$ rpki-client -vvf rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft File: TTExNNGjpXdD2_A2ocHu_FlQPbw.mft (raw, json) Hash identifier: KN0nEkKrVkZWK6wtRLOP9z5OWRimD372E7+4UCsCYmI= Subject key identifier: E9:B0:7D:AE:78:05:0E:DF:D2:01:F7:09:AE:84:3E:82:D2:B4:05:9A Authority key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC Certificate issuer: /CN=A91516DE/serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft Manifest number: 1F Signing time: Sun 15 Jun 2025 06:57:07 +0000 Manifest this update: Sun 15 Jun 2025 06:57:07 +0000 Manifest next update: Sun 22 Jun 2025 06:57:07 +0000 Files and hashes: 1: TTExNNGjpXdD2_A2ocHu_FlQPbw.crl (hash: eWankjbxTIJn4lcgxDK5kkcDsgfThkjxOfCynkbx1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Validity Not Before: Jun 15 06:57:07 2025 GMT Not After : Jun 22 06:57:07 2025 GMT Subject: CN=684e6ec3-53ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:2e:56:e0:3f:f6:3c:13:6d:0b:62:f2:24: 7c:d8:35:01:ff:b7:8d:c7:26:7e:50:d2:4a:fc:b7: 7f:12:2c:85:8a:06:40:bc:f2:d6:e9:69:b6:5d:40: b1:07:1f:7c:10:b5:69:e6:b0:88:20:8a:94:33:24: 25:33:1b:06:f3:50:ba:c5:0b:d0:aa:36:d6:e9:0c: 15:e7:19:24:99:56:5a:2b:94:82:62:af:7c:8a:db: d6:dc:9e:f7:74:42:b9:1a:3a:5d:60:72:fb:58:dd: ac:39:df:11:6c:69:b3:9f:10:d4:3c:59:4c:db:be: 88:79:9b:a8:d5:86:86:43:d6:4e:96:1b:8d:bc:29: 2b:e3:f8:cb:f3:92:87:9a:66:26:5b:65:1e:5b:c1: 30:bb:62:2b:dd:bf:26:53:ba:70:37:98:ef:5c:11: e3:e8:c8:b6:87:45:33:fb:07:9c:37:49:52:5a:bb: e9:cb:3f:21:bc:e5:a8:6b:4f:21:4e:1e:11:16:9f: 45:12:49:5f:e7:95:f0:f0:b5:6a:85:fb:fc:af:36: 69:e0:b8:1a:de:6a:e1:5a:0a:97:79:60:8e:0c:2d: c9:ec:7f:be:20:7c:cf:4c:d4:b2:e5:42:a3:0b:53: 82:19:4e:f4:80:bb:ad:03:cf:5a:da:ad:64:f9:74: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:7D:AE:78:05:0E:DF:D2:01:F7:09:AE:84:3E:82:D2:B4:05:9A X509v3 Authority Key Identifier: keyid:4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:6c:ee:7a:6f:bc:a8:fc:68:76:46:2e:e6:e0:9b:10:c3: b6:5b:c6:64:42:f1:ee:c6:49:fa:ce:26:70:8b:25:f4:71:e7: 66:a6:7f:d5:d9:e0:e0:fb:fa:80:a7:9f:5f:9a:15:66:25:45: 4f:de:5b:c1:3d:97:b9:b5:d9:fa:1d:8f:41:19:d8:0c:5d:47: e3:5a:e9:8e:98:b0:d4:3a:82:71:1f:10:f6:d5:de:1e:4e:28: 18:bf:4d:85:25:e3:5a:d0:02:d5:86:2d:61:90:06:67:7a:ab: ec:82:f4:fd:bc:bf:67:5b:6b:cb:eb:94:a3:0c:ec:3f:d0:44: ef:f4:4f:94:da:ff:da:39:34:5d:8a:1d:1c:ba:60:74:3d:88: 82:06:82:6b:2c:bd:5f:73:c2:57:4e:0c:74:03:56:20:5a:82: 0f:28:23:d8:6a:7f:86:5c:a2:42:fa:39:22:80:25:32:70:20: cc:c8:96:16:f1:71:ee:1f:bd:34:85:47:0f:3a:7f:8b:38:55: 73:48:fe:84:0f:2c:77:b9:db:7c:4a:86:96:26:df:eb:2e:9a: 1d:74:fd:e9:92:fa:49:bf:bc:b0:d4:62:49:15:1e:3f:bf:db: 29:d6:18:aa:7a:f3:a3:1f:5d:c7:05:22:50:d7:42:e5:43:9c: 98:db:47:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZERTExMC8GA1UEBRMoNEQzMTMxMzREMUEzQTU3NzQzREJGMDM2QTFDMUVFRkM1 OTUwM0RCQzAeFw0yNTA2MTUwNjU3MDdaFw0yNTA2MjIwNjU3MDdaMBgxFjAUBgNV BAMTDTY4NGU2ZWMzLTUzZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDety5W4D/2PBNtC2LyJHzYNQH/t43HJn5Q0kr8t38SLIWKBkC88tbpabZdQLEH H3wQtWnmsIggipQzJCUzGwbzULrFC9CqNtbpDBXnGSSZVlorlIJir3yK29bcnvd0 QrkaOl1gcvtY3aw53xFsabOfENQ8WUzbvoh5m6jVhoZD1k6WG428KSvj+Mvzkoea ZiZbZR5bwTC7YivdvyZTunA3mO9cEePoyLaHRTP7B5w3SVJau+nLPyG85ahrTyFO HhEWn0USSV/nlfDwtWqF+/yvNmnguBreauFaCpd5YI4MLcnsf74gfM9M1LLlQqML U4IZTvSAu60Dz1rarWT5dCKzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6bB9rngF Dt/SAfcJroQ+gtK0BZowHwYDVR0jBBgwFoAUTTExNNGjpXdD2/A2ocHu/FlQPbww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkRFLzM3OURCMDcwMUE4 QTExRjBBRjBGMzM3Q0M0RjlBRTAyL1RURXhOTkdqcFhkRDJfQTJvY0h1X0ZsUVBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFRFeE5OR2pwWGREMl9BMm9jSHVfRmxRUGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkRFLzM3OURCMDcwMUE4QTExRjBBRjBGMzM3Q0M0RjlBRTAyL1RURXhOTkdqcFhk RDJfQTJvY0h1X0ZsUVBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEhubO56b7yo/Gh2Ri7m4JsQw7ZbxmRC8e7GSfrOJnCLJfRx52amf9XZ 4OD7+oCnn1+aFWYlRU/eW8E9l7m12fodj0EZ2AxdR+Na6Y6YsNQ6gnEfEPbV3h5O KBi/TYUl41rQAtWGLWGQBmd6q+yC9P28v2dba8vrlKMM7D/QRO/0T5Ta/9o5NF2K HRy6YHQ9iIIGgmssvV9zwldODHQDViBagg8oI9hqf4ZcokL6OSKAJTJwIMzIlhbx ce4fvTSFRw86f4s4VXNI/oQPLHe523xKhpYm3+sumh10/emS+km/vLDUYkkVHj+/ 2ynWGKp686MfXccFIlDXQuVDnJjbR2A= -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:27 2025 by rpki-client