$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft File: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json) Hash identifier: DTvChl8ZXyyUV5dqsW7tSmSLF1F2ouKgy6WAbsFwXVM= Subject key identifier: 38:C3:2E:B2:8B:78:5D:8A:F1:DD:D6:CA:4F:99:2E:5F:A7:5A:56:B1 Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft Manifest number: 01AF Signing time: Tue 13 May 2025 02:47:15 +0000 Manifest this update: Tue 13 May 2025 02:47:15 +0000 Manifest next update: Tue 20 May 2025 02:47:15 +0000 Files and hashes: 1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: SJTgk8VBBfE5zLD+wu7dBHMFvwOuGzdHntk91q1s/RE=) 2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: kqIHhnyQRZgC6uZsf+ZFH/e2inqR4T8P11HCshy3cfc=) 3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: g4ypHYQc/SoQuff2SpT25AmNiStPMO3r322e8aNQ10A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Validity Not Before: May 13 02:47:15 2025 GMT Not After : May 20 02:47:15 2025 GMT Subject: CN=6822b2b3-e0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:27:ce:de:7a:2b:20:ed:31:90:72:3a:fd: 92:74:13:cb:4c:b0:91:10:b6:3a:02:df:65:48:72: 51:54:3d:5c:da:01:03:dc:89:4b:1b:37:0d:bb:97: 66:c3:f8:9e:a1:76:e2:cf:ab:55:2e:e4:ca:f6:e1: d3:79:06:25:dc:f9:9f:ef:4e:42:9a:09:01:91:3d: 9b:92:f8:4a:78:84:0a:b3:8a:25:35:9e:54:0c:11: 16:9d:10:16:05:07:0e:b0:ce:17:ca:b2:05:ca:b1: 9d:14:8f:f4:46:94:f5:3f:65:87:bf:f5:77:92:d7: dc:26:30:78:b1:5a:28:d5:fd:08:da:51:ca:4e:60: 90:1f:32:3c:03:2a:84:3b:c1:8d:ba:72:be:2d:12: a0:d7:78:cf:48:ba:b8:ac:37:68:20:fb:d1:f1:98: 02:4a:c2:9e:cc:d8:6d:5a:91:36:b6:15:5a:7f:79: a6:c4:a1:f6:e4:2a:33:d4:9a:42:fb:ef:1a:11:61: 40:08:99:44:92:8d:be:f2:d8:80:0a:16:a1:f8:b4: 62:9b:5a:e0:e0:f1:d7:38:9c:32:df:ed:da:b6:a9: 29:dd:fc:a2:4b:31:a6:c4:f0:cf:3c:ea:73:03:66: 3c:ee:e3:67:96:02:ec:85:63:12:44:9f:7c:81:f6: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:2E:B2:8B:78:5D:8A:F1:DD:D6:CA:4F:99:2E:5F:A7:5A:56:B1 X509v3 Authority Key Identifier: keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:82:52:62:3d:fa:78:7a:78:d9:a2:c2:de:48:ba:b6:66:13: b9:19:fa:cf:ce:65:c9:96:64:08:08:c1:65:94:d9:a1:64:cd: c3:b6:2f:de:2e:84:b7:52:7a:47:3e:23:14:90:40:61:f6:35: 01:b3:0d:f8:b3:a9:f1:51:ad:9a:14:44:17:5e:2b:02:bd:2c: 72:e1:fd:99:04:91:5c:3b:a1:2c:31:30:02:a8:2c:a3:0d:6c: 63:b0:8a:8d:0a:ca:8a:ab:b4:16:24:55:dd:1d:8f:d3:64:a3: 73:c5:88:fe:c4:0d:af:24:77:aa:37:93:00:ad:c3:8d:8e:44: 81:55:4f:1b:28:16:7f:c2:a3:23:f9:ba:a3:e8:d1:f5:22:4b: 1e:17:c5:75:fb:63:48:28:fe:e9:1c:f5:11:f2:d2:55:32:e8: 40:a9:60:8c:46:18:4e:e0:20:45:15:35:90:ef:d4:67:a6:04: b8:91:da:0c:af:91:51:1b:8a:ab:51:36:04:0a:32:20:3f:93: 0f:cf:d4:60:44:27:c7:af:f9:7c:76:18:ea:c0:9f:2c:c9:e6: 9e:a7:bf:7f:10:c7:fe:c2:e0:ba:26:6c:4c:13:9d:62:a9:86: 91:fb:b9:d0:b5:96:2f:df:43:0e:e0:d9:30:68:47:82:4e:6c: bb:70:5c:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC ODUwNzE1QjkwHhcNMjUwNTEzMDI0NzE1WhcNMjUwNTIwMDI0NzE1WjAYMRYwFAYD VQQDEw02ODIyYjJiMy1lMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuInzt56KyDtMZByOv2SdBPLTLCRELY6At9lSHJRVD1c2gED3IlLGzcNu5dm w/ieoXbiz6tVLuTK9uHTeQYl3Pmf705CmgkBkT2bkvhKeIQKs4olNZ5UDBEWnRAW BQcOsM4XyrIFyrGdFI/0RpT1P2WHv/V3ktfcJjB4sVoo1f0I2lHKTmCQHzI8AyqE O8GNunK+LRKg13jPSLq4rDdoIPvR8ZgCSsKezNhtWpE2thVaf3mmxKH25Coz1JpC ++8aEWFACJlEko2+8tiAChah+LRim1rg4PHXOJwy3+3atqkp3fyiSzGmxPDPPOpz A2Y87uNnlgLshWMSRJ98gfab2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjDLrKL eF2K8d3Wyk+ZLl+nWlaxMB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY0RS9ERjkwMEUzNkNFRTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6 ekNNbEMxWl9JRmE0VUhGYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHglJiPfp4enjZosLeSLq2ZhO5GfrPzmXJlmQICMFllNmhZM3Dti/e LoS3UnpHPiMUkEBh9jUBsw34s6nxUa2aFEQXXisCvSxy4f2ZBJFcO6EsMTACqCyj DWxjsIqNCsqKq7QWJFXdHY/TZKNzxYj+xA2vJHeqN5MArcONjkSBVU8bKBZ/wqMj +bqj6NH1IkseF8V1+2NIKP7pHPUR8tJVMuhAqWCMRhhO4CBFFTWQ79RnpgS4kdoM r5FRG4qrUTYECjIgP5MPz9RgRCfHr/l8dhjqwJ8syeaep79/EMf+wuC6JmxME51i qYaR+7nQtZYv30MO4NkwaEeCTmy7cFwz -----END CERTIFICATE-----Generated at Wed May 14 07:12:45 2025 by rpki-client