$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft File: TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json) Hash identifier: TMwCEwv12TPhh6NEUW73remVrH8p6a5EFLFLzZ4fwEo= Subject key identifier: 77:61:82:6F:58:FD:1E:49:C1:E7:4E:3A:0D:5A:AB:69:4B:15:D6:8E Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3 Certificate issuer: /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft Manifest number: 04EA Signing time: Sun 11 May 2025 00:36:14 +0000 Manifest this update: Sun 11 May 2025 00:36:13 +0000 Manifest next update: Sun 18 May 2025 00:36:13 +0000 Files and hashes: 1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: XT8IBF2TBOkIISXEh5d7B/zm5her2fS8E7lyUZPHgkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3 Validity Not Before: May 11 00:36:13 2025 GMT Not After : May 18 00:36:13 2025 GMT Subject: CN=681ff0fe-b3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:e0:45:65:81:1c:0f:3a:a8:f7:d1:95:7e: 26:ea:1c:d9:b7:96:88:92:5c:e9:b9:97:05:0b:83: 4c:3f:22:ca:72:ac:52:e4:eb:c1:51:db:3f:8a:72: fe:eb:13:36:85:0e:3d:f3:b3:82:0e:72:99:ac:7b: 3e:3d:f4:2c:7f:f8:55:6f:7d:cb:d8:0f:62:d0:e4: 17:42:c6:37:5f:5b:a6:86:8d:e5:d6:7c:f7:1a:e3: 12:bd:47:c2:82:db:24:00:29:f7:af:3b:2a:0b:98: ec:f7:f5:b1:39:66:6c:fe:f1:15:5e:28:c8:43:e1: 1a:71:7a:22:f6:ed:b0:b0:d5:96:0c:82:fd:0d:a4: be:16:1e:68:be:b7:36:09:dc:45:56:82:e7:04:73: a2:c2:5b:08:14:e6:e2:83:45:52:34:12:e1:fc:8a: 94:a8:18:4e:07:74:42:63:e7:7b:d0:6e:64:1a:05: b5:b4:ac:04:e3:a4:ce:c3:d5:b9:29:ec:90:1f:5c: c3:af:0c:fb:65:6e:0e:d5:47:81:e6:5e:0c:e4:90: c3:2e:a5:f4:ce:7f:f9:e8:13:b7:6e:4b:b0:f9:15: 01:d6:8c:18:08:ea:47:fc:9c:d6:d8:a9:47:09:ea: 1c:88:2e:1e:98:40:c1:a3:e9:59:4c:e8:9c:51:5f: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:61:82:6F:58:FD:1E:49:C1:E7:4E:3A:0D:5A:AB:69:4B:15:D6:8E X509v3 Authority Key Identifier: keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:4e:24:b1:67:ce:b2:28:d3:65:8d:a2:ac:73:d4:54:2d:85: 44:58:7c:50:c2:0f:1d:ed:9f:84:77:ee:e1:9f:45:bc:d9:76: 3d:98:8a:f9:4b:0e:19:30:f8:d9:21:2f:3f:b5:b4:b1:6c:46: 3b:30:8d:bc:c5:44:a6:8c:49:ef:5e:b5:ff:dc:7b:ef:8f:3c: 30:75:22:7a:e3:5a:5b:8f:dd:35:09:21:09:32:92:92:8e:04: 6b:20:9a:a9:8f:7c:89:cf:43:ac:32:9c:c9:5e:6a:7d:11:3a: 7c:48:80:05:cb:ea:25:58:f5:52:e7:6f:f4:30:3a:91:21:cd: 9c:96:d6:62:f8:12:e1:2d:49:2c:de:44:41:dd:6b:f5:68:c5: 3f:97:af:85:1a:07:af:5d:13:ea:84:61:69:73:1c:e6:77:c8: 53:db:aa:b4:84:d4:4e:c8:a9:64:8f:97:f7:8d:19:be:1b:06: 01:64:94:ad:9f:00:f8:fb:ca:5d:05:55:3b:b4:91:bb:50:67: 7a:7a:04:57:51:a8:44:d8:ec:52:d8:4c:1f:ae:3f:fa:ef:55: 80:cb:e9:ea:d5:f4:85:b2:2e:24:10:96:f1:2c:17:11:bf:8b: a4:32:46:4b:1e:a3:c6:76:91:5f:c8:55:c3:e6:05:b5:45:35: 0f:c7:ca:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDREMzlERTNFNTA2MDY4QzM4MzZBMDA1NDgxNTU0MTNF NjgyNTk1QjMwHhcNMjUwNTExMDAzNjEzWhcNMjUwNTE4MDAzNjEzWjAYMRYwFAYD VQQDEw02ODFmZjBmZS1iM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOPgRWWBHA86qPfRlX4m6hzZt5aIklzpuZcFC4NMPyLKcqxS5OvBUds/inL+ 6xM2hQ4987OCDnKZrHs+PfQsf/hVb33L2A9i0OQXQsY3X1umho3l1nz3GuMSvUfC gtskACn3rzsqC5js9/WxOWZs/vEVXijIQ+EacXoi9u2wsNWWDIL9DaS+Fh5ovrc2 CdxFVoLnBHOiwlsIFObig0VSNBLh/IqUqBhOB3RCY+d70G5kGgW1tKwE46TOw9W5 KeyQH1zDrwz7ZW4O1UeB5l4M5JDDLqX0zn/56BO3bkuw+RUB1owYCOpH/JzW2KlH CeociC4emEDBo+lZTOicUV8awwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdhgm9Y /R5JwedOOg1aq2lLFdaOMB8GA1UdIwQYMBaAFE053j5QYGjDg2oAVIFVQT5oJZWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FNT0RhZ0JVZ1ZWQlBtZ2xs Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RUbmVQbEJnYU1PRGFnQlVnVlZCUG1nbGxiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FN T0RhZ0JVZ1ZWQlBtZ2xsYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDTiSxZ86yKNNljaKsc9RULYVEWHxQwg8d7Z+Ed+7hn0W82XY9mIr5 Sw4ZMPjZIS8/tbSxbEY7MI28xUSmjEnvXrX/3HvvjzwwdSJ641pbj901CSEJMpKS jgRrIJqpj3yJz0OsMpzJXmp9ETp8SIAFy+olWPVS52/0MDqRIc2cltZi+BLhLUks 3kRB3Wv1aMU/l6+FGgevXRPqhGFpcxzmd8hT26q0hNROyKlkj5f3jRm+GwYBZJSt nwD4+8pdBVU7tJG7UGd6egRXUahE2OxS2Ewfrj/671WAy+nq1fSFsi4kEJbxLBcR v4ukMkZLHqPGdpFfyFXD5gW1RTUPx8oc -----END CERTIFICATE-----Generated at Sun May 11 22:29:25 2025 by rpki-client