$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: gtza48iUwn6bFIpCysS11qPE9mVoO79CmLXzl8IaP44= Subject key identifier: 84:DD:37:44:2E:ED:C1:CE:8B:89:DF:AC:41:F0:85:FB:68:2D:BD:66 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 06AD Signing time: Wed 02 Jul 2025 22:26:14 +0000 Manifest this update: Wed 02 Jul 2025 22:26:14 +0000 Manifest next update: Wed 09 Jul 2025 22:26:14 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: ugwzttSgT+6X+ooClOs8i5yiwicJQhkSOHrnAC4qjVg=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: Jul 2 22:26:14 2025 GMT Not After : Jul 9 22:26:14 2025 GMT Subject: CN=6865b206-8276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0c:d1:29:a7:64:f1:8b:12:be:a1:34:df:da: 3f:89:a1:e7:62:cb:f3:73:21:d8:f0:16:59:7d:5d: 82:c4:af:76:54:d1:7e:6e:d3:31:e7:8f:55:c8:97: c6:c0:64:72:93:52:a3:43:c7:09:a2:0b:ab:88:e0: bc:ea:eb:d7:1d:6e:9d:e9:81:a0:a8:34:27:06:4b: 31:de:63:63:06:75:66:0a:f7:c2:3d:1e:7c:5b:56: 39:de:f6:48:d8:2c:aa:c9:39:1b:02:92:e1:cf:63: 99:e3:05:9d:78:d6:c2:53:74:71:21:5c:1f:0c:83: 78:72:a4:56:b2:d1:b6:83:b1:3b:3d:89:ee:96:7c: 64:64:70:5a:23:a2:40:8f:fc:7d:3d:9b:a7:54:49: 88:e0:ae:84:f8:d3:d9:04:22:ca:75:93:1c:1f:8c: d5:1f:e4:30:6a:cc:23:0b:8e:a9:a5:36:55:68:f9: 69:ce:0d:9c:52:65:92:dd:82:ef:0b:83:39:20:65: dc:da:6d:f9:d5:34:c1:f8:2b:c5:e9:e5:26:ed:a0: 61:5d:73:38:f5:bf:2e:e9:b7:2c:4e:f4:bd:a9:39: 57:2d:7d:f1:4e:3a:b3:14:ee:12:f7:68:87:2c:31: c8:15:bf:71:ac:0f:8f:d4:b2:fb:3a:9e:dd:92:94: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DD:37:44:2E:ED:C1:CE:8B:89:DF:AC:41:F0:85:FB:68:2D:BD:66 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9d:7d:43:91:b1:c2:1c:b7:c3:86:97:71:ef:f0:63:6c:37: 97:32:59:b8:0e:17:67:e5:6c:e0:a6:0b:0f:bc:df:c3:ae:5e: 07:4c:28:ca:de:99:bd:a2:2e:11:95:3a:29:6a:5c:13:86:c5: e4:01:2e:14:33:64:88:0e:9f:7a:b8:30:6f:44:c9:50:42:28: 91:18:7d:8c:45:9d:19:4b:9a:c5:f6:9d:cf:0b:ca:9a:21:f6: 35:bf:28:cf:da:dd:66:99:a0:d5:a8:39:b8:32:ab:e2:9b:94: 31:67:e6:e4:f5:d7:c5:96:3a:51:e0:29:c6:76:9a:7d:58:30: 44:21:e0:84:18:83:4c:c5:08:82:da:42:27:77:4a:c9:5e:52: fc:1c:91:38:d1:2e:22:0c:bf:cd:71:7e:74:bf:d6:7c:8d:ed: 67:88:d0:45:09:ae:1a:7b:6c:e4:7b:b2:a9:ff:b8:c7:dd:24: c9:07:d4:8c:ce:22:7c:b7:39:00:d6:1d:95:5b:3b:45:3b:97: 7b:4e:65:1a:cf:89:d0:2d:a8:81:b4:2b:c2:5d:89:46:00:ba: d9:44:09:83:b4:80:5e:b0:f9:18:cf:1b:62:e2:57:4b:5d:31: 68:76:cd:4c:06:f4:c0:2d:3d:17:00:f2:71:a4:03:e4:2d:36: 06:5c:b3:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjUwNzAyMjIyNjE0WhcNMjUwNzA5MjIyNjE0WjAYMRYwFAYD VQQDEw02ODY1YjIwNi04Mjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AzRKadk8YsSvqE039o/iaHnYsvzcyHY8BZZfV2CxK92VNF+btMx549VyJfG wGRyk1KjQ8cJoguriOC86uvXHW6d6YGgqDQnBksx3mNjBnVmCvfCPR58W1Y53vZI 2CyqyTkbApLhz2OZ4wWdeNbCU3RxIVwfDIN4cqRWstG2g7E7PYnulnxkZHBaI6JA j/x9PZunVEmI4K6E+NPZBCLKdZMcH4zVH+QwaswjC46ppTZVaPlpzg2cUmWS3YLv C4M5IGXc2m351TTB+CvF6eUm7aBhXXM49b8u6bcsTvS9qTlXLX3xTjqzFO4S92iH LDHIFb9xrA+P1LL7Op7dkpTRPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITdN0Qu 7cHOi4nfrEHwhftoLb1mMB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+nX1DkbHCHLfDhpdx7/BjbDeXMlm4Dhdn5WzgpgsPvN/Drl4HTCjK 3pm9oi4RlTopalwThsXkAS4UM2SIDp96uDBvRMlQQiiRGH2MRZ0ZS5rF9p3PC8qa IfY1vyjP2t1mmaDVqDm4Mqvim5QxZ+bk9dfFljpR4CnGdpp9WDBEIeCEGINMxQiC 2kInd0rJXlL8HJE40S4iDL/NcX50v9Z8je1niNBFCa4ae2zke7Kp/7jH3STJB9SM ziJ8tzkA1h2VWztFO5d7TmUaz4nQLaiBtCvCXYlGALrZRAmDtIBesPkYzxti4ldL XTFods1MBvTALT0XAPJxpAPkLTYGXLOS -----END CERTIFICATE-----Generated at Fri Jul 4 01:21:14 2025 by rpki-client