$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json) Hash identifier: H1jYK4A2p5WXpHXYINkNwO+aGb4ITqFGlb+y0nNv4d4= Subject key identifier: D1:12:70:D4:46:38:17:2D:F5:54:2D:5F:66:B4:BA:FC:89:F2:FD:25 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft Manifest number: 06F6 Signing time: Thu 24 Apr 2025 21:46:03 +0000 Manifest this update: Thu 24 Apr 2025 21:46:02 +0000 Manifest next update: Thu 01 May 2025 21:46:02 +0000 Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: vHkpW592lrPeeOjoesdfoyqLUx0/W44srQyZrBuAN1s=) 2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: COBPm0g4nlJAOhrh0hQYrpWCggmct2exc7fAFXJ645A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: Apr 24 21:46:02 2025 GMT Not After : May 1 21:46:02 2025 GMT Subject: CN=680ab11b-2bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:8d:93:0d:57:2f:dc:d9:2c:80:ed:c0:6f: f9:ff:43:3d:d8:40:9a:b9:9b:57:00:e1:fc:10:d6: fc:9f:9e:fa:de:57:9f:88:b6:e4:ca:d4:21:48:e1: 74:67:a8:d5:54:bc:9a:a2:c7:33:09:c3:2e:0c:12: 79:72:71:53:3f:9f:fa:f4:b1:ba:14:bf:10:a0:f0: 18:93:39:63:1e:df:86:bd:6e:58:72:1c:ea:23:b0: ef:97:e2:79:b6:f6:b9:05:e2:83:92:06:db:88:c9: 8b:de:2e:c0:2a:91:a7:d3:f4:37:5a:dc:e7:13:00: bd:06:11:8e:21:2e:19:8e:81:26:70:68:e6:94:b8: 0a:23:8f:9e:83:69:97:0d:3a:ec:b3:3d:45:76:cf: 89:ec:79:b4:87:84:35:61:57:22:98:97:8f:77:24: 47:da:9a:bd:e7:8b:61:7a:3a:f3:39:c4:f3:79:25: be:eb:2c:21:cc:af:9d:0b:ad:4d:04:70:91:e3:5d: f6:d9:53:10:c6:a5:9d:4f:9e:36:60:6c:96:25:26: 52:c4:84:db:38:74:dc:50:9e:c9:a4:33:af:dc:5e: 7a:40:cd:da:5f:a9:c5:94:4f:0a:ec:fc:b4:68:67: 1d:2f:2a:6c:08:83:23:51:c7:d0:e5:ae:ee:f4:59: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:70:D4:46:38:17:2D:F5:54:2D:5F:66:B4:BA:FC:89:F2:FD:25 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ab:d9:eb:d1:0a:97:ce:12:68:b6:e0:e8:5e:23:30:a0:ac: 9a:52:b8:20:4f:2b:db:f5:ea:bd:e2:97:af:c3:e2:82:6f:d3: be:88:02:a7:fc:41:9c:7a:c8:09:21:52:89:de:8a:0e:0b:9f: 61:d6:81:d7:da:fa:e5:c6:43:99:8d:a3:2f:c8:dd:db:76:25: 26:23:37:00:bf:af:90:9c:91:69:51:cc:5d:97:fa:63:ed:8c: a6:6d:02:79:7e:6a:d5:ba:ba:2d:03:e1:3e:7a:48:b3:df:07: 3e:43:c3:19:72:58:ca:7b:df:f5:04:2b:d3:aa:6d:71:7a:4f: d1:d4:74:9f:50:b5:be:bf:b8:da:be:37:27:ac:98:b7:fc:74: 0d:05:f6:6c:f6:c1:ad:b5:06:2e:d7:13:cd:4c:c5:c9:88:50: a3:e0:44:03:1f:bd:5b:eb:4d:c3:8f:49:16:be:8a:07:bc:f6: 79:c1:a7:bc:60:1e:bf:9e:81:d4:f1:c8:69:58:c8:91:26:e6: 12:23:56:3f:f8:54:c9:b8:f3:c7:3a:de:4f:2f:08:87:1b:67: cb:3f:32:10:76:f6:6b:d7:60:ba:87:bc:85:34:be:12:52:e6: 81:55:33:09:dd:cd:35:6a:77:2c:9a:a0:d8:a8:e0:66:de:b6: 4b:33:30:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjUwNDI0MjE0NjAyWhcNMjUwNTAxMjE0NjAyWjAYMRYwFAYD VQQDEw02ODBhYjExYi0yYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3daNkw1XL9zZLIDtwG/5/0M92ECauZtXAOH8ENb8n5763lefiLbkytQhSOF0 Z6jVVLyaosczCcMuDBJ5cnFTP5/69LG6FL8QoPAYkzljHt+GvW5YchzqI7Dvl+J5 tva5BeKDkgbbiMmL3i7AKpGn0/Q3WtznEwC9BhGOIS4ZjoEmcGjmlLgKI4+eg2mX DTrssz1Fds+J7Hm0h4Q1YVcimJePdyRH2pq954thejrzOcTzeSW+6ywhzK+dC61N BHCR41322VMQxqWdT542YGyWJSZSxITbOHTcUJ7JpDOv3F56QM3aX6nFlE8K7Py0 aGcdLypsCIMjUcfQ5a7u9FmAcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEScNRG OBct9VQtX2a0uvyJ8v0lMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTq9nr0QqXzhJotuDoXiMwoKyaUrggTyvb9eq94pevw+KCb9O+iAKn /EGcesgJIVKJ3ooOC59h1oHX2vrlxkOZjaMvyN3bdiUmIzcAv6+QnJFpUcxdl/pj 7YymbQJ5fmrVurotA+E+ekiz3wc+Q8MZcljKe9/1BCvTqm1xek/R1HSfULW+v7ja vjcnrJi3/HQNBfZs9sGttQYu1xPNTMXJiFCj4EQDH71b603Dj0kWvooHvPZ5wae8 YB6/noHU8chpWMiRJuYSI1Y/+FTJuPPHOt5PLwiHG2fLPzIQdvZr12C6h7yFNL4S UuaBVTMJ3c01ancsmqDYqOBm3rZLMzB5 -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:27 2025 by rpki-client