$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft File: tpVKYo70-TShCnBay8uQbtYQSAw.mft (raw, json) Hash identifier: QsZ7N1qgZj1Z32fX1JmthTDGz9FgM8K4CpBqzvv6xVQ= Subject key identifier: C8:B4:96:3E:21:60:BC:AB:B0:C5:36:33:7B:C9:B4:D2:60:FE:54:70 Authority key identifier: B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C Certificate issuer: /CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft Manifest number: 0B6D Signing time: Thu 24 Apr 2025 18:58:51 +0000 Manifest this update: Thu 24 Apr 2025 18:58:50 +0000 Manifest next update: Thu 01 May 2025 18:58:50 +0000 Files and hashes: 1: tpVKYo70-TShCnBay8uQbtYQSAw.crl (hash: PLVahEVyGIo/ax8QbFJGCGYCW/W0qJFv5L/2XDAt7Gc=) 2: 5E117DC82AFC11EAB5FEC955C4F9AE02.roa (hash: FLXDHzghX+xgCtsrZgeGezVp6qrYExOvwRgCUG3oquw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE43E, serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C Validity Not Before: Apr 24 18:58:50 2025 GMT Not After : May 1 18:58:50 2025 GMT Subject: CN=680a89ea-95a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:b3:d7:dd:a3:d8:f4:78:07:6d:29:d5:0c: 85:6f:dc:8d:ac:88:3a:d6:ce:50:7c:ba:36:d2:9d: e1:ac:c8:86:7b:37:95:6e:4b:58:39:8e:9d:0e:81: 41:81:52:74:14:a7:b3:f7:c6:b2:9e:8a:fd:43:60: 6d:5f:62:de:16:5d:dd:09:7e:60:1d:cf:96:f4:8d: 64:23:da:62:c4:b8:b2:de:be:04:a5:5f:9b:35:6b: a8:f4:a8:4e:af:90:a5:6f:ed:c2:2f:25:7a:7c:71: 40:65:5e:83:5f:83:89:83:2c:ac:b6:b5:ba:31:dd: 65:85:d2:b6:79:1f:d7:c4:6b:fb:f7:6d:6e:56:7d: d4:bd:a0:d1:75:45:e8:85:6b:35:0b:36:ea:06:e6: b0:29:e0:5f:2b:f3:ab:48:2f:89:f3:61:d2:ca:4c: 93:25:43:16:64:64:af:c2:0f:e3:0c:23:9f:83:11: 24:91:4a:ae:b6:2f:39:15:4d:7a:b4:92:1c:40:3e: 2b:e3:0c:5c:26:81:b0:aa:80:e8:e8:3f:db:8d:b2: 46:62:69:12:83:22:2f:cf:72:07:7a:d2:6d:b8:54: 5f:f4:78:b9:61:14:fc:3a:d6:79:e8:a7:8d:77:87: ad:1a:f3:82:cd:5d:b9:df:94:86:7b:34:76:52:8a: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B4:96:3E:21:60:BC:AB:B0:C5:36:33:7B:C9:B4:D2:60:FE:54:70 X509v3 Authority Key Identifier: keyid:B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:6d:be:0b:76:cf:f9:e8:64:85:ae:75:e3:73:2a:98:26:bf: 79:fc:6f:e0:b6:d9:46:29:64:ce:be:d2:ca:ba:d7:8f:66:fb: 88:4e:e0:ea:15:68:98:25:c7:47:4f:a7:86:e6:22:3d:e3:96: 01:64:3c:25:94:63:dc:a2:43:c8:42:ff:ea:bd:c1:fd:84:2c: e6:1f:3d:fa:c0:4c:ae:fd:73:4b:48:ee:4d:50:7d:65:d8:32: 88:bc:65:a3:b5:ac:71:b1:01:37:3a:5a:b6:4d:2c:e3:b1:1e: 66:2b:d7:81:7b:38:50:e3:95:19:08:5c:9d:49:1e:a7:d5:5e: e0:10:f1:8e:41:14:d3:36:dd:d7:16:c6:b9:e8:5f:d9:3d:10: ad:cd:59:8c:3c:ea:91:fc:2f:3e:4c:5b:2b:4b:5d:34:9a:d5: 83:5f:18:c8:a1:53:80:30:0e:7c:49:13:4d:bb:b8:14:89:27: 88:11:c3:76:5f:ef:77:2e:c1:d8:58:bb:96:9e:b0:0c:25:e5: 42:2c:ec:50:f0:c2:94:f9:8a:7d:ef:f0:e2:6d:0d:89:e7:c6: 5b:72:15:8f:98:bc:1f:4f:95:4b:ff:43:cd:6f:a9:e1:b6:ae: bb:1c:b5:2c:c9:37:e9:4b:33:6f:eb:56:d1:0c:80:94:7a:a7: 7a:d7:44:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0M0UxMTAvBgNVBAUTKEI2OTU0QTYyOEVGNEY5MzRBMTBBNzA1QUNCQ0I5MDZF RDYxMDQ4MEMwHhcNMjUwNDI0MTg1ODUwWhcNMjUwNTAxMTg1ODUwWjAYMRYwFAYD VQQDEw02ODBhODllYS05NWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMSz192j2PR4B20p1QyFb9yNrIg61s5QfLo20p3hrMiGezeVbktYOY6dDoFB gVJ0FKez98aynor9Q2BtX2LeFl3dCX5gHc+W9I1kI9pixLiy3r4EpV+bNWuo9KhO r5Clb+3CLyV6fHFAZV6DX4OJgyystrW6Md1lhdK2eR/XxGv7921uVn3UvaDRdUXo hWs1CzbqBuawKeBfK/OrSC+J82HSykyTJUMWZGSvwg/jDCOfgxEkkUquti85FU16 tJIcQD4r4wxcJoGwqoDo6D/bjbJGYmkSgyIvz3IHetJtuFRf9Hi5YRT8OtZ56KeN d4etGvOCzV2535SGezR2Uoqk3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi0lj4h YLyrsMU2M3vJtNJg/lRwMB8GA1UdIwQYMBaAFLaVSmKO9Pk0oQpwWsvLkG7WEEgM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTQzRS9DQzAzRkJCODJB RkIxMUVBOERGMzdENTVDNEY5QUUwMi90cFZLWW83MC1UU2hDbkJheTh1UWJ0WVFT QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RwVktZbzcwLVRTaENuQmF5OHVRYnRZUVNBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTQzRS9DQzAzRkJCODJBRkIxMUVBOERGMzdENTVDNEY5QUUwMi90cFZLWW83MC1U U2hDbkJheTh1UWJ0WVFTQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4bb4Lds/56GSFrnXjcyqYJr95/G/gttlGKWTOvtLKutePZvuITuDq FWiYJcdHT6eG5iI945YBZDwllGPcokPIQv/qvcH9hCzmHz36wEyu/XNLSO5NUH1l 2DKIvGWjtaxxsQE3Olq2TSzjsR5mK9eBezhQ45UZCFydSR6n1V7gEPGOQRTTNt3X Fsa56F/ZPRCtzVmMPOqR/C8+TFsrS100mtWDXxjIoVOAMA58SRNNu7gUiSeIEcN2 X+93LsHYWLuWnrAMJeVCLOxQ8MKU+Yp97/DibQ2J58ZbchWPmLwfT5VL/0PNb6nh tq67HLUsyTfpSzNv61bRDICUeqd610Sj -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:05 2025 by rpki-client