$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: vCUkc8o6TNdeQdqRu7JEkyLmzUx67cLAesnGqQmA8pk= Subject key identifier: 17:C1:1C:89:73:47:13:C0:8E:8D:EA:CB:04:7D:39:57:B4:46:09:35 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 06A3 Signing time: Thu 12 Jun 2025 21:49:58 +0000 Manifest this update: Thu 12 Jun 2025 21:49:57 +0000 Manifest next update: Thu 19 Jun 2025 21:49:57 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: EBtKfuVHZmkVKlr11Sn8k1N+Wu+TzOnM8opTCBfWq+A=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: Jun 12 21:49:57 2025 GMT Not After : Jun 19 21:49:57 2025 GMT Subject: CN=684b4b85-7ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:11:b0:00:c7:f6:ec:d8:1a:a7:9f:a1:6f: 54:5d:df:14:d5:67:26:87:74:7f:4d:a0:96:03:52: 8e:04:55:99:bd:98:3d:bf:08:22:28:21:a9:91:ee: 54:0c:dd:55:58:b9:39:ec:af:36:33:4f:88:f0:81: 76:84:39:00:d2:d1:fc:54:49:62:6e:c4:a2:5f:68: a0:c7:c0:ab:7e:1f:fc:92:38:12:5a:f1:22:57:df: c6:04:aa:8f:9b:81:eb:c8:85:c2:16:c7:74:99:02: 02:a5:06:0a:d6:92:6c:b7:18:5e:23:cf:e4:6b:20: 13:7a:68:c8:29:04:9d:30:ec:b9:b2:eb:5e:cb:9e: 7c:d4:cf:fb:4a:a5:6d:fc:d6:78:b2:d6:a4:36:90: ac:80:15:46:57:02:dc:99:14:92:90:04:67:ae:25: 67:5e:35:ec:7e:79:55:0b:bd:6e:a3:01:27:6e:4b: 7e:09:5c:6d:90:dc:dd:61:35:54:00:1e:5d:f2:07: 3c:90:f9:a4:12:93:5a:8d:80:45:25:5e:41:c6:73: d6:48:08:b0:81:3f:7b:e7:63:11:f2:75:ad:97:66: 74:3b:f0:0e:34:42:87:38:43:05:74:3c:7e:8f:c9: 70:a9:df:73:6c:0c:38:ec:0d:f5:00:20:e6:14:41: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:1C:89:73:47:13:C0:8E:8D:EA:CB:04:7D:39:57:B4:46:09:35 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:2c:79:e0:c5:99:f7:93:2b:9f:71:ff:b7:d8:ee:13:55:b4: ab:75:a3:dd:16:08:73:13:80:27:d6:0c:db:50:78:95:bc:c5: 23:44:72:8d:62:f7:70:2d:01:98:c5:fe:78:64:1b:db:a2:e1: b6:76:6c:98:33:7b:e4:fb:e5:e2:31:2a:a9:fe:dc:28:ca:38: e1:c8:76:d0:3a:f4:99:f8:e1:b4:72:ad:da:14:72:46:ba:c7: f0:42:be:bb:27:83:15:24:45:fc:8e:5e:b2:fa:d4:4d:1e:15: 06:84:d6:7a:2e:10:49:e8:e3:1a:7c:02:34:81:00:df:c3:df: 98:37:a6:eb:71:88:c9:63:40:97:aa:54:be:13:3a:61:8a:28: 37:20:bd:72:46:b5:cd:16:28:fd:5c:c9:2c:62:a9:1f:05:09: 43:0e:5c:9e:2c:ee:a0:40:6e:0e:67:a4:e9:ff:fc:15:33:06: 18:9d:52:ac:9f:21:7d:68:9b:a0:71:80:05:d2:6b:18:93:3d: ef:42:bd:41:20:f7:33:4c:73:74:2a:93:6b:69:f4:3c:ed:a0: db:f7:8e:de:eb:fd:27:3b:40:90:c5:1d:57:e9:57:3e:b6:f0: 15:06:c3:37:90:91:f0:30:56:13:57:5a:b8:60:72:5a:8a:ea: 4f:1b:59:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjUwNjEyMjE0OTU3WhcNMjUwNjE5MjE0OTU3WjAYMRYwFAYD VQQDEw02ODRiNGI4NS03ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nsRsADH9uzYGqefoW9UXd8U1Wcmh3R/TaCWA1KOBFWZvZg9vwgiKCGpke5U DN1VWLk57K82M0+I8IF2hDkA0tH8VElibsSiX2igx8Crfh/8kjgSWvEiV9/GBKqP m4HryIXCFsd0mQICpQYK1pJstxheI8/kayATemjIKQSdMOy5sutey5581M/7SqVt /NZ4stakNpCsgBVGVwLcmRSSkARnriVnXjXsfnlVC71uowEnbkt+CVxtkNzdYTVU AB5d8gc8kPmkEpNajYBFJV5BxnPWSAiwgT9752MR8nWtl2Z0O/AONEKHOEMFdDx+ j8lwqd9zbAw47A31ACDmFEEdBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfBHIlz RxPAjo3qywR9OVe0Rgk1MB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCLHngxZn3kyufcf+32O4TVbSrdaPdFghzE4An1gzbUHiVvMUjRHKN YvdwLQGYxf54ZBvbouG2dmyYM3vk++XiMSqp/twoyjjhyHbQOvSZ+OG0cq3aFHJG usfwQr67J4MVJEX8jl6y+tRNHhUGhNZ6LhBJ6OMafAI0gQDfw9+YN6brcYjJY0CX qlS+Ezphiig3IL1yRrXNFij9XMksYqkfBQlDDlyeLO6gQG4OZ6Tp//wVMwYYnVKs nyF9aJugcYAF0msYkz3vQr1BIPczTHN0KpNrafQ87aDb947e6/0nO0CQxR1X6Vc+ tvAVBsM3kJHwMFYTV1q4YHJaiupPG1nm -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:00 2025 by rpki-client