$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: 1d3qQtM2UadTZfrpIw86nHMcvZ53j9X+uF7rOpI9juk= Subject key identifier: B0:2F:82:16:65:6A:B9:6E:D3:58:7A:14:C7:41:F5:2A:88:AD:35:05 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 0363 Signing time: Fri 25 Apr 2025 00:56:12 +0000 Manifest this update: Fri 25 Apr 2025 00:56:11 +0000 Manifest next update: Fri 02 May 2025 00:56:11 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: /tuYihyessoVqtxbjv1FBL4VAKHx5GE1CwXmH28N4oc=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Apr 25 00:56:11 2025 GMT Not After : May 2 00:56:11 2025 GMT Subject: CN=680addab-6f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:63:01:86:f0:a2:43:13:e7:27:62:4b:b6: be:f6:c6:3d:fc:9f:dd:02:a3:8f:21:37:4c:11:27: 8a:25:a4:e3:c8:94:f9:c8:df:3b:27:ae:14:84:78: 8b:bf:60:16:1c:11:42:9f:8f:fc:54:50:c5:41:7a: d8:e0:ab:13:35:62:55:42:4f:ea:81:c7:a1:21:3d: cc:2f:08:06:93:40:5c:6a:c7:32:2b:52:0a:71:a7: 0d:f6:7b:c6:d4:40:c3:3d:58:68:cd:c5:f4:be:60: 00:a3:d4:a4:9d:b2:71:8d:88:c6:be:1a:9b:e6:2f: ff:0f:cb:53:8c:53:0e:71:31:54:08:fc:e0:11:e2: 6c:9d:96:5c:00:40:40:28:48:fd:77:bf:30:5d:d4: 94:db:f5:10:bb:c0:cb:c0:26:29:1b:15:98:ce:fe: 7e:57:13:f9:69:34:d7:63:55:7b:d6:33:df:8c:d3: 9e:7c:3f:9b:3e:39:a1:32:8c:45:6a:ae:f8:24:59: 96:3b:4e:7f:07:98:a7:d3:8a:85:61:d3:e0:ba:62: 1d:36:04:28:6d:b2:6a:c9:bf:76:b4:c2:61:7d:0b: a0:a7:80:f2:3d:df:1c:d0:d7:55:eb:53:c8:77:c4: 47:07:0c:c0:5f:c6:d5:56:6a:44:3e:1d:cc:d7:81: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2F:82:16:65:6A:B9:6E:D3:58:7A:14:C7:41:F5:2A:88:AD:35:05 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:34:f2:ac:0c:f1:64:90:a3:14:06:9b:6b:2a:07:9f:76:f3: 0f:98:52:36:72:b9:f0:37:e6:68:31:a8:64:71:68:d6:29:72: 64:93:e6:c9:6b:85:1b:49:bb:d7:e7:8e:ec:63:00:8a:5e:0c: 88:60:35:53:82:71:f9:f5:d9:f3:5c:c8:e1:ce:dd:01:64:3e: ff:bd:0d:15:1c:92:2c:11:c7:1e:5c:f6:6a:5f:e0:44:88:f7: 70:83:54:1e:59:81:ff:22:94:f9:0a:c5:ea:56:3d:33:0d:77: a5:f0:e3:8f:1c:e4:ac:7e:ec:26:05:80:3d:6b:72:fa:c4:a3: 4e:f1:a1:2f:c2:f2:11:e4:ae:e1:30:dc:cb:fe:c8:35:1c:da: d2:33:4f:72:fd:01:ef:e1:72:d9:13:20:bf:36:cd:c9:6e:21: 23:63:01:47:f4:ba:74:72:3d:4c:a1:44:4d:f6:26:7a:2e:23: 04:76:9c:88:36:98:5e:fd:8f:86:88:19:6c:a4:ce:48:96:54: bc:a4:4b:87:3e:22:6d:0b:a6:a0:cb:0b:b1:b1:ed:bf:89:e0: dc:0e:10:44:e2:10:5d:99:20:0d:cd:48:60:0e:b8:ce:e0:1e: 4d:78:78:54:6f:74:9c:31:a2:3a:a0:dc:a7:64:67:3d:a1:3f: ce:0e:55:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwNDI1MDA1NjExWhcNMjUwNTAyMDA1NjExWjAYMRYwFAYD VQQDEw02ODBhZGRhYi02ZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9VjAYbwokMT5ydiS7a+9sY9/J/dAqOPITdMESeKJaTjyJT5yN87J64UhHiL v2AWHBFCn4/8VFDFQXrY4KsTNWJVQk/qgcehIT3MLwgGk0BcascyK1IKcacN9nvG 1EDDPVhozcX0vmAAo9SknbJxjYjGvhqb5i//D8tTjFMOcTFUCPzgEeJsnZZcAEBA KEj9d78wXdSU2/UQu8DLwCYpGxWYzv5+VxP5aTTXY1V71jPfjNOefD+bPjmhMoxF aq74JFmWO05/B5in04qFYdPgumIdNgQobbJqyb92tMJhfQugp4DyPd8c0NdV61PI d8RHBwzAX8bVVmpEPh3M14G8CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAvghZl arlu01h6FMdB9SqIrTUFMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXNPKsDPFkkKMUBptrKgefdvMPmFI2crnwN+ZoMahkcWjWKXJkk+bJ a4UbSbvX547sYwCKXgyIYDVTgnH59dnzXMjhzt0BZD7/vQ0VHJIsEcceXPZqX+BE iPdwg1QeWYH/IpT5CsXqVj0zDXel8OOPHOSsfuwmBYA9a3L6xKNO8aEvwvIR5K7h MNzL/sg1HNrSM09y/QHv4XLZEyC/Ns3JbiEjYwFH9Lp0cj1MoURN9iZ6LiMEdpyI Nphe/Y+GiBlspM5IllS8pEuHPiJtC6agywuxse2/ieDcDhBE4hBdmSANzUhgDrjO 4B5NeHhUb3ScMaI6oNynZGc9oT/ODlX5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:50 2025 by rpki-client