$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: YmisUGBl8EDm1Bub1p9QVHPT3PjvwykZgM/6OH7IizI= Subject key identifier: 15:BE:F4:CC:97:2A:9F:B3:07:DB:86:77:49:41:53:10:69:54:3F:A1 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A06 Signing time: Fri 16 May 2025 20:04:37 +0000 Manifest this update: Fri 16 May 2025 20:04:37 +0000 Manifest next update: Fri 23 May 2025 20:04:37 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: B+402OJJCOGfQXqIaXkRJ8AZVl5rhoiGnMt4RNpSL20=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: May 16 20:04:37 2025 GMT Not After : May 23 20:04:37 2025 GMT Subject: CN=68279a55-f055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:69:0d:e4:1e:ae:b7:3c:88:42:36:89:dd: c4:19:bd:05:f4:b0:da:8d:de:e7:92:23:53:50:50: 1f:59:2a:50:1f:d8:c6:62:d6:97:2a:4f:55:58:d1: bf:be:a6:10:78:af:ea:15:af:ce:7b:cc:11:47:cf: 6e:88:d0:5a:bc:74:47:2a:8b:b3:7a:0e:ed:4d:fe: b0:49:e7:82:b6:cf:5f:c8:e4:c7:9b:6d:f7:b8:16: 64:38:b9:2c:df:39:b6:d3:14:dc:af:cb:39:08:ba: c2:8d:9a:d0:bd:c9:12:f7:2d:08:7b:a9:5a:e8:14: 67:47:e4:ce:31:c4:fd:2c:bf:dc:67:37:33:89:32: 6f:76:3e:cb:7d:37:ff:7b:42:ad:60:ec:a7:ee:ee: 32:45:39:d4:bd:dc:57:d9:22:64:0a:c3:14:09:1f: cb:cb:0a:f6:2b:4a:79:92:ce:34:0a:d6:78:f1:ed: 7f:3c:95:6c:6c:30:0d:11:ea:50:21:4a:03:14:2d: ad:d5:21:3c:6c:2e:9a:28:7d:0c:d8:ca:b1:86:d5: 86:5e:2f:ed:fd:2f:6d:df:1f:fa:63:54:3d:f5:df: 51:6a:2d:2e:b7:9c:75:2a:f3:68:10:19:bc:2e:af: 50:d0:35:bb:d9:a8:23:5e:28:bd:0f:8b:33:b5:c9: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BE:F4:CC:97:2A:9F:B3:07:DB:86:77:49:41:53:10:69:54:3F:A1 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f0:33:11:3a:01:1b:58:a3:48:d7:e4:f8:12:5f:71:ee:20: d2:ac:c3:7d:b8:9f:d9:db:e7:ec:d3:ad:2d:5a:fa:5f:f1:f4: c5:ac:89:b3:f4:26:99:0c:72:1a:f3:9a:a8:d9:96:e0:99:37: 9d:4e:3c:8d:53:b5:94:7f:19:d7:22:6c:cc:30:3a:f8:9b:8b: 54:d1:63:0f:1c:8c:8a:15:aa:da:cf:5f:a1:3a:9b:bf:11:8f: 3e:d4:2d:df:8b:9b:c7:87:2e:b1:88:c9:24:82:20:bd:8d:ad: de:a7:56:fb:a3:63:f0:73:1e:b8:d2:e6:79:56:38:93:87:5c: 50:24:c0:ba:a1:40:84:fc:03:a3:b9:0a:b7:ca:49:2b:a8:f6: 07:1c:9a:af:1e:b9:6f:fa:b8:20:e6:23:19:32:61:dc:62:a9: 6a:b7:5d:bd:02:2a:e8:2b:1f:01:f3:ce:fd:51:2d:f9:0a:ac: fd:87:7b:c9:de:6f:26:70:b9:55:65:cc:9a:41:bc:5b:f9:73: 24:7c:c5:4c:e3:41:67:44:aa:b5:93:39:33:ac:b3:d2:ab:10: e6:f9:9e:26:d1:e2:06:c9:52:9a:fa:9d:7f:e9:f4:b1:87:82: 49:07:e3:91:85:e2:04:bc:98:5c:c8:3c:59:60:34:95:de:a0: 65:25:4c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUwNTE2MjAwNDM3WhcNMjUwNTIzMjAwNDM3WjAYMRYwFAYD VQQDEw02ODI3OWE1NS1mMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA9pDeQerrc8iEI2id3EGb0F9LDajd7nkiNTUFAfWSpQH9jGYtaXKk9VWNG/ vqYQeK/qFa/Oe8wRR89uiNBavHRHKouzeg7tTf6wSeeCts9fyOTHm233uBZkOLks 3zm20xTcr8s5CLrCjZrQvckS9y0Ie6la6BRnR+TOMcT9LL/cZzcziTJvdj7LfTf/ e0KtYOyn7u4yRTnUvdxX2SJkCsMUCR/Lywr2K0p5ks40CtZ48e1/PJVsbDANEepQ IUoDFC2t1SE8bC6aKH0M2MqxhtWGXi/t/S9t3x/6Y1Q99d9Rai0ut5x1KvNoEBm8 Lq9Q0DW72agjXii9D4sztclwJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBW+9MyX Kp+zB9uGd0lBUxBpVD+hMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV8DMROgEbWKNI1+T4El9x7iDSrMN9uJ/Z2+fs060tWvpf8fTFrImz 9CaZDHIa85qo2ZbgmTedTjyNU7WUfxnXImzMMDr4m4tU0WMPHIyKFaraz1+hOpu/ EY8+1C3fi5vHhy6xiMkkgiC9ja3ep1b7o2Pwcx640uZ5VjiTh1xQJMC6oUCE/AOj uQq3ykkrqPYHHJqvHrlv+rgg5iMZMmHcYqlqt129AiroKx8B8879US35Cqz9h3vJ 3m8mcLlVZcyaQbxb+XMkfMVM40FnRKq1kzkzrLPSqxDm+Z4m0eIGyVKa+p1/6fSx h4JJB+ORheIEvJhcyDxZYDSV3qBlJUzi -----END CERTIFICATE-----Generated at Fri May 16 22:57:59 2025 by rpki-client