$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft File: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json) Hash identifier: aYsw8fukoutAmHr3Qz/6WFFCh3s646jwvAkfkQCCev0= Subject key identifier: C6:34:E4:BF:EC:14:EA:7C:97:87:D8:09:57:19:9A:DE:0A:81:84:32 Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft Manifest number: 01A4 Signing time: Fri 25 Apr 2025 02:46:23 +0000 Manifest this update: Fri 25 Apr 2025 02:46:22 +0000 Manifest next update: Fri 02 May 2025 02:46:22 +0000 Files and hashes: 1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: n3ObXtliU4B5VjjIa6HL0sgpGGLQ9yiS3XewA9FRhzs=) 2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: SfBIuFEDYAsg/PjbIyvrebKLGz8pJBF9jxSue0KstdM=) 3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: lCTFWO52KOr69lusfCiS3+JRVxXhg/uGiSXfH+UxNNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Validity Not Before: Apr 25 02:46:22 2025 GMT Not After : May 2 02:46:22 2025 GMT Subject: CN=680af77e-b8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:24:f0:6a:ef:b1:8e:90:59:22:3b:71:b5: 0d:55:e3:42:4a:f8:e8:0a:b3:ac:89:0f:86:e8:f0: a4:96:21:8d:8c:c3:5e:c8:0b:2b:5d:e9:de:96:45: bb:ff:02:14:62:a2:02:60:58:c4:9d:2f:09:c0:75: 09:ee:e6:55:df:16:ce:03:e0:07:fb:f7:88:df:3e: f4:ea:05:2b:91:66:c2:d5:01:11:22:00:fc:b3:f7: f6:d8:00:9c:22:3e:e0:0b:37:ac:16:cd:e8:47:52: 35:d3:30:e8:da:6b:45:38:43:0f:c0:7b:99:97:a9: 38:e6:89:c7:1d:10:1e:ac:e3:f9:b3:d8:fb:28:7c: ff:60:61:65:96:4f:b7:85:6c:3d:c6:ac:f7:df:01: 38:bf:b4:b6:9c:a1:cb:49:34:c5:8e:78:e7:e8:28: 35:41:cc:87:31:04:5d:d1:fe:36:20:df:a3:a9:a0: 3c:c3:b0:98:19:3e:11:3e:5e:97:51:b7:a1:50:e2: c7:1b:93:44:71:a8:cf:1e:0c:ec:dd:cc:d9:28:c6: 33:37:9b:0b:3c:36:02:db:7c:9a:4c:31:3a:38:cd: 07:d0:5c:a3:8a:34:b6:f8:0c:a6:f7:20:85:1f:c8: 0d:8e:6c:f7:76:3c:5b:8b:ea:3c:8c:52:6f:47:ec: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:E4:BF:EC:14:EA:7C:97:87:D8:09:57:19:9A:DE:0A:81:84:32 X509v3 Authority Key Identifier: keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4a:00:dd:95:25:7a:0d:03:eb:65:6d:f9:64:af:9a:80:0f: d6:a0:aa:29:6b:58:37:49:c7:31:7a:a7:db:46:95:a8:fa:be: b7:75:bc:eb:90:95:23:00:6f:91:25:35:c3:70:e4:71:50:9c: 11:a9:41:eb:dc:0a:f6:20:25:c6:f7:7c:bd:d8:8c:b5:ab:c4: a2:98:6d:70:02:6b:7c:68:f4:ca:54:01:40:a1:a0:5c:36:e1: dd:89:e1:d2:88:af:f5:ed:4a:2d:a8:3c:bb:78:de:10:81:df: 3f:82:8e:08:ae:9b:b0:91:bb:04:95:b1:28:3a:e9:83:05:a5: 59:6d:f0:c9:c0:ff:81:62:81:07:cd:33:c6:5b:44:3c:1c:23: 48:24:7a:c9:70:f2:7c:6b:68:f0:68:e7:25:91:83:e4:b9:b1: ef:a6:97:19:69:a4:75:d2:07:95:ca:e5:c6:3e:2e:a1:60:d9: 64:f9:63:20:9f:23:2a:14:82:de:6e:95:98:9b:ba:c2:ec:30: 54:46:a9:dd:bb:0c:a4:7e:fd:7a:cf:03:ee:67:15:46:ca:ae: ec:97:78:3a:1f:dd:07:7c:54:7c:26:20:6f:c0:08:7e:bf:87: 64:23:62:18:2e:e2:d1:2d:fa:2d:79:1b:b4:e1:75:e9:01:eb: 24:28:c6:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC ODUwNzE1QjkwHhcNMjUwNDI1MDI0NjIyWhcNMjUwNTAyMDI0NjIyWjAYMRYwFAYD VQQDEw02ODBhZjc3ZS1iOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz90k8GrvsY6QWSI7cbUNVeNCSvjoCrOsiQ+G6PCkliGNjMNeyAsrXenelkW7 /wIUYqICYFjEnS8JwHUJ7uZV3xbOA+AH+/eI3z706gUrkWbC1QERIgD8s/f22ACc Ij7gCzesFs3oR1I10zDo2mtFOEMPwHuZl6k45onHHRAerOP5s9j7KHz/YGFllk+3 hWw9xqz33wE4v7S2nKHLSTTFjnjn6Cg1QcyHMQRd0f42IN+jqaA8w7CYGT4RPl6X UbehUOLHG5NEcajPHgzs3czZKMYzN5sLPDYC23yaTDE6OM0H0FyjijS2+Aym9yCF H8gNjmz3djxbi+o8jFJvR+xw8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY05L/s FOp8l4fYCVcZmt4KgYQyMB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY0RS9ERjkwMEUzNkNFRTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6 ekNNbEMxWl9JRmE0VUhGYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXSgDdlSV6DQPrZW35ZK+agA/WoKopa1g3SccxeqfbRpWo+r63dbzr kJUjAG+RJTXDcORxUJwRqUHr3Ar2ICXG93y92Iy1q8SimG1wAmt8aPTKVAFAoaBc NuHdieHSiK/17UotqDy7eN4Qgd8/go4IrpuwkbsElbEoOumDBaVZbfDJwP+BYoEH zTPGW0Q8HCNIJHrJcPJ8a2jwaOclkYPkubHvppcZaaR10geVyuXGPi6hYNlk+WMg nyMqFILebpWYm7rC7DBURqnduwykfv16zwPuZxVGyq7sl3g6H90HfFR8JiBvwAh+ v4dkI2IYLuLRLfoteRu04XXpAeskKMbu -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:01 2025 by rpki-client