$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json) Hash identifier: nfuoqUj9XulL7n7vbMwdgZIKQueJyeUUzueLddW0/PQ= Subject key identifier: C0:25:D9:A9:4F:41:A8:F9:0A:4D:DB:5B:17:2B:0B:60:F6:78:F9:60 Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft Manifest number: 36 Signing time: Fri 25 Apr 2025 06:35:26 +0000 Manifest this update: Fri 25 Apr 2025 06:35:25 +0000 Manifest next update: Fri 02 May 2025 06:35:25 +0000 Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: UJoWhaHQ8OyWhuNbjM+yt2NbuFa/+sJAuQj0kp2YYFo=) 2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Validity Not Before: Apr 25 06:35:25 2025 GMT Not After : May 2 06:35:25 2025 GMT Subject: CN=680b2d2d-8881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:98:d4:ee:fa:6c:a3:61:82:aa:21:71:91: e4:91:0b:86:01:e9:f4:6c:7b:36:fc:73:ff:8a:1c: 32:e2:c6:dc:83:5f:54:10:6a:6f:42:72:3b:7e:7b: b8:0a:87:c6:26:d9:3e:4c:3f:3e:75:7c:9c:61:af: 2e:8c:88:9b:67:ce:1f:47:90:46:b6:f4:5d:02:d5: a0:9e:13:31:f0:a7:bf:f6:c7:81:32:3f:ef:9c:1a: 84:ba:77:5a:f1:96:dd:80:c5:dd:d2:f5:d2:29:a0: 58:ab:b0:74:3d:d4:04:31:35:85:65:26:a5:45:eb: d2:21:6b:a7:37:27:78:1c:b7:d0:ed:9d:d6:19:68: 02:68:93:e3:37:a1:a4:33:4b:9e:50:91:08:97:ce: 1c:5d:42:e6:aa:4d:1c:e1:ba:98:2e:3f:2b:dc:47: 96:f0:11:14:1d:95:0f:ae:9a:6b:cd:c9:d8:59:d8: 00:e7:a5:d5:14:37:88:29:79:97:a8:34:f9:44:5f: 24:03:ad:f3:80:b0:24:4b:52:0e:7f:6f:9d:86:6d: e2:b5:53:8e:1a:fe:5d:05:a8:c0:e8:84:3f:d3:cf: 80:a4:20:56:b6:ff:45:42:5d:a0:90:df:cc:09:86: 32:5c:7f:33:5d:a2:2e:73:73:c0:55:28:a6:ae:6c: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:D9:A9:4F:41:A8:F9:0A:4D:DB:5B:17:2B:0B:60:F6:78:F9:60 X509v3 Authority Key Identifier: keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:0f:e4:5d:ee:2b:93:6d:01:b3:ee:ed:ea:ab:f8:ae:6f:b5: e2:24:6c:9b:c3:90:c6:71:37:e2:f7:8e:55:77:98:a5:48:c2: 9d:1e:ef:f9:6c:f8:a1:dd:b9:46:96:be:4c:c2:bd:a5:fc:8a: e3:9a:7a:21:0e:a9:c1:1d:36:2b:ed:ce:83:a4:0f:7c:7b:c4: 7c:f1:be:1b:d9:2d:70:a4:1d:2d:6e:7d:3b:41:21:2b:97:68: c5:2d:10:db:c4:47:f6:00:13:b3:f8:d2:de:3f:36:50:b8:6e: 1a:2a:6f:0d:cf:c4:69:62:54:a4:51:e9:6b:06:71:38:bf:fb: 76:64:36:ed:f9:9d:a3:c7:e0:02:91:23:bc:a9:b9:30:08:c4: 13:6b:31:89:be:4e:0a:19:0c:16:ab:d5:c2:a7:e7:fa:d1:c9: a7:d4:d4:dc:bd:5d:11:bd:8f:b1:0e:92:90:41:20:b2:b6:f1: da:95:61:e5:64:fe:4f:99:e1:c0:3e:a7:c3:4d:87:c3:68:49: 80:3c:51:cc:bd:3f:55:d8:3b:68:48:01:5d:76:9e:d1:47:93: 6c:85:7a:9b:47:c8:be:5f:7b:4e:22:0f:49:84:41:0b:45:78: f0:46:d7:7e:78:71:8b:ec:20:40:73:18:7b:35:11:c0:b3:81: 95:60:e4:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTY2MDExMC8GA1UEBRMoNENCMEI5NUI0QkRDMjMzMTRGMjgzRUY3MzlBOTZBN0M2 NThDMEE2QzAeFw0yNTA0MjUwNjM1MjVaFw0yNTA1MDIwNjM1MjVaMBgxFjAUBgNV BAMTDTY4MGIyZDJkLTg4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtiJjU7vpso2GCqiFxkeSRC4YB6fRsezb8c/+KHDLixtyDX1QQam9Ccjt+e7gK h8Ym2T5MPz51fJxhry6MiJtnzh9HkEa29F0C1aCeEzHwp7/2x4EyP++cGoS6d1rx lt2Axd3S9dIpoFirsHQ91AQxNYVlJqVF69Iha6c3J3gct9DtndYZaAJok+M3oaQz S55QkQiXzhxdQuaqTRzhupguPyvcR5bwERQdlQ+ummvNydhZ2ADnpdUUN4gpeZeo NPlEXyQDrfOAsCRLUg5/b52GbeK1U44a/l0FqMDohD/Tz4CkIFa2/0VCXaCQ38wJ hjJcfzNdoi5zc8BVKKaubL6vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwCXZqU9B qPkKTdtbFysLYPZ4+WAwHwYDVR0jBBgwFoAUTLC5W0vcIzFPKD73OalqfGWMCmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjYwLzAxQzUyQTMwRDI0 MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpGUEtENzNPYWxxZkdXTUNt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExDNVcwdmNJekZQS0Q3M09hbHFmR1dNQ213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjYwLzAxQzUyQTMwRDI0MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpG UEtENzNPYWxxZkdXTUNtdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQP5F3uK5NtAbPu7eqr+K5vteIkbJvDkMZxN+L3jlV3mKVIwp0e7/ls +KHduUaWvkzCvaX8iuOaeiEOqcEdNivtzoOkD3x7xHzxvhvZLXCkHS1ufTtBISuX aMUtENvER/YAE7P40t4/NlC4bhoqbw3PxGliVKRR6WsGcTi/+3ZkNu35naPH4AKR I7ypuTAIxBNrMYm+TgoZDBar1cKn5/rRyafU1Ny9XRG9j7EOkpBBILK28dqVYeVk /k+Z4cA+p8NNh8NoSYA8Ucy9P1XYO2hIAV12ntFHk2yFeptHyL5fe04iD0mEQQtF ePBG1354cYvsIEBzGHs1EcCzgZVg5No= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:30 2025 by rpki-client