$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json) Hash identifier: YtBFqvbKt2orDt4EMam42+kRF5ojgHP+Nlu3nx/36q8= Subject key identifier: 1F:BF:F8:53:45:07:4E:FD:8B:2A:53:AA:2A:C2:99:74:6B:53:23:5F Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft Manifest number: 070B Signing time: Sat 10 May 2025 21:34:41 +0000 Manifest this update: Sat 10 May 2025 21:34:40 +0000 Manifest next update: Sat 17 May 2025 21:34:40 +0000 Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: BcnoAAgef/XsuIvJT+TY7g0KHV+YXpOnL80PZ0vQuM4=) 2: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: UEeWCT6ImEaxx6DYiNNHxE3gZPCQQ4xS1glK4ixz1u8=) 3: 74AB6A4A69A311EFAAE0FA5BC4F9AE02.roa (hash: /0w41HOsNlcXpRWlzhILaNzRflWr6eesavXYpteo0zE=) 4: C1770D5A499811EFBB8C701EC4F9AE02.roa (hash: bRXM6aO12Du5rWWxHCAs6gVAFfbVxDg0k7dT/XJ9KEE=) 5: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: fjb9xxIvXmy/Q4aA7zhlhVkljXVrUMNfVIOWbyyneP8=) 6: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: agCGjmWYmlY22GfNRQLo7JWrox6fkhHy906PQcOJAjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB Validity Not Before: May 10 21:34:40 2025 GMT Not After : May 17 21:34:40 2025 GMT Subject: CN=681fc671-53ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:50:8d:9a:24:ed:19:de:02:be:9a:4c:4c:2a: 3d:6c:f0:c2:f2:be:41:e4:d3:04:3f:a8:4c:70:44: b5:32:f3:97:97:e5:c5:6c:d3:f6:cd:b0:7d:67:5d: 72:27:83:83:9a:42:05:1d:c1:39:ad:c6:f0:5b:0f: 96:22:16:1c:c8:5f:21:7d:34:c7:33:7a:f3:16:4b: 3b:67:73:fc:b4:29:c2:17:4b:45:30:cf:ca:74:02: 54:2f:ce:9b:55:84:c8:58:fc:29:a7:48:d2:06:b1: 19:74:63:aa:bf:b5:85:66:91:a0:5b:de:b5:d6:9b: 93:85:f3:19:56:fe:dc:6d:05:9f:e5:dd:05:ba:b0: 26:ac:66:8a:ce:01:bc:26:ae:3a:2d:1e:f5:d6:29: 8e:1f:ba:2e:65:52:05:ef:a3:b1:4b:f9:eb:31:94: 02:92:07:f3:7b:22:ec:36:09:10:ff:28:04:6f:3d: a7:53:e2:49:93:91:65:0a:1e:10:5c:6c:84:72:49: cc:bc:86:1b:4c:44:3d:cd:ae:65:7b:08:4f:0c:d2: 13:e2:4f:0d:26:02:6a:aa:59:7d:58:84:bb:c3:fb: 44:b6:12:ff:55:84:ec:cf:88:e3:fc:10:a6:44:c4: ac:59:ff:db:8a:2f:81:9c:d4:36:e6:0b:1e:70:5b: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:F8:53:45:07:4E:FD:8B:2A:53:AA:2A:C2:99:74:6B:53:23:5F X509v3 Authority Key Identifier: keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ea:df:32:7a:48:d5:8c:e4:21:a1:23:9f:79:62:d6:21:b6: 96:f8:17:77:5b:52:94:40:6a:15:0f:e6:31:a0:ae:9f:3d:60: 5d:2e:fa:8e:a0:b1:13:4a:8d:ee:e2:9a:43:79:64:21:0c:2a: 48:98:b6:8b:fe:ea:ab:43:6a:fa:29:73:74:db:04:93:a7:3c: fb:b3:59:12:5f:78:e9:e2:37:8f:79:d9:36:64:a6:86:b0:d1: 3c:22:d4:04:84:20:f6:c0:58:63:ba:6e:a3:18:df:23:4a:e5: 2f:39:21:6b:d0:69:bd:66:cf:9f:82:a8:ed:58:c7:64:b5:b8: 81:f1:eb:c6:bc:fe:a4:77:bc:00:df:7e:bb:09:73:a0:d8:af: 83:bd:7e:b9:9c:7e:41:df:c8:b2:9f:aa:25:33:ff:26:b7:d9: 6b:93:21:17:68:55:91:b9:28:9a:6b:ec:08:22:0c:f3:88:54: bb:a0:2e:05:49:e1:5a:8f:e5:bb:a4:f4:00:21:50:b8:4a:56: 55:d7:bf:26:8f:10:5e:1d:f0:df:c1:1a:13:c3:d9:bb:6f:80: 39:f8:71:bf:01:2d:ab:e0:7f:aa:a2:4d:8a:5b:3a:20:00:f5: 1b:05:ab:d0:fe:19:0d:5a:0d:99:fe:4e:da:b9:35:10:13:d3: d3:ed:be:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MTMxMTAvBgNVBAUTKEI2Q0NCNUU0MzFFNDUwMTkxNTBDNEYzNzIxRjRGODBB NkYyRUQ3REIwHhcNMjUwNTEwMjEzNDQwWhcNMjUwNTE3MjEzNDQwWjAYMRYwFAYD VQQDEw02ODFmYzY3MS01M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA91CNmiTtGd4CvppMTCo9bPDC8r5B5NMEP6hMcES1MvOXl+XFbNP2zbB9Z11y J4ODmkIFHcE5rcbwWw+WIhYcyF8hfTTHM3rzFks7Z3P8tCnCF0tFMM/KdAJUL86b VYTIWPwpp0jSBrEZdGOqv7WFZpGgW9611puThfMZVv7cbQWf5d0FurAmrGaKzgG8 Jq46LR711imOH7ouZVIF76OxS/nrMZQCkgfzeyLsNgkQ/ygEbz2nU+JJk5FlCh4Q XGyEcknMvIYbTEQ9za5lewhPDNIT4k8NJgJqqll9WIS7w/tEthL/VYTsz4jj/BCm RMSsWf/bii+BnNQ25gsecFsvcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+/+FNF B079iypTqirCmXRrUyNfMB8GA1UdIwQYMBaAFLbMteQx5FAZFQxPNyH0+ApvLtfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUxMy9DMkJBNkJGMDQy MDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VCa1ZERTgzSWZUNENtOHUx OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzeTE1REhrVUJrVkRFODNJZlQ0Q204dTE5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUxMy9DMkJBNkJGMDQyMDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VC a1ZERTgzSWZUNENtOHUxOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO6t8yekjVjOQhoSOfeWLWIbaW+Bd3W1KUQGoVD+YxoK6fPWBdLvqO oLETSo3u4ppDeWQhDCpImLaL/uqrQ2r6KXN02wSTpzz7s1kSX3jp4jePedk2ZKaG sNE8ItQEhCD2wFhjum6jGN8jSuUvOSFr0Gm9Zs+fgqjtWMdktbiB8evGvP6kd7wA 3367CXOg2K+DvX65nH5B38iyn6olM/8mt9lrkyEXaFWRuSiaa+wIIgzziFS7oC4F SeFaj+W7pPQAIVC4SlZV178mjxBeHfDfwRoTw9m7b4A5+HG/AS2r4H+qok2KWzog APUbBavQ/hkNWg2Z/k7auTUQE9PT7b4J -----END CERTIFICATE-----Generated at Sun May 11 06:36:12 2025 by rpki-client