$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: XKwDljxKZN5V7D3pF5e/SF5kV6vWqPmnGqRJ/ZPl+n0= Subject key identifier: 31:48:CF:25:5B:F3:9E:37:AD:74:0E:71:ED:48:9B:76:94:F8:17:64 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 0695 Signing time: Fri 16 May 2025 22:29:31 +0000 Manifest this update: Fri 16 May 2025 22:29:31 +0000 Manifest next update: Fri 23 May 2025 22:29:31 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: +L8oxMoEZJd2NPuBOYuGmisD/+c1kTNwuGObBpeLQds=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: May 16 22:29:31 2025 GMT Not After : May 23 22:29:31 2025 GMT Subject: CN=6827bc4b-970b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2d:c1:23:1a:db:a3:45:da:80:80:80:71:f6: f9:a1:c1:86:78:bd:32:7f:a0:e3:0f:82:2d:2a:53: d8:dc:7e:3a:bd:03:c1:4d:1c:ae:08:f1:ae:34:62: c1:41:51:ec:ee:2b:03:8a:c7:ac:0c:de:99:98:03: f1:a6:34:04:dd:75:30:d1:da:20:2f:52:8b:b2:fd: 55:73:12:cf:54:25:ad:8a:b9:fd:43:e0:d5:e5:d7: 0f:1c:d7:11:a8:22:25:3b:03:d6:6d:7d:27:96:7d: fd:9d:7a:e8:b8:39:a3:c4:42:f6:5d:1e:42:ad:6f: e9:bc:b4:90:e6:ac:41:70:e9:ac:6d:db:f7:e4:e0: 5b:9a:97:b1:0d:74:25:7f:8a:3a:e4:6a:f0:34:b2: 63:b9:ed:f4:be:21:0b:71:a3:0a:aa:fa:49:bc:46: 28:7d:f1:65:ff:3e:3a:c7:9c:ca:09:ba:c4:1a:c6: 29:78:17:e9:79:3d:b6:1e:76:e2:0b:40:1b:61:82: 37:92:a8:e2:3c:b9:03:c9:c3:62:c9:ea:4f:b3:f2: ae:dd:60:c4:51:47:60:de:5f:27:ed:7b:01:d5:22: ad:6b:0c:2e:da:ac:55:77:7d:46:d5:c8:46:4e:31: a7:26:69:b7:fd:cd:13:0f:eb:93:d2:fc:5e:65:92: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:CF:25:5B:F3:9E:37:AD:74:0E:71:ED:48:9B:76:94:F8:17:64 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:e8:bb:ab:e9:44:31:79:a7:11:05:45:ed:73:f8:ff:1b: c3:fd:e1:60:e0:41:a5:3d:68:43:b2:03:3c:f6:61:00:d7:06: 68:26:80:c8:bf:c7:c7:7e:f3:ac:98:5b:7c:4e:7c:1d:13:4a: ba:96:a3:81:ab:b8:88:4b:85:83:e0:15:5b:06:54:7b:d9:77: 15:93:d7:ad:18:47:b9:2a:fe:39:72:fa:4c:b4:8b:8a:bd:69: 15:c8:49:82:25:c8:e9:16:9d:f8:25:0a:10:ff:ac:07:da:a3: 46:54:fd:f6:cd:38:6e:5c:00:ab:65:1b:36:0a:2e:3c:4c:4b: 19:97:f6:a1:e6:d9:08:b0:f0:af:9c:59:1d:2d:b5:c9:8c:a6: be:32:c8:3b:0e:4d:72:c7:3d:b6:09:db:5c:bc:a3:57:10:21: 7c:4a:3d:ef:7d:0a:f4:9c:7d:9e:06:bd:c6:88:1e:22:d2:6c: ff:41:23:2a:53:03:92:3c:93:31:66:0c:51:86:f9:0a:e5:84: 50:3b:28:c2:4f:a9:f0:13:f8:47:94:51:09:c6:59:d9:f2:5f: 7f:83:74:ac:a8:70:4b:43:4a:41:c7:76:bb:a6:e3:a6:58:d9: ed:f1:08:b4:b1:6e:05:3a:4a:95:d2:44:1a:cf:20:86:2e:33: 90:5c:b8:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjUwNTE2MjIyOTMxWhcNMjUwNTIzMjIyOTMxWjAYMRYwFAYD VQQDEw02ODI3YmM0Yi05NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C3BIxrbo0XagICAcfb5ocGGeL0yf6DjD4ItKlPY3H46vQPBTRyuCPGuNGLB QVHs7isDisesDN6ZmAPxpjQE3XUw0dogL1KLsv1VcxLPVCWtirn9Q+DV5dcPHNcR qCIlOwPWbX0nln39nXrouDmjxEL2XR5CrW/pvLSQ5qxBcOmsbdv35OBbmpexDXQl f4o65GrwNLJjue30viELcaMKqvpJvEYoffFl/z46x5zKCbrEGsYpeBfpeT22Hnbi C0AbYYI3kqjiPLkDycNiyepPs/Ku3WDEUUdg3l8n7XsB1SKtawwu2qxVd31G1chG TjGnJmm3/c0TD+uT0vxeZZKINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFIzyVb 8543rXQOce1Im3aU+BdkMB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVf+i7q+lEMXmnEQVF7XP4/xvD/eFg4EGlPWhDsgM89mEA1wZoJoDI v8fHfvOsmFt8TnwdE0q6lqOBq7iIS4WD4BVbBlR72XcVk9etGEe5Kv45cvpMtIuK vWkVyEmCJcjpFp34JQoQ/6wH2qNGVP32zThuXACrZRs2Ci48TEsZl/ah5tkIsPCv nFkdLbXJjKa+Msg7Dk1yxz22CdtcvKNXECF8Sj3vfQr0nH2eBr3GiB4i0mz/QSMq UwOSPJMxZgxRhvkK5YRQOyjCT6nwE/hHlFEJxlnZ8l9/g3SsqHBLQ0pBx3a7puOm WNnt8Qi0sW4FOkqV0kQazyCGLjOQXLhk -----END CERTIFICATE-----Generated at Sun May 18 02:18:22 2025 by rpki-client