$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: frWEBdiRI8XMoRTyIt8761Gt422kcy1M+QYNarsqkhU= Subject key identifier: 70:1A:97:5F:D1:F0:C2:94:A3:88:3E:0A:36:2E:3E:61:2A:D9:A1:8B Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 3481 Signing time: Sat 10 May 2025 15:05:16 +0000 Manifest this update: Sat 10 May 2025 15:05:15 +0000 Manifest next update: Sat 17 May 2025 15:05:15 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: jRcBLT+D+tqTr7Tjk5u6W49hrJps/ub08dYJs+fToVw=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: May 10 15:05:15 2025 GMT Not After : May 17 15:05:15 2025 GMT Subject: CN=681f6b2c-cb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:d0:79:b5:f1:d9:df:c3:2c:35:60:79:0d: c5:71:49:c6:8a:99:d8:ee:b3:f0:83:7f:a1:92:74: 13:e1:9b:b3:ba:fb:25:04:62:20:de:65:03:29:4f: dd:f7:14:f2:eb:6f:ec:53:67:92:95:49:dd:21:7c: 37:7f:cd:4a:8e:5c:00:26:7a:9d:30:21:8a:b9:dd: 9b:fb:6c:da:45:1f:b9:90:ab:ce:56:b5:2c:4a:03: d0:4a:18:e6:9e:89:8c:19:02:e9:79:82:2c:b5:41: 7d:c5:56:51:ef:d0:fe:07:a2:dc:04:9a:74:f5:d4: 00:bb:80:7e:a8:11:15:00:e2:42:15:4f:e6:e6:af: 4c:6a:6a:65:23:10:9a:5d:f3:f6:42:b5:b9:fd:de: 7b:4c:03:93:3c:16:56:6f:ef:a2:09:b6:73:a4:bb: 4b:e0:ad:ac:d0:ba:45:d6:7d:f1:11:c6:6f:01:a8: 9b:b8:d8:76:cd:b3:89:f7:af:46:fd:52:c7:5e:32: ad:a1:4b:b4:f2:21:24:d4:eb:f8:6b:ba:c4:a6:8e: 49:af:63:86:28:af:8b:0d:64:13:8d:1e:75:0b:70: 69:3e:8e:71:da:ea:f8:88:19:e8:e6:19:b1:f7:63: 56:9c:6f:41:40:23:da:cf:de:88:9e:4d:e9:63:16: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:97:5F:D1:F0:C2:94:A3:88:3E:0A:36:2E:3E:61:2A:D9:A1:8B X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b9:2e:a9:02:2c:af:cc:de:1f:33:3a:42:43:21:d4:b1:ea: e5:36:ee:42:f1:5b:ae:af:d9:8a:b3:95:70:d0:7e:a9:40:09: e0:a7:50:2a:15:ad:fa:de:45:e5:44:b3:11:4a:47:ce:2a:72: 18:3f:8f:e2:22:6b:5d:f4:16:c5:1e:7a:73:4d:be:c5:37:d2: fb:c2:cf:75:01:f5:77:15:40:5a:13:66:f7:37:38:de:21:04: 45:2d:48:79:0f:dd:1d:cc:79:05:36:55:74:f2:69:b1:09:15: 55:b8:35:36:43:56:41:14:fa:ad:a6:8e:bc:38:e9:71:0e:37: b8:75:0b:b1:7b:37:09:22:ad:ee:49:d6:cc:59:5b:c8:b5:a0: cf:55:b9:93:99:ab:55:e4:5f:ae:b8:d6:4c:9d:62:74:96:97: 72:33:5c:8f:c9:31:e8:4a:95:26:92:cb:dc:e9:b9:a2:d5:a4: bd:66:57:49:77:2f:96:80:38:bb:d6:e9:86:20:17:93:fe:0b: 5f:c1:85:16:ed:26:49:9e:ce:46:d5:01:39:60:f8:8c:bc:1b: f7:4e:d1:24:52:73:a9:b7:99:c4:35:28:f1:d2:21:76:f2:a8: 34:73:df:35:7b:93:60:88:de:72:c1:f2:37:ef:a9:18:3e:74: 81:ee:80:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUwNTEwMTUwNTE1WhcNMjUwNTE3MTUwNTE1WjAYMRYwFAYD VQQDEw02ODFmNmIyYy1jYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDLQebXx2d/DLDVgeQ3FcUnGipnY7rPwg3+hknQT4ZuzuvslBGIg3mUDKU/d 9xTy62/sU2eSlUndIXw3f81KjlwAJnqdMCGKud2b+2zaRR+5kKvOVrUsSgPQShjm nomMGQLpeYIstUF9xVZR79D+B6LcBJp09dQAu4B+qBEVAOJCFU/m5q9MamplIxCa XfP2QrW5/d57TAOTPBZWb++iCbZzpLtL4K2s0LpF1n3xEcZvAaibuNh2zbOJ969G /VLHXjKtoUu08iEk1Ov4a7rEpo5Jr2OGKK+LDWQTjR51C3BpPo5x2ur4iBno5hmx 92NWnG9BQCPaz96Ink3pYxb+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAal1/R 8MKUo4g+CjYuPmEq2aGLMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5uS6pAiyvzN4fMzpCQyHUserlNu5C8Vuur9mKs5Vw0H6pQAngp1Aq Fa363kXlRLMRSkfOKnIYP4/iImtd9BbFHnpzTb7FN9L7ws91AfV3FUBaE2b3Nzje IQRFLUh5D90dzHkFNlV08mmxCRVVuDU2Q1ZBFPqtpo68OOlxDje4dQuxezcJIq3u SdbMWVvItaDPVbmTmatV5F+uuNZMnWJ0lpdyM1yPyTHoSpUmksvc6bmi1aS9ZldJ dy+WgDi71umGIBeT/gtfwYUW7SZJns5G1QE5YPiMvBv3TtEkUnOpt5nENSjx0iF2 8qg0c981e5NgiN5ywfI376kYPnSB7oBn -----END CERTIFICATE-----Generated at Sun May 11 22:51:15 2025 by rpki-client