$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json) Hash identifier: uDLnCRPJ54UdRH0meqyrgcL4jsJUjJKofBiWqNrIkpQ= Subject key identifier: AF:76:EC:00:97:54:9C:43:09:0F:15:32:FB:B0:9E:57:A4:89:6A:B6 Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft Manifest number: 017E Signing time: Thu 03 Jul 2025 03:46:36 +0000 Manifest this update: Thu 03 Jul 2025 03:46:35 +0000 Manifest next update: Thu 10 Jul 2025 03:46:35 +0000 Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: 1kqtP5jurAebHIAq2bxxDL0CUlae04Wi5crdRT39goc=) 2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: mX0oS42d4Afnuz1c6BL0lN1MWESAc87z/AqUedcAt4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Validity Not Before: Jul 3 03:46:35 2025 GMT Not After : Jul 10 03:46:35 2025 GMT Subject: CN=6865fd1c-491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:ab:ef:e2:41:f6:2c:56:68:5c:3c:d1:5d: 47:ab:5c:16:5f:bc:44:af:6e:9d:30:50:cc:e7:86: f4:a9:2b:16:ee:5a:ba:81:be:16:a5:e1:80:d9:59: 3f:74:cd:5f:17:21:9e:6a:5a:b9:a3:e6:8e:15:c7: 3d:ec:fa:33:db:12:bb:03:aa:f9:b6:d6:2a:1d:9a: 9a:d6:ce:c8:1f:b2:8e:f3:a1:8a:1f:6d:b0:bb:43: 3e:fa:21:00:b4:c5:5d:55:12:a7:9f:09:8c:c9:12: 6a:a7:58:a6:75:34:62:ef:18:ee:3e:62:39:6a:f5: fa:6e:6e:12:e8:08:a7:03:0c:92:4c:93:0c:7a:0a: 7a:25:c6:54:43:f4:5f:d1:71:ce:7d:04:0c:6f:72: 7e:fd:14:fd:dc:00:b7:10:31:84:43:bb:dc:26:c9: a2:25:f0:c0:64:4d:69:8b:b6:54:bc:56:3c:e0:66: a0:c0:0a:8d:a7:cd:54:61:1f:47:e0:6a:fc:d5:6f: 9e:5f:c2:9f:29:c7:7e:90:64:9a:c0:97:31:17:f1: 2f:ed:18:e0:db:96:ea:b3:38:6c:0e:40:7b:3d:0a: 1d:9d:23:e9:0e:72:81:eb:7e:ee:7c:ad:23:4a:13: 9f:c1:04:6a:b4:5f:35:69:dd:7d:d6:ca:0a:b2:fc: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:76:EC:00:97:54:9C:43:09:0F:15:32:FB:B0:9E:57:A4:89:6A:B6 X509v3 Authority Key Identifier: keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0d:b7:d5:0c:2a:53:0b:0c:f3:2e:8d:f0:d0:8b:90:be:f1: 2a:df:86:10:2a:05:e2:d9:ba:bd:20:95:ef:73:74:59:de:38: b4:de:b7:6c:44:d2:d9:42:54:c0:a0:fa:5a:fe:88:c8:39:46: e7:81:cb:4e:1b:9e:0b:5c:57:4d:b0:b4:37:dc:b5:6e:e0:17: b9:72:a3:26:88:32:b0:64:aa:58:b9:83:27:b6:ba:98:90:59: dc:9e:40:3e:89:79:60:20:84:86:0b:b5:db:51:38:0a:d4:fe: bb:ab:be:0f:55:cc:1d:19:fe:fb:96:8c:c7:d3:5c:22:37:94: ec:09:62:8a:6b:71:37:ca:6a:74:7a:ed:8a:22:a9:93:07:57: f1:d1:5c:f6:65:07:22:a1:76:71:9c:8c:82:bb:15:40:00:86: 9a:51:0c:57:99:2a:ff:a2:9d:21:07:f7:5f:71:c2:e2:b9:13: 53:2b:ab:3b:67:7e:43:86:54:96:0c:f4:c3:78:f5:f0:8d:e7: 23:0c:22:b8:d7:dd:5b:aa:7a:cd:dc:43:9a:fa:0f:7b:15:8b: ea:6b:64:90:d6:96:2e:25:5f:0e:a2:54:0e:bf:68:7b:bb:03: 49:15:e7:45:ed:cf:d4:d7:22:db:5e:0b:a7:88:c6:ec:ae:6c: 24:2f:c1:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNzExMTAvBgNVBAUTKDRDRUVFRTZEMzY2M0MxM0ZEODJFOTMxREFDNjlGMTcw NDZGQzk5QjMwHhcNMjUwNzAzMDM0NjM1WhcNMjUwNzEwMDM0NjM1WjAYMRYwFAYD VQQDEw02ODY1ZmQxYy00OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB2r7+JB9ixWaFw80V1Hq1wWX7xEr26dMFDM54b0qSsW7lq6gb4WpeGA2Vk/ dM1fFyGealq5o+aOFcc97Poz2xK7A6r5ttYqHZqa1s7IH7KO86GKH22wu0M++iEA tMVdVRKnnwmMyRJqp1imdTRi7xjuPmI5avX6bm4S6AinAwySTJMMegp6JcZUQ/Rf 0XHOfQQMb3J+/RT93AC3EDGEQ7vcJsmiJfDAZE1pi7ZUvFY84GagwAqNp81UYR9H 4Gr81W+eX8KfKcd+kGSawJcxF/Ev7Rjg25bqszhsDkB7PQodnSPpDnKB637ufK0j ShOfwQRqtF81ad191soKsvxgjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK927ACX VJxDCQ8VMvuwnlekiWq2MB8GA1UdIwQYMBaAFEzu7m02Y8E/2C6THaxp8XBG/Jmz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI3MS8yODE0RjBERTEx QjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandUX1lMcE1kckdueGNFYjht Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RPN3ViVFpqd1RfWUxwTWRyR254Y0ViOG1iTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI3MS8yODE0RjBERTExQjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandU X1lMcE1kckdueGNFYjhtYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALDbfVDCpTCwzzLo3w0IuQvvEq34YQKgXi2bq9IJXvc3RZ3ji03rds RNLZQlTAoPpa/ojIOUbngctOG54LXFdNsLQ33LVu4Be5cqMmiDKwZKpYuYMntrqY kFncnkA+iXlgIISGC7XbUTgK1P67q74PVcwdGf77lozH01wiN5TsCWKKa3E3ymp0 eu2KIqmTB1fx0Vz2ZQcioXZxnIyCuxVAAIaaUQxXmSr/op0hB/dfccLiuRNTK6s7 Z35DhlSWDPTDePXwjecjDCK4191bqnrN3EOa+g97FYvqa2SQ1pYuJV8OolQOv2h7 uwNJFedF7c/U1yLbXguniMbsrmwkL8Fd -----END CERTIFICATE-----Generated at Thu Jul 3 14:15:00 2025 by rpki-client