$ rpki-client -vvf rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft File: TTExNNGjpXdD2_A2ocHu_FlQPbw.mft (raw, json) Hash identifier: L6/ycJSM0d8pU9OvhDAeUJ0XJU54+OXh+/AYyYN5bI0= Subject key identifier: 63:8D:9B:CF:A8:B2:8A:0F:6F:8B:CD:F4:1C:3A:65:DB:21:75:2E:8F Authority key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC Certificate issuer: /CN=A91516DE/serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft Manifest number: 10 Signing time: Tue 13 May 2025 07:18:09 +0000 Manifest this update: Tue 13 May 2025 07:18:09 +0000 Manifest next update: Tue 20 May 2025 07:18:09 +0000 Files and hashes: 1: TTExNNGjpXdD2_A2ocHu_FlQPbw.crl (hash: XZbim/qypERK9yAa09Jm87Y6v9Q6jr1u4VYmDSlP7R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Validity Not Before: May 13 07:18:09 2025 GMT Not After : May 20 07:18:09 2025 GMT Subject: CN=6822f231-4605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:b4:f4:13:3f:3d:ac:a8:1e:9d:6f:c3:de: 58:3b:2d:97:0f:b2:75:73:68:fe:e2:d4:91:76:2d: d9:b6:81:63:d2:1b:ea:54:b4:a5:b4:18:1d:22:d5: 41:3b:c7:33:21:73:46:49:af:53:c2:8b:92:c3:be: 6a:93:34:7d:b0:05:85:56:5e:cb:2d:23:ae:0a:8e: b4:99:c5:12:06:13:3b:80:31:be:02:3e:4e:d5:da: f0:3d:32:de:96:d8:92:06:a6:a6:e5:c2:40:58:3d: e9:b1:91:e2:a7:69:8d:23:36:89:11:9f:ea:e9:7a: 82:d7:17:04:5a:db:fb:91:93:bd:39:5b:4b:9e:0f: 73:a6:5c:57:cb:c2:7f:57:a9:34:af:7d:a5:a1:18: 2f:7a:9c:2c:6a:42:d1:55:a7:d5:e8:42:7e:56:c9: aa:a9:1a:1a:c6:c1:95:00:e1:f2:17:9e:42:d8:b3: 66:0d:3d:2b:26:90:f2:fa:47:f3:6e:0a:88:46:08: 57:dd:f3:79:b4:7f:02:e6:9c:43:0f:28:ec:20:e1: 2b:dc:3c:b3:6a:54:b1:fa:41:95:32:5d:cc:1e:18: 00:ce:f9:09:77:22:27:d6:a9:83:fc:5d:a1:38:31: 01:95:a5:8c:d0:90:21:5b:b7:39:47:7c:c2:39:e1: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8D:9B:CF:A8:B2:8A:0F:6F:8B:CD:F4:1C:3A:65:DB:21:75:2E:8F X509v3 Authority Key Identifier: keyid:4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7a:e7:2b:6e:f6:6a:84:77:09:c2:27:44:a1:cc:43:7e:c1: 0b:8c:d9:1e:ee:a3:f7:79:c2:56:92:9f:fc:b6:6c:bd:d2:65: a8:2e:dc:b4:72:b4:2b:fa:c5:b9:76:fb:15:68:15:ab:45:51: 13:41:f9:40:fe:63:70:90:be:4c:79:17:4a:31:a5:a9:04:ab: 5b:de:22:7d:d9:38:b1:a7:18:4d:36:5b:1f:aa:22:2f:52:3f: 2c:6d:29:2b:62:3d:3b:dc:cd:c6:c9:f5:27:df:c5:d7:59:87: 14:7c:32:1a:01:af:79:a9:8e:66:7b:56:68:60:02:19:0f:d8: de:42:18:5f:54:30:39:62:a7:65:7c:5b:d7:29:b6:58:e8:1e: 31:85:bc:cc:5d:61:ce:c0:98:5b:f3:89:b0:ee:8d:01:77:7b: 90:e0:42:33:ad:2c:1a:1b:f2:24:f4:ee:5b:2a:b5:c7:03:36: a2:a5:00:ec:22:8a:3e:d0:0a:69:87:0e:d3:46:27:d1:8a:db: 9d:af:50:a4:f2:15:02:d5:a8:89:9e:5b:c4:e5:ea:71:61:f8: 20:85:fd:54:b9:2e:b8:0d:a7:ef:d1:43:18:3b:6d:fe:28:93: 05:4c:89:1e:98:2c:fb:a7:5b:e0:15:90:96:91:ea:c3:2c:34: 4b:25:1d:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZERTExMC8GA1UEBRMoNEQzMTMxMzREMUEzQTU3NzQzREJGMDM2QTFDMUVFRkM1 OTUwM0RCQzAeFw0yNTA1MTMwNzE4MDlaFw0yNTA1MjAwNzE4MDlaMBgxFjAUBgNV BAMTDTY4MjJmMjMxLTQ2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDje7T0Ez89rKgenW/D3lg7LZcPsnVzaP7i1JF2Ldm2gWPSG+pUtKW0GB0i1UE7 xzMhc0ZJr1PCi5LDvmqTNH2wBYVWXsstI64KjrSZxRIGEzuAMb4CPk7V2vA9Mt6W 2JIGpqblwkBYPemxkeKnaY0jNokRn+rpeoLXFwRa2/uRk705W0ueD3OmXFfLwn9X qTSvfaWhGC96nCxqQtFVp9XoQn5WyaqpGhrGwZUA4fIXnkLYs2YNPSsmkPL6R/Nu CohGCFfd83m0fwLmnEMPKOwg4SvcPLNqVLH6QZUyXcweGADO+Ql3IifWqYP8XaE4 MQGVpYzQkCFbtzlHfMI54U5/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY42bz6iy ig9vi830HDpl2yF1Lo8wHwYDVR0jBBgwFoAUTTExNNGjpXdD2/A2ocHu/FlQPbww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkRFLzM3OURCMDcwMUE4 QTExRjBBRjBGMzM3Q0M0RjlBRTAyL1RURXhOTkdqcFhkRDJfQTJvY0h1X0ZsUVBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFRFeE5OR2pwWGREMl9BMm9jSHVfRmxRUGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkRFLzM3OURCMDcwMUE4QTExRjBBRjBGMzM3Q0M0RjlBRTAyL1RURXhOTkdqcFhk RDJfQTJvY0h1X0ZsUVBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABR65ytu9mqEdwnCJ0ShzEN+wQuM2R7uo/d5wlaSn/y2bL3SZagu3LRy tCv6xbl2+xVoFatFURNB+UD+Y3CQvkx5F0oxpakEq1veIn3ZOLGnGE02Wx+qIi9S PyxtKStiPTvczcbJ9SffxddZhxR8MhoBr3mpjmZ7VmhgAhkP2N5CGF9UMDlip2V8 W9cptljoHjGFvMxdYc7AmFvzibDujQF3e5DgQjOtLBob8iT07lsqtccDNqKlAOwi ij7QCmmHDtNGJ9GK252vUKTyFQLVqImeW8Tl6nFh+CCF/VS5LrgNp+/RQxg7bf4o kwVMiR6YLPunW+AVkJaR6sMsNEslHWM= -----END CERTIFICATE-----Generated at Wed May 14 01:36:44 2025 by rpki-client