Doj/suuYGa3VYHvgnTSTF5CEQr8= Subject key identifier: 9C:88:4D:3D:8F:E5:1F:71:D0:04:EE:DA:59:00:B1:53:7D:0F:04:71 Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0C90 Signing time: Mon 12 May 2025 18:03:49 +0000 Manifest this update: Mon 12 May 2025 18:03:49 +0000 Manifest next update: Mon 19 May 2025 18:03:49 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: WaWa3sSDtt1B6POiMYnwLcFJZRH+0LptWwFWCW3NN5Q=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: May 12 18:03:49 2025 GMT Not After : May 19 18:03:49 2025 GMT Subject: CN=68223805-ed54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:ed:b2:98:53:4d:ab:44:78:ba:ce:6c:da: c0:60:9a:9c:34:1f:76:31:e6:24:f6:84:de:ba:90: 0a:c2:64:fa:00:96:6f:f5:29:f1:d1:80:1d:7f:ce: 13:eb:32:55:73:ee:ff:5c:7f:25:0b:04:84:3d:e5: 57:96:bc:84:5d:28:51:0e:a1:57:d6:65:8e:bf:db: 0c:57:1e:ee:07:6a:98:3c:de:8f:14:b0:08:c7:ee: 3d:43:8e:de:0d:49:df:c6:b4:72:5d:00:07:2f:9c: e0:dc:ba:22:c0:5b:1b:78:c9:03:94:6f:0e:41:e0: 5f:db:ea:ff:ed:54:d3:fd:31:2b:6c:62:4f:30:c1: 27:f9:b5:56:25:73:e7:3e:e3:40:4b:61:6f:65:50: 1a:fe:5a:5c:ed:df:6e:26:b9:a4:f9:20:16:e9:ee: 09:c3:cd:d1:22:d6:5e:4a:1c:d2:f9:8a:c0:21:a4: 48:93:22:4d:aa:95:bc:c2:82:15:ca:df:df:b4:c9: 79:29:93:15:09:df:f6:0a:7c:77:4f:b5:09:19:74: 58:2d:da:f5:ed:bb:39:22:af:a2:5f:ab:0a:2f:52: f4:3b:89:46:a5:5d:28:a3:a6:ae:f8:83:b1:f0:30: 8f:6d:0a:4f:c1:53:41:0d:c8:12:bd:2a:b0:04:03: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:4D:3D:8F:E5:1F:71:D0:04:EE:DA:59:00:B1:53:7D:0F:04:71 X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fd:3b:ac:27:c4:17:8c:21:b9:f0:7c:b4:b2:3c:44:54:f4: 88:45:dd:57:1c:4a:0a:6e:7d:96:ef:29:f3:ac:f8:a0:6a:01: 36:8a:34:24:88:84:ed:af:e1:66:ab:ae:88:bf:79:ad:83:0b: bf:3b:af:12:2c:93:da:52:b5:11:4e:fa:73:af:26:32:a2:7d: 4b:58:dc:1b:63:a3:ee:67:7d:ca:22:2d:f6:8f:1a:d2:7e:82: 75:72:3a:64:78:de:14:31:11:78:da:97:9a:08:3d:93:3f:cb: cd:ec:49:66:d3:ca:e4:ac:40:43:a2:5c:19:e7:10:d5:25:ff: cd:8c:3c:8c:10:5f:14:d3:af:5d:05:3f:ed:e0:70:ce:ff:2f: f7:3d:ba:8a:af:9e:89:d7:1d:32:89:1e:12:69:8a:7f:52:29: ba:e4:9c:33:4e:2d:9d:db:0d:b9:cb:62:61:c3:ff:a1:74:dd: cc:05:80:af:7e:53:ec:55:06:00:d0:dc:96:ad:10:34:b0:4f: d7:7a:17:32:e2:7d:62:29:c0:f4:2a:5f:13:3c:2e:7d:8e:4c: 63:f8:9d:b0:cb:a3:22:d5:0d:b9:27:ce:b7:24:36:12:57:fd: 3e:f4:96:38:27:10:b0:21:8d:4e:b8:69:1e:26:58:a0:27:5d: 4e:8d:75:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjUwNTEyMTgwMzQ5WhcNMjUwNTE5MTgwMzQ5WjAYMRYwFAYD VQQDEw02ODIyMzgwNS1lZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PHtsphTTatEeLrObNrAYJqcNB92MeYk9oTeupAKwmT6AJZv9Snx0YAdf84T 6zJVc+7/XH8lCwSEPeVXlryEXShRDqFX1mWOv9sMVx7uB2qYPN6PFLAIx+49Q47e DUnfxrRyXQAHL5zg3LoiwFsbeMkDlG8OQeBf2+r/7VTT/TErbGJPMMEn+bVWJXPn PuNAS2FvZVAa/lpc7d9uJrmk+SAW6e4Jw83RItZeShzS+YrAIaRIkyJNqpW8woIV yt/ftMl5KZMVCd/2Cnx3T7UJGXRYLdr17bs5Iq+iX6sKL1L0O4lGpV0oo6au+IOx 8DCPbQpPwVNBDcgSvSqwBANK7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyITT2P 5R9x0ATu2lkAsVN9DwRxMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS/TusJ8QXjCG58Hy0sjxEVPSIRd1XHEoKbn2W7ynzrPigagE2ijQk iITtr+Fmq66Iv3mtgwu/O68SLJPaUrURTvpzryYyon1LWNwbY6PuZ33KIi32jxrS foJ1cjpkeN4UMRF42peaCD2TP8vN7Elm08rkrEBDolwZ5xDVJf/NjDyMEF8U069d BT/t4HDO/y/3PbqKr56J1x0yiR4SaYp/Uim65JwzTi2d2w25y2Jhw/+hdN3MBYCv flPsVQYA0NyWrRA0sE/Xehcy4n1iKcD0Kl8TPC59jkxj+J2wy6Mi1Q25J863JDYS V/0+9JY4JxCwIY1OuGkeJligJ11OjXUv -----END CERTIFICATE-----Generated at Tue May 13 22:01:49 2025 by rpki-client