$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json) Hash identifier: WAsLSq4T2Pvn8bep55p6esvgd3+VfgPt8YYjJM9JLdk= Subject key identifier: 42:3A:99:E5:A5:3D:C6:68:D2:E4:80:CD:AC:F9:CB:C7:41:0F:F5:D9 Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 06:18:49 +0000 Manifest this update: Fri 25 Apr 2025 06:18:49 +0000 Manifest next update: Fri 02 May 2025 06:18:49 +0000 Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: wuT4TON4nGye4Y2+iEBzR9i7shX9QZcYzTCaOMCdgps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Validity Not Before: Apr 25 06:18:49 2025 GMT Not After : May 2 06:18:49 2025 GMT Subject: CN=680b2949-7d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:99:09:99:20:0c:94:9d:c7:79:e4:ff:f7: a0:cc:c5:00:22:3e:50:ef:34:f8:f6:32:37:9b:3e: 1d:59:9a:f5:3f:64:ab:61:47:26:7d:6e:92:12:a8: 05:f9:41:8b:df:dd:52:3f:f2:43:13:e8:45:76:8c: a8:d7:23:e9:43:7c:e8:33:59:16:2e:3f:b1:9c:44: 0e:d6:6e:43:99:08:4b:02:0d:7d:68:8f:a7:70:ab: 5d:c5:e3:15:bb:ce:9f:72:b5:6a:d7:a3:dd:b4:67: d0:f3:45:35:7b:4e:a4:e3:05:f1:08:d9:ec:54:9d: 0c:0d:c3:89:8e:3c:fc:c6:1a:d5:fe:d7:4e:d5:77: a7:f9:34:10:2a:d4:d8:33:81:d5:70:0c:bf:86:86: 7f:cd:e8:c0:76:2a:87:04:6b:bc:14:11:70:57:87: 19:af:b7:82:22:22:c3:45:f5:1d:e6:71:53:57:f5: fb:ca:ed:71:e4:fc:38:02:b8:8f:86:24:df:ae:59: 81:f9:14:c5:da:e8:61:13:92:0d:60:c8:5f:0b:cc: 16:13:89:e1:6f:54:d7:f0:12:85:3f:f4:27:1c:34: c4:3d:48:22:c8:70:43:a6:0b:88:a1:e7:fe:3c:6b: 90:d7:8f:4e:75:12:8d:49:c3:dd:4a:8d:f6:fb:4b: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:99:E5:A5:3D:C6:68:D2:E4:80:CD:AC:F9:CB:C7:41:0F:F5:D9 X509v3 Authority Key Identifier: keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:b4:0a:01:d7:1e:bc:8e:7c:69:e9:a1:7c:41:ef:4c:51:d3: b1:30:17:a6:72:0c:db:ab:9a:ec:0a:2b:f8:be:8f:eb:f2:f2: d5:0e:70:47:a5:ef:e4:1d:a8:b5:e2:a6:72:8c:b9:11:a7:eb: a2:61:19:ed:94:96:8e:60:b7:6e:67:53:55:7c:87:ba:ad:19: 19:e6:a1:24:6c:6a:42:fe:29:0a:43:81:5a:9b:43:54:de:4b: 00:87:e7:01:0a:48:73:14:6f:8b:b0:fc:7c:d6:76:b3:86:2d: 30:35:83:a6:c2:bf:c9:c3:23:d2:d8:1f:f7:60:12:a1:27:dd: a3:ad:d7:b0:41:c1:dd:41:5c:30:31:37:a4:94:a7:1b:10:8b: 02:cb:2d:53:7f:0b:1d:8f:46:ae:28:4f:85:0c:90:97:bb:2a: da:42:19:bd:4c:9a:b9:34:17:bd:26:44:b4:91:89:b8:26:87: a8:e3:32:c8:9c:76:7c:cc:c9:cb:d6:6c:b6:69:a5:57:ee:e5: 40:d2:3b:65:d3:68:df:5a:03:e5:4d:f1:5e:d4:8d:3b:e1:ad: 7e:0e:66:cf:93:c5:b7:4e:3f:02:80:ac:0e:92:a7:8e:1f:17: 5d:8e:7d:b0:bf:d6:d9:83:2a:56:5c:6a:e4:f8:02:a4:68:72: 4a:ad:81:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjNBMjExMC8GA1UEBRMoNEZGMEYyRjhEQkYzQjE0QTVFQjEyM0I0MUZFOURFNjcz QjEyNTE3RjAeFw0yNTA0MjUwNjE4NDlaFw0yNTA1MDIwNjE4NDlaMBgxFjAUBgNV BAMTDTY4MGIyOTQ5LTdkMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG55kJmSAMlJ3HeeT/96DMxQAiPlDvNPj2MjebPh1ZmvU/ZKthRyZ9bpISqAX5 QYvf3VI/8kMT6EV2jKjXI+lDfOgzWRYuP7GcRA7WbkOZCEsCDX1oj6dwq13F4xW7 zp9ytWrXo920Z9DzRTV7TqTjBfEI2exUnQwNw4mOPPzGGtX+107Vd6f5NBAq1Ngz gdVwDL+Ghn/N6MB2KocEa7wUEXBXhxmvt4IiIsNF9R3mcVNX9fvK7XHk/DgCuI+G JN+uWYH5FMXa6GETkg1gyF8LzBYTieFvVNfwEoU/9CccNMQ9SCLIcEOmC4ih5/48 a5DXj051Eo1Jw91Kjfb7S1MXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQjqZ5aU9 xmjS5IDNrPnLx0EP9dkwHwYDVR0jBBgwFoAUT/Dy+NvzsUpesSO0H+neZzsSUX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzY3OEFDQTE0QUU0 OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1VwZXNTTzBILW5lWnpzU1VY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9EeS1OdnpzVXBlc1NPMEgtbmVaenNTVVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG M0EyLzY3OEFDQTE0QUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1Vw ZXNTTzBILW5lWnpzU1VYOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM+0CgHXHryOfGnpoXxB70xR07EwF6ZyDNurmuwKK/i+j+vy8tUOcEel 7+QdqLXipnKMuRGn66JhGe2Ulo5gt25nU1V8h7qtGRnmoSRsakL+KQpDgVqbQ1Te SwCH5wEKSHMUb4uw/HzWdrOGLTA1g6bCv8nDI9LYH/dgEqEn3aOt17BBwd1BXDAx N6SUpxsQiwLLLVN/Cx2PRq4oT4UMkJe7KtpCGb1Mmrk0F70mRLSRibgmh6jjMsic dnzMycvWbLZppVfu5UDSO2XTaN9aA+VN8V7UjTvhrX4OZs+TxbdOPwKArA6Sp44f F12OfbC/1tmDKlZcauT4AqRockqtgfI= -----END CERTIFICATE-----Generated at Sat Apr 26 04:01:33 2025 by rpki-client