$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft File: TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json) Hash identifier: ppSUR38RGx5X+dsArQoRvJqfiEWdSyMMQWechsYsHyw= Subject key identifier: BE:92:1E:7B:52:95:62:A7:2E:B7:CA:66:C0:44:02:FA:98:DB:CB:FC Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft Manifest number: 042F Signing time: Tue 13 May 2025 00:09:00 +0000 Manifest this update: Tue 13 May 2025 00:08:59 +0000 Manifest next update: Tue 20 May 2025 00:08:59 +0000 Files and hashes: 1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: Ci3oEl10K5dxfZLBjim5awsmoqLet3m0i55BgOfy5to=) 2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: RiGNiFnNAoJRKUyYrUN1wLZV9I9idQnh7FmtgNq/Suc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD Validity Not Before: May 13 00:08:59 2025 GMT Not After : May 20 00:08:59 2025 GMT Subject: CN=68228d9c-08a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:63:ad:13:29:bc:69:2c:4a:b2:da:bf:21:5d: 29:7f:88:6c:e2:87:b8:b2:2f:24:4a:0e:eb:de:a3: 99:02:47:dd:63:15:c4:60:18:69:ef:05:1f:43:cc: 13:a4:8b:48:89:ed:6d:38:3e:d2:3e:23:6b:b6:9c: 04:0b:61:dc:66:76:35:63:26:77:2a:4a:d8:27:6b: ef:5d:b5:ee:11:91:45:2c:1a:b5:fc:77:08:06:12: c7:72:c5:0c:e6:06:3f:65:98:ca:85:36:a1:36:04: c2:7f:36:9a:8a:85:fd:9d:52:99:b5:9a:47:64:cd: 46:a9:00:da:9b:17:33:f3:ff:92:21:84:44:ad:4e: c9:ae:f0:24:ad:e5:32:77:52:18:69:b2:2c:f7:ed: 91:1d:0a:46:30:bb:d0:fe:2e:30:0d:dc:e6:9c:85: b8:16:2a:e4:5b:71:64:05:ec:f6:6d:4d:1b:fe:0d: 9a:ec:09:3d:10:43:2b:4c:02:26:6f:ba:02:b2:6a: 78:d8:a9:e0:c1:31:ed:89:b3:f8:25:6b:91:db:81: b1:2f:55:24:67:d9:f1:b2:03:f2:2a:a3:19:a3:8f: 82:af:0d:51:5d:88:50:9d:12:9d:30:6d:80:f6:87: 37:81:37:27:1a:d7:68:6d:a5:8e:15:f1:02:31:13: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:92:1E:7B:52:95:62:A7:2E:B7:CA:66:C0:44:02:FA:98:DB:CB:FC X509v3 Authority Key Identifier: keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:df:7a:09:89:b7:51:4b:c2:1f:c1:50:25:fc:da:ff:56: 30:47:ef:74:fc:17:95:59:bf:1d:97:d1:a7:b6:82:e9:65:c2: 2a:6f:2c:02:4d:47:02:c2:a7:1c:2a:b3:49:ed:c6:ae:10:a5: 7d:78:c8:08:cc:1b:9a:99:9f:3d:9e:0c:aa:97:51:ec:6a:47: 24:55:03:5f:05:db:a2:8e:3f:b7:91:1d:b3:08:6c:50:2a:91: 59:06:d6:91:a5:ac:e8:86:f0:28:d3:d9:2a:59:1f:ad:41:62: 93:d5:dc:f5:71:20:21:75:ca:dd:40:db:fd:8a:1d:1f:91:86: 63:8f:5a:b3:e4:ca:9f:32:56:0e:e7:21:64:7a:f1:54:4e:c2: d6:68:23:e2:df:d6:24:d3:82:8e:bc:fc:71:72:4a:5d:59:60: ab:72:cc:4d:5f:16:78:ff:75:54:87:f3:d7:ed:5d:fd:31:a0: 99:72:bc:33:47:ed:28:f5:a9:85:59:12:ba:42:f9:c2:e4:72: b1:1d:a1:ab:5e:56:ff:5c:23:fa:6d:6c:f4:33:05:3b:8a:ec: 5f:a3:f6:5a:a3:25:d4:ef:e7:72:6b:cb:00:47:16:fb:07:f2: 56:2e:02:67:91:81:15:d4:eb:9c:0c:8a:58:08:1d:5e:56:3a: b0:c8:59:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjIxMTAvBgNVBAUTKDRDMDYzMTJEM0EwQjFDNjNGNTQ3RDRENjQ1N0M0Q0Q1 QUY3MTQzQ0QwHhcNMjUwNTEzMDAwODU5WhcNMjUwNTIwMDAwODU5WjAYMRYwFAYD VQQDEw02ODIyOGQ5Yy0wOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92OtEym8aSxKstq/IV0pf4hs4oe4si8kSg7r3qOZAkfdYxXEYBhp7wUfQ8wT pItIie1tOD7SPiNrtpwEC2HcZnY1YyZ3KkrYJ2vvXbXuEZFFLBq1/HcIBhLHcsUM 5gY/ZZjKhTahNgTCfzaaioX9nVKZtZpHZM1GqQDamxcz8/+SIYRErU7JrvAkreUy d1IYabIs9+2RHQpGMLvQ/i4wDdzmnIW4FirkW3FkBez2bU0b/g2a7Ak9EEMrTAIm b7oCsmp42KngwTHtibP4JWuR24GxL1UkZ9nxsgPyKqMZo4+Crw1RXYhQnRKdMG2A 9oc3gTcnGtdobaWOFfECMROYFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6SHntS lWKnLrfKZsBEAvqY28v8MB8GA1UdIwQYMBaAFEwGMS06Cxxj9UfU1kV8TNWvcUPN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9CNTA1NDY1MjVF RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhHUDFSOVRXUlh4TTFhOXhR ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBWXhMVG9MSEdQMVI5VFdSWHhNMWE5eFE4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGMi9CNTA1NDY1MjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhH UDFSOVRXUlh4TTFhOXhRODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7r996CYm3UUvCH8FQJfza/1YwR+90/BeVWb8dl9GntoLpZcIqbywC TUcCwqccKrNJ7cauEKV9eMgIzBuamZ89ngyql1HsakckVQNfBduijj+3kR2zCGxQ KpFZBtaRpazohvAo09kqWR+tQWKT1dz1cSAhdcrdQNv9ih0fkYZjj1qz5MqfMlYO 5yFkevFUTsLWaCPi39Yk04KOvPxxckpdWWCrcsxNXxZ4/3VUh/PX7V39MaCZcrwz R+0o9amFWRK6QvnC5HKxHaGrXlb/XCP6bWz0MwU7iuxfo/ZaoyXU7+dya8sARxb7 B/JWLgJnkYEV1OucDIpYCB1eVjqwyFlP -----END CERTIFICATE-----Generated at Tue May 13 21:55:55 2025 by rpki-client