$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: ARoSYL8upgYmvlYbtX7pTqnOzQmht0PRhI3mHARveMg= Subject key identifier: 88:7A:19:E2:BF:FC:09:DF:83:E6:26:80:BF:2C:9C:66:F0:AF:4E:D5 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 0110 Signing time: Fri 09 May 2025 04:06:17 +0000 Manifest this update: Fri 09 May 2025 04:06:17 +0000 Manifest next update: Fri 16 May 2025 04:06:17 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: UAiYqwtFbSGBwdKbjSKlDOdLW+pyNSvt7S7JXdWqhmE=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: May 9 04:06:17 2025 GMT Not After : May 16 04:06:17 2025 GMT Subject: CN=681d7f39-3628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:d8:26:01:6a:76:ae:21:2c:36:e9:86:84: 07:e9:c0:65:08:7a:8a:a4:05:d7:2e:aa:c1:8f:1c: 9d:04:b3:10:03:e9:6b:b2:36:9f:41:be:5e:fc:25: 72:52:57:73:69:19:2c:e3:6d:b8:e3:aa:08:01:c2: 56:2d:56:06:eb:b2:d6:7d:3d:19:fa:ba:88:0a:9b: 2c:07:61:5d:7d:42:26:a9:a6:f3:0b:3c:3c:54:37: 08:7a:4b:94:5a:67:36:07:23:00:e7:06:26:bb:ba: 40:b0:83:69:f1:06:cc:ef:49:a5:c5:82:15:2f:e9: a3:59:88:d5:9b:1b:b3:37:4b:de:e6:28:4c:cb:14: 37:9e:6e:af:45:a6:8f:29:dd:12:e7:70:28:a0:bd: b0:10:57:f7:75:f1:03:03:5d:4a:4f:34:f9:03:c1: 91:ea:0f:96:0d:e4:27:d7:49:50:cb:33:1d:12:89: 1e:a6:14:f5:b5:50:44:30:77:0a:84:69:79:d8:0b: 57:d9:93:20:81:5e:ed:1c:e1:d9:7c:4b:ec:f0:c6: f9:09:35:c6:1f:a1:32:93:43:e8:cb:a2:c8:fd:64: 97:3c:73:f9:2f:e1:11:8c:ba:d4:7a:03:b7:11:7c: 2b:ac:25:23:5e:cb:f0:f2:63:1f:f9:f7:7f:18:4c: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7A:19:E2:BF:FC:09:DF:83:E6:26:80:BF:2C:9C:66:F0:AF:4E:D5 X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:b6:d2:9a:ef:da:e2:e6:56:ac:8c:61:eb:c3:c2:97:e4:c6: a3:10:a9:48:4e:42:cf:0b:fa:b5:e1:df:85:81:69:0c:81:b4: 7c:ce:bd:0c:4a:34:a1:4c:7b:e4:53:55:c2:c4:dc:e5:1c:1f: af:4d:57:d6:12:53:95:4e:bf:ef:b6:52:f2:32:ac:e0:33:0c: 32:dc:d9:bb:98:cb:33:0b:0f:da:23:5d:20:c6:a3:c3:6f:93: c7:02:5a:dc:1c:f7:b5:45:08:db:ae:bb:d6:ee:15:d3:d8:1d: 0b:cc:4d:5b:e4:3f:83:b7:f5:3c:d7:e9:23:94:9a:eb:14:b1: bd:89:3f:00:d2:e9:4a:45:cf:a9:90:bb:84:d3:41:62:85:da: d9:5a:6f:67:48:da:91:05:10:52:57:b2:08:91:b7:be:70:0d: 31:f0:df:36:d6:25:09:22:ca:78:72:33:67:5a:ca:21:67:65: cc:c3:34:8a:9b:5c:ef:dd:64:e4:31:51:ca:c1:dc:6e:e6:09: 6c:35:de:2c:59:c8:65:1d:6e:47:18:b3:80:1b:d8:d2:8e:d8: 5d:60:b1:f1:f7:10:96:16:b8:58:07:e0:7a:73:a7:31:31:2e: 7a:40:e2:f7:3f:f6:44:0f:d6:9b:92:66:3c:11:3a:e5:cb:2b: b8:54:9c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjUwNTA5MDQwNjE3WhcNMjUwNTE2MDQwNjE3WjAYMRYwFAYD VQQDEw02ODFkN2YzOS0zNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zrYJgFqdq4hLDbphoQH6cBlCHqKpAXXLqrBjxydBLMQA+lrsjafQb5e/CVy UldzaRks422446oIAcJWLVYG67LWfT0Z+rqICpssB2FdfUImqabzCzw8VDcIekuU Wmc2ByMA5wYmu7pAsINp8QbM70mlxYIVL+mjWYjVmxuzN0ve5ihMyxQ3nm6vRaaP Kd0S53AooL2wEFf3dfEDA11KTzT5A8GR6g+WDeQn10lQyzMdEokephT1tVBEMHcK hGl52AtX2ZMggV7tHOHZfEvs8Mb5CTXGH6Eyk0Poy6LI/WSXPHP5L+ERjLrUegO3 EXwrrCUjXsvw8mMf+fd/GEyukQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh6GeK/ /Anfg+YmgL8snGbwr07VMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfttKa79ri5lasjGHrw8KX5MajEKlITkLPC/q14d+FgWkMgbR8zr0M SjShTHvkU1XCxNzlHB+vTVfWElOVTr/vtlLyMqzgMwwy3Nm7mMszCw/aI10gxqPD b5PHAlrcHPe1RQjbrrvW7hXT2B0LzE1b5D+Dt/U81+kjlJrrFLG9iT8A0ulKRc+p kLuE00FihdrZWm9nSNqRBRBSV7IIkbe+cA0x8N821iUJIsp4cjNnWsohZ2XMwzSK m1zv3WTkMVHKwdxu5glsNd4sWchlHW5HGLOAG9jSjthdYLHx9xCWFrhYB+B6c6cx MS56QOL3P/ZED9abkmY8ETrlyyu4VJxE -----END CERTIFICATE-----Generated at Sat May 10 10:31:31 2025 by rpki-client