$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: 2WCmmAacSbAz/FKZ/etr/7yNA8iPjABgbYr8FRtWpEE= Subject key identifier: AB:04:3E:C6:97:9C:9C:50:7B:6F:13:13:ED:72:BC:03:83:F9:A4:52 Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 0217 Signing time: Mon 03 Nov 2025 02:09:16 +0000 Manifest this update: Mon 03 Nov 2025 02:09:16 +0000 Manifest next update: Mon 10 Nov 2025 02:09:16 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: m8SKLLdbQXYNxip4CM+7c4LBggsENqfOjSklqk3v1LE=) 2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=) 3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Nov 3 02:09:16 2025 GMT Not After : Nov 10 02:09:16 2025 GMT Subject: CN=69080ecc-cb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:fd:53:09:f5:a4:f6:5a:0e:bf:9d:36:0e: 1a:ec:11:7c:e5:fa:0d:ed:54:a2:f3:38:5b:54:6a: 07:80:d0:8b:6e:65:70:c0:77:28:5f:59:a3:12:27: 39:8a:f7:ac:78:13:1e:f1:f8:ff:8f:a0:17:3d:0d: 4e:43:ad:1a:95:8f:11:07:86:48:56:70:97:89:18: b4:73:42:48:86:fa:23:95:44:4a:67:38:1e:7f:16: 80:c6:44:55:a3:a4:6b:72:f2:6d:c9:6c:6d:bd:e8: c1:b6:d1:bc:86:e8:86:18:61:4d:68:94:28:93:42: aa:3e:37:70:58:88:50:48:92:c8:f1:0a:c6:c2:65: e1:bd:99:2e:10:1f:57:33:a1:4f:fe:76:80:28:b7: bf:b4:36:ef:5f:e7:f9:99:1b:61:07:71:eb:2b:ed: d7:bd:d9:0b:ba:90:74:d1:7e:d3:9d:54:f9:9c:40: f4:89:12:b7:4b:c0:8a:1e:b1:2d:d3:e7:57:92:47: 0f:77:cd:a7:12:fd:03:d2:37:72:56:a5:d3:38:e0: a5:04:a9:91:20:b1:66:6c:6c:8b:00:c8:70:fa:28: c6:ab:03:11:9c:f9:1c:6d:e2:6f:57:6c:bb:18:01: bf:24:29:0e:9a:75:60:ba:a4:13:49:c1:3a:90:dd: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:04:3E:C6:97:9C:9C:50:7B:6F:13:13:ED:72:BC:03:83:F9:A4:52 X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b9:8f:bd:22:6e:6e:2f:93:db:ea:d9:2b:b3:b0:c7:47:81: 2d:8c:b2:2d:e0:9a:ce:2e:9a:61:06:1b:a2:9f:d2:63:17:71: 84:21:1b:93:21:39:fc:b7:4a:a2:34:00:1e:a7:17:43:8f:a7: a3:06:15:47:4d:c8:b0:44:2a:3b:93:0a:63:f8:7f:14:0d:e8: bf:10:2f:a9:46:4d:d3:49:4c:fa:9c:79:1b:62:09:d1:56:82: 02:da:29:0a:7a:3a:0d:b8:7d:a2:64:d5:ec:87:42:37:43:21: 92:3e:4b:e2:b7:b0:e7:0d:93:06:f4:c2:fb:d3:8e:89:a1:b6: 27:0d:6f:87:7a:a9:d1:b1:13:ff:6b:6a:20:0d:30:bb:2c:9d: 24:44:9d:a1:02:11:1b:47:69:21:b8:d5:22:1d:d5:df:2d:5e: 38:42:ae:5c:2a:bb:a5:c9:7c:d3:de:c1:fe:79:fd:5d:1d:09: d9:2b:88:9d:ae:e9:49:0f:9f:10:be:47:1d:f5:1f:91:c3:5a: 9e:0f:96:4b:dd:b9:01:e3:6a:7d:91:64:b2:36:a6:3e:17:80: 74:41:be:0d:2b:0b:f5:0a:3a:08:5a:21:be:dd:97:a0:5f:b4: 5e:1b:c0:da:6f:ed:99:b1:dc:a0:9b:29:ba:73:54:e4:6d:ad: 27:c7:89:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjUxMTAzMDIwOTE2WhcNMjUxMTEwMDIwOTE2WjAYMRYwFAYD VQQDEw02OTA4MGVjYy1jYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEn9Uwn1pPZaDr+dNg4a7BF85foN7VSi8zhbVGoHgNCLbmVwwHcoX1mjEic5 iveseBMe8fj/j6AXPQ1OQ60alY8RB4ZIVnCXiRi0c0JIhvojlURKZzgefxaAxkRV o6RrcvJtyWxtvejBttG8huiGGGFNaJQok0KqPjdwWIhQSJLI8QrGwmXhvZkuEB9X M6FP/naAKLe/tDbvX+f5mRthB3HrK+3XvdkLupB00X7TnVT5nED0iRK3S8CKHrEt 0+dXkkcPd82nEv0D0jdyVqXTOOClBKmRILFmbGyLAMhw+ijGqwMRnPkcbeJvV2y7 GAG/JCkOmnVguqQTScE6kN2CYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsEPsaX nJxQe28TE+1yvAOD+aRSMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3uY+9Im5uL5Pb6tkrs7DHR4EtjLIt4JrOLpphBhuin9JjF3GEIRuT ITn8t0qiNAAepxdDj6ejBhVHTciwRCo7kwpj+H8UDei/EC+pRk3TSUz6nHkbYgnR VoIC2ikKejoNuH2iZNXsh0I3QyGSPkvit7DnDZMG9ML7046JobYnDW+HeqnRsRP/ a2ogDTC7LJ0kRJ2hAhEbR2khuNUiHdXfLV44Qq5cKrulyXzT3sH+ef1dHQnZK4id rulJD58Qvkcd9R+Rw1qeD5ZL3bkB42p9kWSyNqY+F4B0Qb4NKwv1CjoIWiG+3Zeg X7ReG8Dab+2Zsdygmym6c1Tkba0nx4l1 -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:21 2025 by rpki-client