$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: Hgt2Zn3ewKzmHp0YGPlDIfDGNKXgm+SrARPkTgwb2tU= Subject key identifier: 8E:7F:57:80:3B:F7:32:3F:27:8D:80:C2:3B:C2:5E:83:0C:96:BC:6B Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 16BB Signing time: Thu 24 Apr 2025 16:55:23 +0000 Manifest this update: Thu 24 Apr 2025 16:55:23 +0000 Manifest next update: Thu 01 May 2025 16:55:23 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: t9ItLRN9vJTb0e1pql+C8cCrNY+L2G4473T4y4Qfdzw=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=) 6: 6D8B68F2ED9A11EF9E539B3FC4F9AE02.roa (hash: mkbjnF0MlJECJTroe720hHu0AWWY+ui5tETyKzN4QXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6183 (0x1827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Apr 24 16:55:23 2025 GMT Not After : May 1 16:55:23 2025 GMT Subject: CN=680a6cfb-9067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:63:98:a3:db:2d:c9:f6:d5:a7:a6:9b:2f: 0b:2a:a5:43:74:b3:39:15:90:01:66:22:3f:1f:60: df:06:e7:8b:47:27:20:55:e8:44:e2:06:4e:1a:f9: 51:7d:0c:0a:52:3b:d4:0a:f5:9f:cb:72:3c:87:35: 22:12:80:21:d4:cd:30:81:1d:41:0a:e6:21:99:f3: 85:f6:e2:0f:0e:a9:df:34:0f:2d:f7:63:14:f5:2b: 83:2a:d7:60:29:26:7a:26:b0:b7:c1:9c:1b:7d:7e: fd:20:5b:07:47:9f:3f:21:f6:07:cb:fe:ce:9b:47: 3a:6c:19:d8:15:ef:3f:34:7d:45:6b:07:a0:e4:e7: 65:59:49:34:f1:e7:39:dd:be:8c:39:c2:6b:14:ff: 42:30:74:14:b7:64:5d:3a:76:ea:5f:8d:45:d0:b4: 7a:e0:08:62:04:87:12:6f:49:6a:63:4e:f9:4a:49: 60:d2:8d:57:dd:9b:2b:89:b2:6f:d7:1b:e0:b9:9e: 73:19:8f:78:c6:cc:f2:f9:fa:5e:6d:de:9f:49:30: e1:f0:6a:44:c6:f9:d5:44:95:bc:b1:6a:34:7e:65: 41:59:62:3a:14:5b:f8:e9:c1:21:e8:c0:3f:57:4c: c6:36:5b:f4:2e:94:bc:27:d7:78:5c:93:3d:fe:7e: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7F:57:80:3B:F7:32:3F:27:8D:80:C2:3B:C2:5E:83:0C:96:BC:6B X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e1:59:0a:c3:11:ac:24:ac:01:75:a6:db:8b:09:93:b2:fd: 3f:60:dc:e9:16:d0:85:e4:0b:69:ae:ba:56:0f:03:56:78:8b: 68:a9:39:61:c5:4b:d4:9d:f9:a3:a8:c4:46:fd:d9:f0:10:f8: 3e:ca:5e:a1:9b:70:7f:50:15:1b:d5:89:31:f1:70:73:43:f9: 50:e0:5c:a7:42:6c:29:7f:f5:90:32:a5:b2:10:45:15:d9:51: b1:82:b5:54:e2:0b:1c:5f:1d:79:1f:5f:e8:82:bd:5b:4a:33: 74:df:31:24:4d:5b:9b:91:1d:23:1b:f9:e3:f6:8b:e5:58:4e: 3c:85:59:6c:7e:fb:8f:4d:2d:14:59:56:e0:70:8d:bc:90:06: 1a:85:f8:43:76:34:d4:dc:84:9c:4e:1a:91:9b:6e:e7:6a:93: 82:fa:1f:bd:02:b0:95:a9:04:f0:fd:23:13:e1:31:d3:e1:ea: c0:54:d5:ba:f3:6b:9f:42:64:2d:1d:5d:70:f7:f6:5e:b4:1d: d3:f7:b6:73:ee:72:48:ad:48:15:79:77:79:ac:fe:9c:d6:c8: 0e:eb:33:b3:80:25:e1:fd:4f:96:47:06:e2:3d:18:33:c6:6e: 3b:be:ce:0d:2d:dd:d2:04:ea:4c:c8:23:b6:0c:85:bd:f6:3e: b0:ed:4d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUwNDI0MTY1NTIzWhcNMjUwNTAxMTY1NTIzWjAYMRYwFAYD VQQDEw02ODBhNmNmYi05MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc9jmKPbLcn21aemmy8LKqVDdLM5FZABZiI/H2DfBueLRycgVehE4gZOGvlR fQwKUjvUCvWfy3I8hzUiEoAh1M0wgR1BCuYhmfOF9uIPDqnfNA8t92MU9SuDKtdg KSZ6JrC3wZwbfX79IFsHR58/IfYHy/7Om0c6bBnYFe8/NH1Faweg5OdlWUk08ec5 3b6MOcJrFP9CMHQUt2RdOnbqX41F0LR64AhiBIcSb0lqY075Sklg0o1X3ZsribJv 1xvguZ5zGY94xszy+fpebd6fSTDh8GpExvnVRJW8sWo0fmVBWWI6FFv46cEh6MA/ V0zGNlv0LpS8J9d4XJM9/n52vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5/V4A7 9zI/J42AwjvCXoMMlrxrMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU4VkKwxGsJKwBdabbiwmTsv0/YNzpFtCF5AtprrpWDwNWeItoqTlh xUvUnfmjqMRG/dnwEPg+yl6hm3B/UBUb1Ykx8XBzQ/lQ4FynQmwpf/WQMqWyEEUV 2VGxgrVU4gscXx15H1/ogr1bSjN03zEkTVubkR0jG/nj9ovlWE48hVlsfvuPTS0U WVbgcI28kAYahfhDdjTU3IScThqRm27napOC+h+9ArCVqQTw/SMT4THT4erAVNW6 82ufQmQtHV1w9/ZetB3T97Zz7nJIrUgVeXd5rP6c1sgO6zOzgCXh/U+WRwbiPRgz xm47vs4NLd3SBOpMyCO2DIW99j6w7U0U -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:59 2025 by rpki-client