$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: d+EqjcY2gVQBZ2GbJk0qJUiFdItPvzXEoMKG5hiqerU= Subject key identifier: C9:17:84:5A:DC:E6:58:6E:E1:39:FB:E0:DE:9E:76:77:5E:F5:2E:C7 Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 023E Signing time: Tue 13 May 2025 01:40:47 +0000 Manifest this update: Tue 13 May 2025 01:40:46 +0000 Manifest next update: Tue 20 May 2025 01:40:46 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: NFQu2u1mYyOgwKoWdL4j9IMgwr+g3IheYlF19Iza6J0=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: May 13 01:40:46 2025 GMT Not After : May 20 01:40:46 2025 GMT Subject: CN=6822a31e-c082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:bf:1a:b9:54:6d:04:2d:8f:fa:1b:4f:89: a5:5c:e7:bd:6a:4b:c7:70:e2:a3:7a:b2:42:0e:4d: ae:30:21:f1:bc:0f:80:68:e0:bb:39:c1:bc:12:fc: e3:b0:68:e7:e3:aa:bf:f1:9d:6c:89:16:14:4d:35: e5:fa:6e:c3:07:f7:07:80:f4:3b:3a:32:53:7d:ba: 3f:bd:6d:d2:df:22:d6:2d:15:56:f2:3d:b2:24:0e: 45:0c:95:bd:87:20:cd:c4:60:30:1c:7d:56:8c:77: 66:81:5b:ab:1b:ac:0b:63:fc:1c:b6:e3:95:24:b7: 36:0e:10:ce:7b:80:20:e7:b3:c1:ff:d7:94:63:6a: 67:0a:44:a9:ee:a1:61:97:be:50:f8:62:97:9a:46: 1a:2f:fc:1f:46:3d:8c:5b:7f:ff:44:4f:90:cd:96: dd:84:26:6c:ac:08:c6:f5:d7:2a:6b:73:54:9a:85: 91:c1:e2:06:2c:5d:33:2c:b5:ba:88:db:76:fd:f9: 61:ee:0c:6b:b8:c7:ce:28:71:56:0d:4c:78:7b:b0: 33:a3:f9:90:1d:ad:11:80:8c:f9:9e:12:33:1d:31: 7a:fb:99:44:2f:17:3c:14:d6:2f:7c:1b:b1:61:da: 33:12:2c:07:58:aa:ea:25:df:cd:2e:c8:c5:4a:03: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:17:84:5A:DC:E6:58:6E:E1:39:FB:E0:DE:9E:76:77:5E:F5:2E:C7 X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:44:61:37:34:3a:0a:78:6b:8f:bf:87:0a:94:eb:28:60:82: b9:4d:5a:35:ae:0a:ef:61:4a:d9:a4:00:26:3f:bf:85:9d:ba: 4e:d3:53:c7:c3:65:c3:80:b6:e1:a7:e8:e0:1f:8f:f2:61:9d: 1d:9e:dc:2f:5f:6c:28:4d:6c:b4:bc:b6:1e:15:c8:c8:f1:72: 0b:4e:2b:9a:07:ab:63:8a:11:de:66:2a:97:52:99:b3:0a:2e: 55:f0:b5:3b:7f:23:51:f2:20:e1:07:e0:00:f7:6c:d6:fb:c8: 42:94:67:78:d6:9e:49:31:be:81:6a:ae:3e:f5:b2:f7:9e:4e: 93:49:5c:dd:c4:40:58:53:c3:8c:38:b0:08:84:66:8c:78:c8: e3:3f:76:71:8a:44:f0:4b:c1:91:93:ce:df:2e:f6:8a:ad:13: c5:fa:31:30:a4:92:cd:ce:d4:ed:f8:63:7d:75:90:bf:44:f1: 54:d6:0b:fc:2b:84:21:a7:86:f6:64:1a:da:52:83:58:90:a5: 06:00:b2:b0:88:89:03:29:5c:5a:ac:43:64:12:a5:1a:6f:20: 4f:a1:66:09:60:c6:04:5f:90:01:5b:6a:14:74:e3:8a:a6:64: b2:ab:29:4f:b5:1e:88:5e:2d:db:27:10:52:31:95:e6:35:e4: 54:d0:0d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUwNTEzMDE0MDQ2WhcNMjUwNTIwMDE0MDQ2WjAYMRYwFAYD VQQDEw02ODIyYTMxZS1jMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWq/GrlUbQQtj/obT4mlXOe9akvHcOKjerJCDk2uMCHxvA+AaOC7OcG8Evzj sGjn46q/8Z1siRYUTTXl+m7DB/cHgPQ7OjJTfbo/vW3S3yLWLRVW8j2yJA5FDJW9 hyDNxGAwHH1WjHdmgVurG6wLY/wctuOVJLc2DhDOe4Ag57PB/9eUY2pnCkSp7qFh l75Q+GKXmkYaL/wfRj2MW3//RE+QzZbdhCZsrAjG9dcqa3NUmoWRweIGLF0zLLW6 iNt2/flh7gxruMfOKHFWDUx4e7Azo/mQHa0RgIz5nhIzHTF6+5lELxc8FNYvfBux YdozEiwHWKrqJd/NLsjFSgMuYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkXhFrc 5lhu4Tn74N6ednde9S7HMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDURGE3NDoKeGuPv4cKlOsoYIK5TVo1rgrvYUrZpAAmP7+FnbpO01PH w2XDgLbhp+jgH4/yYZ0dntwvX2woTWy0vLYeFcjI8XILTiuaB6tjihHeZiqXUpmz Ci5V8LU7fyNR8iDhB+AA92zW+8hClGd41p5JMb6Baq4+9bL3nk6TSVzdxEBYU8OM OLAIhGaMeMjjP3ZxikTwS8GRk87fLvaKrRPF+jEwpJLNztTt+GN9dZC/RPFU1gv8 K4Qhp4b2ZBraUoNYkKUGALKwiIkDKVxarENkEqUabyBPoWYJYMYEX5ABW2oUdOOK pmSyqylPtR6IXi3bJxBSMZXmNeRU0A12 -----END CERTIFICATE-----Generated at Wed May 14 22:55:06 2025 by rpki-client