$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: KvOF9HU1q46u+4PqyRrcCj3/YCw14uZVSOzxnuk1O1I= Subject key identifier: A0:FC:76:3A:47:D7:46:AC:67:E9:C0:5C:60:44:96:65:7E:61:3C:36 Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 01A7 Signing time: Thu 15 May 2025 02:42:22 +0000 Manifest this update: Thu 15 May 2025 02:42:22 +0000 Manifest next update: Thu 22 May 2025 02:42:22 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: 3nrOZS0AT2Y8WFtisq3GJWZa11k+0Ym2MtWYcI5kOC4=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: May 15 02:42:22 2025 GMT Not After : May 22 02:42:22 2025 GMT Subject: CN=6825548e-8953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:b4:2c:06:eb:41:f3:aa:ce:dc:de:fc:cd: e8:26:33:ab:1d:ea:01:7b:c5:79:24:1e:ce:46:57: 42:c6:1a:1d:e0:e6:14:ef:0e:83:c7:10:a1:12:3a: c5:2e:a8:b1:90:33:2f:31:3c:77:69:65:62:b8:12: c1:7c:c6:ab:fa:61:f5:0d:b3:6c:74:8e:56:ee:76: e1:45:a4:b0:4b:63:fc:b8:58:70:8c:cd:8a:ea:76: f8:6b:91:08:04:1d:19:c1:80:1d:67:a9:a4:89:1a: af:db:bd:bf:a5:4c:9d:e3:11:d9:64:18:70:b5:f1: 06:d9:b8:8b:8d:b5:31:9c:3b:09:5a:c9:e5:b9:21: 0a:66:4d:f3:0d:3e:a2:07:e5:64:83:b8:67:57:78: 0e:dc:5a:2f:97:6a:a4:9b:2e:b0:32:71:6c:84:65: 2e:5e:e5:3a:0a:03:61:bb:c3:2e:e5:d8:3e:54:f3: 79:be:7b:47:a8:ae:5c:97:cd:3f:6c:9f:dd:ed:54: 59:59:73:e8:0f:6b:46:a7:99:75:94:b5:76:a5:b5: 6c:de:5f:8f:16:4e:21:04:f2:83:47:d1:55:98:7c: 57:60:81:c9:57:2c:d1:9c:3a:20:ea:0a:8a:02:64: 4b:d0:cf:cd:d8:9d:15:ea:aa:cb:e6:e0:ba:68:d2: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:76:3A:47:D7:46:AC:67:E9:C0:5C:60:44:96:65:7E:61:3C:36 X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:53:b0:57:e2:39:75:b2:4d:f7:c3:61:81:4b:bf:12:11: 9e:c8:b1:a8:f2:3b:48:c1:3b:a3:0e:44:1a:dc:3c:cb:94:00: 1c:8a:71:a4:61:a7:eb:00:c6:61:b6:89:24:3a:c9:1f:18:12: 38:df:f7:e6:14:e3:39:9a:b9:3b:78:65:98:df:49:34:11:f2: 7c:35:0a:85:1e:ac:97:1c:a3:6c:96:30:15:3e:93:45:06:c8: b0:39:36:9e:cd:2e:7e:53:e2:6e:00:4c:09:b8:93:3f:50:f1: 2a:84:1f:37:c9:ec:1b:5a:ee:ce:82:3e:58:55:12:42:f5:b8: 04:ea:2e:22:f6:45:49:80:b6:6b:ba:19:7f:56:be:d9:9b:b5: de:c0:d3:9d:c5:21:ca:cb:6e:74:30:0d:ea:44:6a:19:94:15: 15:51:54:95:28:d6:73:88:76:51:24:22:af:85:76:0b:01:6e: ed:0f:00:29:d9:92:50:94:b5:93:c3:02:df:a4:85:e1:16:ec: 81:5b:23:48:5d:b1:3b:cd:b5:a8:54:ad:f2:e3:6f:16:c7:6d: 95:38:21:a3:b3:da:e9:08:83:81:e4:73:16:35:ba:6a:51:57: 57:4b:df:2f:d8:ed:05:24:a5:86:48:ab:c1:88:39:17:e5:01: ed:e9:fc:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwNTE1MDI0MjIyWhcNMjUwNTIyMDI0MjIyWjAYMRYwFAYD VQQDEw02ODI1NTQ4ZS04OTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw+0LAbrQfOqztze/M3oJjOrHeoBe8V5JB7ORldCxhod4OYU7w6DxxChEjrF LqixkDMvMTx3aWViuBLBfMar+mH1DbNsdI5W7nbhRaSwS2P8uFhwjM2K6nb4a5EI BB0ZwYAdZ6mkiRqv272/pUyd4xHZZBhwtfEG2biLjbUxnDsJWsnluSEKZk3zDT6i B+Vkg7hnV3gO3Fovl2qkmy6wMnFshGUuXuU6CgNhu8Mu5dg+VPN5vntHqK5cl80/ bJ/d7VRZWXPoD2tGp5l1lLV2pbVs3l+PFk4hBPKDR9FVmHxXYIHJVyzRnDog6gqK AmRL0M/N2J0V6qrL5uC6aNKx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD8djpH 10asZ+nAXGBElmV+YTw2MB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLvFOwV+I5dbJN98NhgUu/EhGeyLGo8jtIwTujDkQa3DzLlAAcinGk YafrAMZhtokkOskfGBI43/fmFOM5mrk7eGWY30k0EfJ8NQqFHqyXHKNsljAVPpNF BsiwOTaezS5+U+JuAEwJuJM/UPEqhB83yewbWu7Ogj5YVRJC9bgE6i4i9kVJgLZr uhl/Vr7Zm7XewNOdxSHKy250MA3qRGoZlBUVUVSVKNZziHZRJCKvhXYLAW7tDwAp 2ZJQlLWTwwLfpIXhFuyBWyNIXbE7zbWoVK3y428Wx22VOCGjs9rpCIOB5HMWNbpq UVdXS98v2O0FJKWGSKvBiDkX5QHt6fz0 -----END CERTIFICATE-----Generated at Thu May 15 22:40:32 2025 by rpki-client