$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft File: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json) Hash identifier: /sx3Ei4XNdsCAgN/FK8mg0zKXxzXqFrnzSP2jQ6Im5I= Subject key identifier: 83:B0:E0:D9:06:17:85:3B:A1:76:9E:0D:1D:CB:FC:F4:E5:D1:F8:59 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 1098 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft Manifest number: 108F Signing time: Thu 24 Apr 2025 17:20:00 +0000 Manifest this update: Thu 24 Apr 2025 17:20:00 +0000 Manifest next update: Thu 01 May 2025 17:20:00 +0000 Files and hashes: 1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: CZSn5Xq03KnarjvLkimekKeoGGgdjpGN81UW2mPtifE=) 2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4248 (0x1098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Apr 24 17:20:00 2025 GMT Not After : May 1 17:20:00 2025 GMT Subject: CN=680a72c0-64b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:bb:74:03:ca:19:4e:00:4f:29:e2:40:21: bc:66:c8:e9:74:ba:9d:2f:0f:84:16:cc:35:f6:aa: c7:ad:4c:22:73:49:6d:8c:34:42:85:18:38:f1:e8: ce:07:14:61:1a:ce:04:a1:39:76:42:01:82:c7:e8: 4d:79:2d:7a:09:9b:5b:e6:da:4a:74:43:cd:ab:76: e6:90:e2:0e:b6:1a:04:7e:26:a4:b4:80:01:ca:87: f5:cb:76:f3:3b:b9:73:33:9f:20:41:2d:f3:08:26: df:f9:5f:85:5f:ef:8c:3d:91:9b:37:6a:26:41:70: 7d:c1:83:75:b9:06:d4:74:ec:5c:ab:27:f5:fc:ac: 47:c9:4d:9e:5f:c7:c2:37:22:cc:54:5c:d5:70:74: b7:36:6c:ca:16:23:7f:9a:f4:07:9e:21:57:f8:f4: fc:85:d2:27:25:c0:69:4c:fd:04:3e:3e:3a:28:8e: a0:64:c4:ac:dd:b0:27:38:6a:6a:00:86:97:29:ec: e2:b1:24:fa:c6:6b:bf:3e:b2:1c:48:76:10:96:e7: b0:39:f4:d0:d3:61:a4:b2:4a:7e:22:9e:78:c1:91: 2a:85:6c:a5:c0:54:93:f2:9c:f9:4e:08:ca:d1:37: a2:41:0e:be:bc:dd:d1:8d:66:c0:cc:a8:76:5d:e0: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B0:E0:D9:06:17:85:3B:A1:76:9E:0D:1D:CB:FC:F4:E5:D1:F8:59 X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6f:c5:44:c7:2c:0e:a2:56:db:c9:c6:08:c5:42:56:d3:ac: 4b:d5:76:98:28:de:f9:4f:d8:8e:de:91:cc:9a:de:d9:31:c5: b9:6e:b8:16:45:a4:60:5e:de:14:cd:ef:14:18:80:69:a9:5d: 7e:9d:3c:2e:1e:7a:fe:fd:27:37:d0:14:c6:e8:07:e6:81:f9: cd:a5:a7:55:50:a1:61:07:5c:4a:d2:7c:2a:27:c6:b6:e8:4c: 93:ce:3d:89:c9:31:0b:83:c4:03:08:39:3f:90:78:03:62:17: d3:4d:f7:5e:8d:56:f0:e4:59:72:69:48:5e:78:d7:6d:84:91: f1:44:e9:c7:f7:20:58:fc:5a:1c:4b:c7:ee:f3:a4:53:97:62: 9b:f9:a7:3c:77:9d:3e:0a:0f:e2:8c:57:be:2d:f5:da:5a:62: eb:90:99:e6:6c:0c:4c:6a:e4:53:83:b9:1d:ac:56:61:ef:77: ad:c9:53:10:ee:4a:38:5a:5e:d9:1d:44:be:a3:04:da:9d:10: 6b:13:c3:a3:54:b7:db:5e:f7:93:93:94:15:4c:24:ea:1f:9d: 69:26:e2:b2:4c:ba:a6:6b:76:3a:9f:91:c4:eb:33:b8:e7:84: 90:6e:04:ac:49:ae:37:de:0b:68:8a:88:0e:76:a3:ac:63:0a: 38:c7:2f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjUwNDI0MTcyMDAwWhcNMjUwNTAxMTcyMDAwWjAYMRYwFAYD VQQDEw02ODBhNzJjMC02NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpe7dAPKGU4ATyniQCG8ZsjpdLqdLw+EFsw19qrHrUwic0ltjDRChRg48ejO BxRhGs4EoTl2QgGCx+hNeS16CZtb5tpKdEPNq3bmkOIOthoEfiaktIAByof1y3bz O7lzM58gQS3zCCbf+V+FX++MPZGbN2omQXB9wYN1uQbUdOxcqyf1/KxHyU2eX8fC NyLMVFzVcHS3NmzKFiN/mvQHniFX+PT8hdInJcBpTP0EPj46KI6gZMSs3bAnOGpq AIaXKezisST6xmu/PrIcSHYQluewOfTQ02Gkskp+Ip54wZEqhWylwFST8pz5TgjK 0TeiQQ6+vN3RjWbAzKh2XeChYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOw4NkG F4U7oXaeDR3L/PTl0fhZMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/b8VExywOolbbycYIxUJW06xL1XaYKN75T9iO3pHMmt7ZMcW5brgW RaRgXt4Uze8UGIBpqV1+nTwuHnr+/Sc30BTG6AfmgfnNpadVUKFhB1xK0nwqJ8a2 6EyTzj2JyTELg8QDCDk/kHgDYhfTTfdejVbw5FlyaUheeNdthJHxROnH9yBY/Foc S8fu86RTl2Kb+ac8d50+Cg/ijFe+LfXaWmLrkJnmbAxMauRTg7kdrFZh73etyVMQ 7ko4Wl7ZHUS+owTanRBrE8OjVLfbXveTk5QVTCTqH51pJuKyTLqma3Y6n5HE6zO4 54SQbgSsSa433gtoiogOdqOsYwo4xy/f -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:43 2025 by rpki-client