$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: uZj/JU1lmKhBPWRjnUc7eSOMn2pLxgs7n/zni9Us5/0= Subject key identifier: 31:47:A5:6C:18:2F:AE:29:E9:02:77:9C:F7:1A:1B:1F:74:74:4A:F6 Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 0250 Signing time: Sun 15 Jun 2025 01:32:25 +0000 Manifest this update: Sun 15 Jun 2025 01:32:25 +0000 Manifest next update: Sun 22 Jun 2025 01:32:25 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: EVMZujIrs343ZZw02ZXefNqcEMF4sM8W3PEKaI9sjU8=) 2: 08B1833C1DE511F08883F35AC4F9AE02.roa (hash: qt/12QruPULSLrioUdGLIDziwQVI0MwcPO5Znz57Xok=) 3: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: Jun 15 01:32:25 2025 GMT Not After : Jun 22 01:32:25 2025 GMT Subject: CN=684e22a9-ab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:df:28:dc:c2:68:43:1b:7e:d2:60:66:8c: f8:66:b8:77:96:5c:c1:13:f8:99:c6:b4:d0:cb:93: ae:8d:20:6e:01:93:50:6e:f3:0f:02:6f:56:f4:15: e7:68:4a:57:83:85:a4:f4:be:4e:16:90:46:dc:7a: 9f:04:f7:0f:a6:e7:20:25:45:2e:89:04:24:2a:cd: c0:17:5b:d2:7b:4e:29:5a:e2:31:74:78:46:b2:e0: 2e:14:cd:0f:2f:dc:5b:40:3e:2c:f1:ce:47:57:62: a7:04:9c:cf:ae:a4:11:fb:9d:06:3b:78:c4:fd:9d: 4d:e6:c5:fe:6d:67:bd:53:08:e0:ce:0b:1f:34:4e: 91:60:45:12:4f:3d:5d:f7:71:c1:e7:c2:7b:6c:62: 2e:2b:d6:5f:0c:a8:94:f4:a2:70:cd:76:23:f1:8f: a3:54:6e:a3:b9:bb:d6:3f:f6:9b:66:6f:13:6e:55: 8e:11:5e:ba:eb:93:d6:fa:26:38:fd:83:b6:93:39: fa:e9:7d:20:dc:63:dc:5e:6a:b1:61:63:52:0b:fd: 74:df:f2:93:eb:7c:f0:c9:5b:38:d1:8c:fd:61:b3: 3d:9b:c7:2c:45:62:2d:7d:b4:d6:76:24:f3:e3:63: 4a:fd:d6:bd:8e:79:91:be:68:b1:6e:74:f9:3b:ca: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:A5:6C:18:2F:AE:29:E9:02:77:9C:F7:1A:1B:1F:74:74:4A:F6 X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:28:00:83:4b:17:b1:37:9a:4c:1d:5e:5c:9d:36:52:de:93: a7:b2:fc:f6:79:82:3e:bd:78:1a:2c:16:48:de:04:84:d8:4f: 86:0b:e5:a4:56:7e:7e:5d:82:67:df:a6:9b:67:98:34:d7:d8: 11:1b:93:7a:b5:4d:09:b8:45:2b:3a:d4:ea:86:6c:0f:b8:fa: c6:cd:84:16:4b:dc:6a:22:1d:f6:dc:27:90:5c:6f:b8:1c:5d: 16:da:b3:59:65:23:6e:b3:c6:89:8d:50:ad:6d:c0:74:04:d0: e8:28:04:c8:cb:03:7c:08:ac:8d:16:8c:da:b0:3e:f9:b8:8c: 9d:14:b8:61:d5:6a:1c:3a:7a:db:65:86:c2:7e:4e:3d:dd:56: 03:69:a4:82:e8:4c:ff:45:a4:a7:da:8d:33:7c:19:0d:28:38: c3:3f:f7:3c:32:a9:0a:88:f4:38:b9:c8:e2:a5:d3:89:a8:b9: e6:ec:2a:99:02:3a:c1:44:a3:c4:ff:ce:f6:fa:bb:23:e5:23: 51:53:db:0f:45:eb:5d:c4:6f:ce:26:f5:61:81:fd:4a:50:4c: a2:94:2d:44:38:6c:01:eb:b8:12:e8:9d:75:92:8b:0a:04:e8: 44:46:6e:04:4d:b2:68:ee:fe:d6:26:d9:18:5f:af:12:38:9f: 7c:4f:25:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjUwNjE1MDEzMjI1WhcNMjUwNjIyMDEzMjI1WjAYMRYwFAYD VQQDEw02ODRlMjJhOS1hYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E/fKNzCaEMbftJgZoz4Zrh3llzBE/iZxrTQy5OujSBuAZNQbvMPAm9W9BXn aEpXg4Wk9L5OFpBG3HqfBPcPpucgJUUuiQQkKs3AF1vSe04pWuIxdHhGsuAuFM0P L9xbQD4s8c5HV2KnBJzPrqQR+50GO3jE/Z1N5sX+bWe9UwjgzgsfNE6RYEUSTz1d 93HB58J7bGIuK9ZfDKiU9KJwzXYj8Y+jVG6jubvWP/abZm8TblWOEV6665PW+iY4 /YO2kzn66X0g3GPcXmqxYWNSC/103/KT63zwyVs40Yz9YbM9m8csRWItfbTWdiTz 42NK/da9jnmRvmixbnT5O8oo6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFHpWwY L64p6QJ3nPcaGx90dEr2MB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSKACDSxexN5pMHV5cnTZS3pOnsvz2eYI+vXgaLBZI3gSE2E+GC+Wk Vn5+XYJn36abZ5g019gRG5N6tU0JuEUrOtTqhmwPuPrGzYQWS9xqIh323CeQXG+4 HF0W2rNZZSNus8aJjVCtbcB0BNDoKATIywN8CKyNFozasD75uIydFLhh1WocOnrb ZYbCfk493VYDaaSC6Ez/RaSn2o0zfBkNKDjDP/c8MqkKiPQ4ucjipdOJqLnm7CqZ AjrBRKPE/872+rsj5SNRU9sPRetdxG/OJvVhgf1KUEyilC1EOGwB67gS6J11kosK BOhERm4ETbJo7v7WJtkYX68SOJ98TyU0 -----END CERTIFICATE-----Generated at Mon Jun 16 10:33:41 2025 by rpki-client