$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft File: T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft (raw, json) Hash identifier: olewlY7y9zWyu7n7ouRxPOm/LneKnYjD91K1wRtGc+o= Subject key identifier: 46:D5:7E:33:9E:91:97:4F:71:D2:80:06:93:3D:2F:E2:D6:D7:0B:CC Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58 Certificate issuer: /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft Manifest number: 01AE Signing time: Fri 25 Apr 2025 02:28:23 +0000 Manifest this update: Fri 25 Apr 2025 02:28:22 +0000 Manifest next update: Fri 02 May 2025 02:28:22 +0000 Files and hashes: 1: T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl (hash: FN5A9PbTJDNOxdX3d6LcHoaglubm4islBVDCJeProhU=) 2: 0BD8AF96D41A11EF804F7049C4F9AE02.roa (hash: CbsMaT+1o+zoMcHzdBRqNGnxnAlCq5uF3XIGjN5ZkQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916548C, serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58 Validity Not Before: Apr 25 02:28:22 2025 GMT Not After : May 2 02:28:22 2025 GMT Subject: CN=680af346-fe5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:ff:a2:b2:5f:ce:72:7f:f2:1a:51:98:91: f5:0f:e2:31:dd:f3:85:65:43:41:f5:3b:b8:7e:47: ab:47:93:99:32:ca:45:4c:f9:03:63:27:c5:39:97: f6:7d:86:eb:4b:d7:c0:75:df:99:2b:9f:59:61:0c: 98:13:b5:da:b6:ae:6a:6b:ba:ec:d0:82:b7:dc:0d: d0:8a:0b:cb:0c:6f:dc:20:43:87:6a:42:14:b3:bf: e9:54:51:f6:ab:db:15:09:84:67:d7:a0:62:d4:36: 4d:7a:a6:cd:1b:e0:21:6a:99:db:85:8f:5d:76:6d: fa:5b:20:fe:a4:68:69:e6:7f:94:e1:26:2a:71:6e: 58:d7:ff:12:49:27:4f:c1:ae:45:c8:50:17:71:e0: e7:f4:ec:bb:19:28:b5:2a:a9:c7:7b:d5:4c:9b:b6: 80:ca:ea:e1:91:1c:ee:7f:03:28:8a:a4:fd:28:7b: bd:c7:02:ae:83:21:b2:09:ed:81:2a:00:d4:fb:60: 39:0e:ca:31:0b:5d:f9:10:8b:d6:1c:84:28:36:ae: 5c:af:e3:f9:07:63:3a:5b:8e:43:80:8b:0a:af:d1: 58:ea:e0:5b:ff:92:df:16:98:b1:dd:69:03:22:42: 99:0f:4a:87:19:45:80:f1:7c:c5:82:3e:26:56:c6: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:7E:33:9E:91:97:4F:71:D2:80:06:93:3D:2F:E2:D6:D7:0B:CC X509v3 Authority Key Identifier: keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0a:1e:f9:0f:55:c9:6e:db:0f:1f:9d:2d:54:25:38:f6:71: 4b:fd:dd:d7:0b:df:95:61:7a:ae:36:bd:c3:87:1d:b1:b4:e0: c5:2b:cc:db:02:03:62:d0:5c:71:ef:d0:98:50:73:e5:27:2f: 59:3d:21:c5:b8:ac:19:3c:46:b1:60:7c:90:9c:dd:33:1a:0e: c6:06:2d:dc:ad:e3:b8:b8:3f:3b:b5:d7:fd:a4:88:18:8d:7a: 22:70:a9:af:48:ab:44:e2:87:da:dc:9d:e1:44:77:b9:86:53: 92:41:1d:58:18:da:89:1f:a5:5f:41:8f:bd:19:26:86:d3:eb: 70:46:ef:6c:03:73:2c:33:9f:7b:88:b5:e6:ed:2c:14:e4:d1: 7d:2e:9f:f1:80:9b:73:db:34:5b:d2:8b:0c:dd:7f:1b:7b:e5: 9f:e3:43:b1:9e:b8:0d:12:a8:58:26:da:12:54:58:ff:4a:20: c1:dd:bb:c2:80:4b:90:f1:9e:56:32:4b:b9:a4:74:82:2e:88: 2c:b4:27:22:80:da:8c:50:27:af:ff:89:f4:fd:6d:38:f7:41: 56:03:15:b0:40:1f:12:d1:75:0d:f3:b9:5e:a5:49:af:ec:22: 74:90:95:6e:9f:9b:87:7a:5b:c1:35:7b:b4:25:be:49:be:be: a1:f2:68:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0OEMxMTAvBgNVBAUTKDRGQTM2OEE2MkVEMjVDNjI3OEUyM0IxQkZGQTI1MUEx NDlBQTJGNTgwHhcNMjUwNDI1MDIyODIyWhcNMjUwNTAyMDIyODIyWjAYMRYwFAYD VQQDEw02ODBhZjM0Ni1mZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEv/orJfznJ/8hpRmJH1D+Ix3fOFZUNB9Tu4fkerR5OZMspFTPkDYyfFOZf2 fYbrS9fAdd+ZK59ZYQyYE7Xatq5qa7rs0IK33A3QigvLDG/cIEOHakIUs7/pVFH2 q9sVCYRn16Bi1DZNeqbNG+AhapnbhY9ddm36WyD+pGhp5n+U4SYqcW5Y1/8SSSdP wa5FyFAXceDn9Oy7GSi1KqnHe9VMm7aAyurhkRzufwMoiqT9KHu9xwKugyGyCe2B KgDU+2A5DsoxC135EIvWHIQoNq5cr+P5B2M6W45DgIsKr9FY6uBb/5LfFpix3WkD IkKZD0qHGUWA8XzFgj4mVsY5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbVfjOe kZdPcdKABpM9L+LW1wvMMB8GA1UdIwQYMBaAFE+jaKYu0lxieOI7G/+iUaFJqi9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ4Qy9DNzczMUQyNDlF NTUxMUVEOEQ5MkJENzlDNEY5QUUwMi9UNk5vcGk3U1hHSjQ0anNiXzZKUm9VbXFM MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q2Tm9waTdTWEdKNDRqc2JfNkpSb1VtcUwxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ4Qy9DNzczMUQyNDlFNTUxMUVEOEQ5MkJENzlDNEY5QUUwMi9UNk5vcGk3U1hH SjQ0anNiXzZKUm9VbXFMMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeCh75D1XJbtsPH50tVCU49nFL/d3XC9+VYXquNr3Dhx2xtODFK8zb AgNi0Fxx79CYUHPlJy9ZPSHFuKwZPEaxYHyQnN0zGg7GBi3creO4uD87tdf9pIgY jXoicKmvSKtE4ofa3J3hRHe5hlOSQR1YGNqJH6VfQY+9GSaG0+twRu9sA3MsM597 iLXm7SwU5NF9Lp/xgJtz2zRb0osM3X8be+Wf40OxnrgNEqhYJtoSVFj/SiDB3bvC gEuQ8Z5WMku5pHSCLogstCcigNqMUCev/4n0/W0490FWAxWwQB8S0XUN87lepUmv 7CJ0kJVun5uHelvBNXu0Jb5Jvr6h8mj0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:18 2025 by rpki-client