$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json) Hash identifier: +eb5CT/8GEEJpPuK/s3wcHHf7dwvQUHY18s15Y2OlWU= Subject key identifier: C5:D8:B9:5E:B8:F6:BC:5C:72:9B:03:90:F0:86:E9:BE:17:E2:A5:0B Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft Manifest number: 50 Signing time: Tue 17 Jun 2025 06:10:12 +0000 Manifest this update: Tue 17 Jun 2025 06:10:11 +0000 Manifest next update: Tue 24 Jun 2025 06:10:11 +0000 Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: fDTDQ879x+gV4JsBPGYubSfsNVVG+iYDrlT3WxDNdAI=) 2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C Validity Not Before: Jun 17 06:10:11 2025 GMT Not After : Jun 24 06:10:11 2025 GMT Subject: CN=685106c4-e395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:ad:5f:3b:e9:d8:5c:9c:bc:a5:00:c7:c4: 36:27:02:58:4f:c8:dd:bd:cc:78:04:ef:88:49:be: a3:fe:be:20:2e:5a:9c:7c:3d:6d:ae:26:b2:62:4c: 15:f9:52:34:1d:45:e4:5c:dc:80:eb:37:70:5c:3b: 8c:47:23:50:f2:ad:6e:eb:d1:fe:4c:37:a3:ea:42: 0c:17:2d:f6:90:a2:95:92:b0:33:d7:a9:cb:5b:45: ee:23:84:9e:4d:86:22:bd:dd:2e:0f:ee:ce:0c:3c: 18:de:fd:6a:97:5a:f1:7b:02:34:b2:21:b6:2e:2c: bd:27:8b:76:86:cd:36:6e:51:a0:51:a3:01:48:89: e7:1d:30:59:0a:ff:71:e2:bb:01:af:9b:04:10:f4: 4d:e9:ee:26:3e:b3:e5:d3:d0:03:61:49:d3:09:14: bb:d0:ee:9a:fe:05:f0:c1:8e:52:ed:84:e6:d8:f0: e2:25:9b:3c:ac:18:db:b4:7b:3d:41:7d:1b:c4:0a: 9f:ce:ff:7b:da:17:bd:25:f4:94:b6:75:fc:67:85: 7e:de:cb:06:2a:2a:41:f0:6b:8e:ed:d0:88:a9:5f: a5:c0:b7:98:83:05:fb:c8:f2:06:59:69:c1:fb:41: 67:b4:8b:bc:e1:3e:0f:24:2f:6c:c1:f9:b2:49:59: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:B9:5E:B8:F6:BC:5C:72:9B:03:90:F0:86:E9:BE:17:E2:A5:0B X509v3 Authority Key Identifier: keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d4:19:56:c5:89:a9:5d:85:71:fd:01:13:85:0d:d8:c6:b9: db:62:86:47:cb:bc:ea:79:17:97:e7:c7:12:1e:9b:8a:20:05: 48:f9:87:0c:11:5f:1b:50:da:fb:51:1e:57:a3:61:64:b7:02: df:99:84:f9:e3:35:18:37:07:40:dd:af:2b:20:5b:62:97:10: de:fe:17:56:33:36:63:fb:15:6c:0a:d5:ca:23:5b:44:11:02: 9b:b3:1d:aa:f1:d0:88:35:c4:84:7b:35:c2:65:c2:16:5d:60: 2e:d2:81:94:86:88:c2:b1:24:91:fb:66:2c:4f:01:b7:f5:9b: 45:22:bf:3b:e3:69:d3:1e:16:2f:62:93:6e:f1:74:d9:28:68: 18:e3:61:7a:06:2a:0d:67:8f:94:2b:e2:bb:27:c2:b0:e8:df: a8:99:26:2e:0b:6a:33:c3:4f:04:bb:e3:45:b3:b4:e9:8a:d7: 32:e7:3c:e9:ca:3d:8c:99:bf:b7:7a:c6:ff:2c:1c:3a:91:59: 27:30:35:ed:de:e6:b3:25:a5:b1:7a:33:7b:92:84:02:5b:80: 5d:60:d4:b4:02:a4:2c:74:48:b4:62:30:1c:81:ea:0a:59:49: c7:c1:0a:35:9e:9a:65:6d:33:36:8f:93:e5:82:73:a7:6d:69: 2a:63:9c:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTY2MDExMC8GA1UEBRMoNENCMEI5NUI0QkRDMjMzMTRGMjgzRUY3MzlBOTZBN0M2 NThDMEE2QzAeFw0yNTA2MTcwNjEwMTFaFw0yNTA2MjQwNjEwMTFaMBgxFjAUBgNV BAMTDTY4NTEwNmM0LWUzOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVhq1fO+nYXJy8pQDHxDYnAlhPyN29zHgE74hJvqP+viAuWpx8PW2uJrJiTBX5 UjQdReRc3IDrN3BcO4xHI1DyrW7r0f5MN6PqQgwXLfaQopWSsDPXqctbRe4jhJ5N hiK93S4P7s4MPBje/WqXWvF7AjSyIbYuLL0ni3aGzTZuUaBRowFIiecdMFkK/3Hi uwGvmwQQ9E3p7iY+s+XT0ANhSdMJFLvQ7pr+BfDBjlLthObY8OIlmzysGNu0ez1B fRvECp/O/3vaF70l9JS2dfxnhX7eywYqKkHwa47t0IipX6XAt5iDBfvI8gZZacH7 QWe0i7zhPg8kL2zB+bJJWciRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxdi5Xrj2 vFxymwOQ8IbpvhfipQswHwYDVR0jBBgwFoAUTLC5W0vcIzFPKD73OalqfGWMCmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjYwLzAxQzUyQTMwRDI0 MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpGUEtENzNPYWxxZkdXTUNt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExDNVcwdmNJekZQS0Q3M09hbHFmR1dNQ213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjYwLzAxQzUyQTMwRDI0MzExRUY4OEM1QkMxMUM0RjlBRTAyL1RMQzVXMHZjSXpG UEtENzNPYWxxZkdXTUNtdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvUGVbFialdhXH9AROFDdjGudtihkfLvOp5F5fnxxIem4ogBUj5hwwR XxtQ2vtRHlejYWS3At+ZhPnjNRg3B0DdrysgW2KXEN7+F1YzNmP7FWwK1cojW0QR ApuzHarx0Ig1xIR7NcJlwhZdYC7SgZSGiMKxJJH7ZixPAbf1m0UivzvjadMeFi9i k27xdNkoaBjjYXoGKg1nj5Qr4rsnwrDo36iZJi4LajPDTwS740WztOmK1zLnPOnK PYyZv7d6xv8sHDqRWScwNe3e5rMlpbF6M3uShAJbgF1g1LQCpCx0SLRiMByB6gpZ ScfBCjWemmVtMzaPk+WCc6dtaSpjnH0= -----END CERTIFICATE-----Generated at Wed Jun 18 16:04:56 2025 by rpki-client