$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: hgmTyX82e/muZQ9g9oPMtmN1Mev/WjEA7pHfUvbGwZU= Subject key identifier: 1C:DF:86:3E:34:10:53:43:30:58:38:33:21:B0:D7:D0:13:00:59:BF Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 01D6 Signing time: Thu 15 May 2025 02:19:16 +0000 Manifest this update: Thu 15 May 2025 02:19:16 +0000 Manifest next update: Thu 22 May 2025 02:19:16 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: SoTz1wb2F4Wmj/uTHnySnNY9ENXnid/lk89UTjyp57c=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83, serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: May 15 02:19:16 2025 GMT Not After : May 22 02:19:16 2025 GMT Subject: CN=68254f24-f8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:c4:28:16:0b:45:2f:fe:26:00:0a:63:33: 46:4d:86:b2:e6:0e:88:37:ac:24:22:74:f3:1c:b7: 22:41:3f:2a:f7:07:c8:81:0f:74:bf:95:ce:69:40: 42:b6:b3:d2:21:c4:11:57:ee:19:cf:64:bb:9b:bd: f1:77:43:5b:e3:ef:67:b5:28:83:a1:aa:ee:10:f2: f5:a0:e9:b3:25:0b:94:26:40:c2:9f:70:3a:6c:12: d3:90:21:43:ba:96:24:18:0e:8a:06:d9:c3:88:77: 5f:60:5b:06:d5:f5:e9:61:c7:b5:09:2a:c0:c2:eb: e1:b1:0f:b5:45:1b:f2:0c:07:b6:4a:33:02:07:3a: 88:e6:52:7a:b4:00:79:ae:8c:d5:99:6a:77:4f:5a: 4c:5e:b4:df:51:66:cf:ae:4a:e6:00:b0:2a:38:25: 7d:1a:ba:0e:9c:aa:08:b7:1c:83:90:9f:96:cc:74: cf:e3:40:0e:ea:b9:53:54:ad:96:17:06:b4:a1:2e: 66:5b:69:7b:75:bf:a2:95:0e:30:5e:51:50:9f:8c: 23:a3:df:c8:1c:e1:8f:51:b7:df:de:54:02:7b:84: 6c:2f:d1:63:f0:06:dc:b8:c1:de:0f:0f:d7:bd:02: 28:32:0b:8c:8a:dd:3d:f3:81:31:81:76:c4:61:52: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:86:3E:34:10:53:43:30:58:38:33:21:B0:D7:D0:13:00:59:BF X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:92:97:67:88:ed:cf:12:32:5b:2e:15:63:8b:ae:49:d0:80: e2:ec:c7:6f:92:17:a6:95:a2:76:9c:42:f8:a8:66:58:2b:05: 39:8f:fd:6b:4a:6a:b7:59:f2:88:a9:37:b2:32:2e:d4:e5:82: 61:90:98:c3:a3:f3:29:29:5a:e9:a4:b9:dc:e7:23:00:41:43: 30:a6:0c:e8:ab:e2:55:e6:7e:40:4f:ac:79:e2:a0:3f:19:4f: e2:e2:2a:45:bd:ef:78:39:ba:fb:23:c4:27:26:8c:58:53:2e: 1d:26:d4:87:13:57:ce:b2:6e:f8:e4:87:1c:cf:71:dd:83:47: 05:54:02:2d:fc:e8:e5:59:ce:36:2d:4e:05:13:76:52:32:ed: fb:51:40:43:9f:1e:38:6b:56:48:8b:73:62:c6:0b:cd:8e:27: 9c:ca:07:24:67:6b:74:60:4a:81:c1:2b:f3:59:08:57:41:c7: 94:42:de:35:22:2f:32:48:ad:32:3b:d4:ed:36:d3:4e:56:6c: 90:26:1f:bd:a5:ea:71:47:65:4d:64:cd:94:56:09:48:c9:67: de:a9:2c:bc:0f:b6:8f:41:6c:cd:c1:f1:da:19:da:31:4f:41: ae:61:c8:ae:9d:12:c0:b1:9b:1f:11:9b:27:27:bb:e4:84:f8: a2:03:a2:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjUwNTE1MDIxOTE2WhcNMjUwNTIyMDIxOTE2WjAYMRYwFAYD VQQDEw02ODI1NGYyNC1mOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFfEKBYLRS/+JgAKYzNGTYay5g6IN6wkInTzHLciQT8q9wfIgQ90v5XOaUBC trPSIcQRV+4Zz2S7m73xd0Nb4+9ntSiDoaruEPL1oOmzJQuUJkDCn3A6bBLTkCFD upYkGA6KBtnDiHdfYFsG1fXpYce1CSrAwuvhsQ+1RRvyDAe2SjMCBzqI5lJ6tAB5 rozVmWp3T1pMXrTfUWbPrkrmALAqOCV9GroOnKoItxyDkJ+WzHTP40AO6rlTVK2W Fwa0oS5mW2l7db+ilQ4wXlFQn4wjo9/IHOGPUbff3lQCe4RsL9Fj8AbcuMHeDw/X vQIoMguMit0984ExgXbEYVKsbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzfhj40 EFNDMFg4MyGw19ATAFm/MB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0kpdniO3PEjJbLhVji65J0IDi7MdvkhemlaJ2nEL4qGZYKwU5j/1r Smq3WfKIqTeyMi7U5YJhkJjDo/MpKVrppLnc5yMAQUMwpgzoq+JV5n5AT6x54qA/ GU/i4ipFve94Obr7I8QnJoxYUy4dJtSHE1fOsm745Iccz3Hdg0cFVAIt/OjlWc42 LU4FE3ZSMu37UUBDnx44a1ZIi3NixgvNjiecygckZ2t0YEqBwSvzWQhXQceUQt41 Ii8ySK0yO9TtNtNOVmyQJh+9pepxR2VNZM2UVglIyWfeqSy8D7aPQWzNwfHaGdox T0GuYciunRLAsZsfEZsnJ7vkhPiiA6Ky -----END CERTIFICATE-----Generated at Thu May 15 12:41:21 2025 by rpki-client