$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: dfBFhMtzc7bE76YTVjDRGIUluEpH1hJtoYkWkb+hwMM= Subject key identifier: ED:79:19:01:A6:43:D5:1E:8C:6D:68:F9:6A:B6:81:98:DF:9D:45:9B Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 01B7 Signing time: Fri 25 Apr 2025 02:17:39 +0000 Manifest this update: Fri 25 Apr 2025 02:17:38 +0000 Manifest next update: Fri 02 May 2025 02:17:38 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: mMQQa0OMyhF9FpJreBm0/kZHWUZamS6mFCRyWOH58rw=) 2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=) 3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Apr 25 02:17:38 2025 GMT Not After : May 2 02:17:38 2025 GMT Subject: CN=680af0c2-bcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3e:c4:27:70:f8:6a:24:06:89:50:61:f1:f4: 68:15:b2:70:72:c6:e0:37:b9:e6:5d:89:71:09:c3: dc:45:51:c8:98:d4:68:09:7e:e3:d7:7d:3a:cc:8b: f9:94:a4:78:1f:a0:25:49:54:ae:a0:5f:e6:ce:b1: a4:79:49:96:9c:74:13:74:2e:c9:86:b4:b9:f0:44: 97:66:d8:1d:93:3b:83:19:6d:95:88:81:01:4c:c8: 87:36:28:dd:fb:80:ae:f6:e3:9f:f5:35:bd:47:4d: d4:0f:3f:df:b2:48:31:82:5a:dc:67:95:e3:5e:2b: 93:b2:4d:0c:47:bd:21:5e:b8:da:ca:cf:7c:3f:e0: 95:ee:0b:d4:f7:51:a3:83:f8:4d:48:cc:51:0e:5f: 31:db:33:22:08:c3:f2:b4:27:1d:c5:eb:01:e9:c5: 8d:7f:51:65:21:6f:7c:0a:2a:e8:8e:e9:90:28:f6: 4c:83:de:31:3f:3a:e6:eb:e5:c5:e0:a4:03:0f:4b: 2d:26:6a:e3:27:d9:e8:75:ce:65:69:1f:62:00:72: 80:ca:59:74:ab:73:62:ff:8a:c7:b6:fe:62:9b:c5: b8:7d:2b:e9:13:52:95:49:f6:d9:a7:27:f6:7d:2f: 3a:2e:a5:f0:a0:e5:31:52:68:57:c0:d3:46:e0:c6: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:79:19:01:A6:43:D5:1E:8C:6D:68:F9:6A:B6:81:98:DF:9D:45:9B X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:79:27:19:fb:f1:dd:7f:99:27:5b:78:47:ee:01:20:e5:9b: be:52:89:ea:9a:4c:b2:a1:83:db:fd:1a:86:b7:1d:fd:ba:eb: f4:d1:61:0c:76:3f:16:5d:01:e6:ca:d4:47:cb:31:3b:37:32: ca:25:50:fd:da:8e:72:97:69:69:3c:6a:d1:16:1e:07:ef:bb: 6c:5b:b7:c1:27:5e:ed:bb:1d:ec:1e:63:87:44:a1:cf:43:49: 86:11:ab:60:d1:ae:fc:2d:89:42:7b:1b:9b:b5:1e:c3:1c:22: f3:b3:20:cc:2b:2e:e3:cc:80:8a:39:a1:b7:02:40:a0:9a:86: f1:3b:f3:49:fe:24:16:c4:1c:20:b6:80:21:fc:7e:71:9b:d6: 28:ff:1a:bd:bb:08:a9:d1:9c:2d:a2:66:22:9f:e2:e5:04:c6: 5f:73:ed:13:52:f7:9e:10:ba:18:13:51:70:65:94:4d:d8:8a: 23:a2:46:73:2f:36:c0:71:99:cf:db:17:a3:1b:9b:a3:8d:83: 71:2a:b3:46:49:5f:0c:a9:18:ba:97:3d:82:47:9b:b2:94:87: 00:b5:97:18:e1:62:47:5f:49:cc:0b:f4:c0:9d:da:f9:05:1b: 84:ad:0e:96:bd:5a:ee:2c:83:bf:7c:61:9b:c2:94:6f:34:27: c9:22:4f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjUwNDI1MDIxNzM4WhcNMjUwNTAyMDIxNzM4WjAYMRYwFAYD VQQDEw02ODBhZjBjMi1iY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+z7EJ3D4aiQGiVBh8fRoFbJwcsbgN7nmXYlxCcPcRVHImNRoCX7j1306zIv5 lKR4H6AlSVSuoF/mzrGkeUmWnHQTdC7JhrS58ESXZtgdkzuDGW2ViIEBTMiHNijd +4Cu9uOf9TW9R03UDz/fskgxglrcZ5XjXiuTsk0MR70hXrjays98P+CV7gvU91Gj g/hNSMxRDl8x2zMiCMPytCcdxesB6cWNf1FlIW98CirojumQKPZMg94xPzrm6+XF 4KQDD0stJmrjJ9nodc5laR9iAHKAyll0q3Ni/4rHtv5im8W4fSvpE1KVSfbZpyf2 fS86LqXwoOUxUmhXwNNG4MY5RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO15GQGm Q9UejG1o+Wq2gZjfnUWbMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaeScZ+/Hdf5knW3hH7gEg5Zu+UonqmkyyoYPb/RqGtx39uuv00WEM dj8WXQHmytRHyzE7NzLKJVD92o5yl2lpPGrRFh4H77tsW7fBJ17tux3sHmOHRKHP Q0mGEatg0a78LYlCexubtR7DHCLzsyDMKy7jzICKOaG3AkCgmobxO/NJ/iQWxBwg toAh/H5xm9Yo/xq9uwip0ZwtomYin+LlBMZfc+0TUveeELoYE1FwZZRN2IojokZz LzbAcZnP2xejG5ujjYNxKrNGSV8MqRi6lz2CR5uylIcAtZcY4WJHX0nMC/TAndr5 BRuErQ6WvVruLIO/fGGbwpRvNCfJIk/S -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:52 2025 by rpki-client