$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: hI+JgeTD2BakO+8r02gRzhfKoWfvWm0psIbyadvr4oQ= Subject key identifier: 7D:8D:07:00:7E:52:50:44:69:6E:20:1A:CB:4C:F6:6A:15:34:CD:01 Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 093C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 0933 Signing time: Thu 24 Apr 2025 20:09:44 +0000 Manifest this update: Thu 24 Apr 2025 20:09:44 +0000 Manifest next update: Thu 01 May 2025 20:09:44 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: FLNSOnG23y/ZgGo/Qcee6m9fS4Uk1J241hF5Je9nIJI=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: EalLcrhJ2pf9J6rJzGCAE06JbZRtA/SwMcMPpTqGCFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2364 (0x93c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Apr 24 20:09:44 2025 GMT Not After : May 1 20:09:44 2025 GMT Subject: CN=680a9a88-d897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:73:ff:13:a3:e8:ab:e3:56:7a:92:e7:e1: 90:b3:e6:99:ca:59:9a:4c:49:61:19:4b:38:8a:62: b4:c1:13:35:af:f4:25:70:0e:52:2b:b4:41:ed:d0: 8d:e4:76:5f:48:81:51:e6:1f:9f:c7:cd:e8:8f:d0: 0f:c9:9a:65:bd:20:dd:e9:1b:eb:44:06:31:17:e9: c1:8d:c0:9b:cb:8d:05:d2:e5:58:fe:66:9d:ae:5d: 4d:f2:11:90:2a:4a:7f:20:9a:4d:9a:2e:7c:68:78: 47:87:9e:55:ba:94:64:96:74:98:da:56:6b:51:34: cc:b9:d0:9e:70:cd:67:99:ae:c8:c7:af:ad:14:6e: 13:a9:84:6a:fa:f7:f7:b0:ca:1a:e0:3a:b0:d3:af: 41:cd:0e:03:02:82:72:79:73:41:b7:33:6c:ee:30: 35:46:4b:ed:e2:56:e4:ec:fc:56:40:e8:3e:36:9d: 92:39:27:0b:f2:28:ee:e9:f3:88:6a:33:76:60:e0: e0:c2:50:c5:34:c1:a8:d9:21:03:09:2c:a9:2c:fb: 49:f2:70:d7:29:c1:1f:ff:4b:da:b0:cb:80:bf:d4: b9:49:d7:b6:b5:39:f9:3b:b3:72:e8:06:bd:7c:9d: 21:8a:09:1d:9d:a6:15:07:c5:ea:e2:ff:e2:2a:46: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8D:07:00:7E:52:50:44:69:6E:20:1A:CB:4C:F6:6A:15:34:CD:01 X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:63:01:9f:49:d2:2d:3e:f8:78:a8:d9:00:e2:29:1f:1b:62: 18:49:2d:13:7c:c8:f1:24:cd:de:cb:38:85:47:a0:bc:c8:e3: e2:4d:a7:4d:7c:a8:01:fd:29:3b:86:08:30:02:85:eb:67:d9: 7b:6b:9d:72:e4:e4:7c:5f:b8:87:21:c0:82:f2:5a:9a:d8:d6: 53:08:dd:3f:af:6e:3b:d1:7f:31:61:6f:0a:82:e8:91:94:75: 65:31:95:1e:76:bf:73:f1:17:4b:49:23:ec:58:06:41:38:51: 4b:09:dc:da:f1:6b:6f:58:eb:c0:2c:5c:b3:cb:e1:24:d3:54: c4:06:61:c6:a5:29:45:c2:2c:64:6a:77:43:0f:65:8c:87:76: b4:f5:6a:aa:a4:9d:50:6e:cd:de:80:b1:da:03:38:4b:6d:6d: 90:7f:f6:bd:cf:43:b2:ac:45:db:48:47:fd:6d:67:a2:04:26: 1a:ad:d2:e0:d2:11:a8:f4:ed:ce:32:56:7e:5d:91:60:e6:55: 7f:4b:59:8e:ef:c4:2d:f4:96:26:a6:8d:0f:79:8f:9a:a1:8f: 43:2c:ce:6c:0b:bf:8b:16:ec:60:13:7d:56:be:a0:11:06:b3: bc:2c:52:de:73:a7:7b:77:cf:5a:e1:a5:53:11:d1:0d:8d:3a: af:98:ea:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjUwNDI0MjAwOTQ0WhcNMjUwNTAxMjAwOTQ0WjAYMRYwFAYD VQQDEw02ODBhOWE4OC1kODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUZz/xOj6KvjVnqS5+GQs+aZylmaTElhGUs4imK0wRM1r/QlcA5SK7RB7dCN 5HZfSIFR5h+fx83oj9APyZplvSDd6RvrRAYxF+nBjcCby40F0uVY/madrl1N8hGQ Kkp/IJpNmi58aHhHh55VupRklnSY2lZrUTTMudCecM1nma7Ix6+tFG4TqYRq+vf3 sMoa4Dqw069BzQ4DAoJyeXNBtzNs7jA1Rkvt4lbk7PxWQOg+Np2SOScL8iju6fOI ajN2YODgwlDFNMGo2SEDCSypLPtJ8nDXKcEf/0vasMuAv9S5Sde2tTn5O7Ny6Aa9 fJ0higkdnaYVB8Xq4v/iKkZlCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2NBwB+ UlBEaW4gGstM9moVNM0BMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/YwGfSdItPvh4qNkA4ikfG2IYSS0TfMjxJM3eyziFR6C8yOPiTadN fKgB/Sk7hggwAoXrZ9l7a51y5OR8X7iHIcCC8lqa2NZTCN0/r2470X8xYW8KguiR lHVlMZUedr9z8RdLSSPsWAZBOFFLCdza8WtvWOvALFyzy+Ek01TEBmHGpSlFwixk andDD2WMh3a09WqqpJ1Qbs3egLHaAzhLbW2Qf/a9z0OyrEXbSEf9bWeiBCYardLg 0hGo9O3OMlZ+XZFg5lV/S1mO78Qt9JYmpo0PeY+aoY9DLM5sC7+LFuxgE31WvqAR BrO8LFLec6d7d89a4aVTEdENjTqvmOoJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:43 2025 by rpki-client