$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft File: rlT2Go-9_rnvA0VXvInXETsBUDw.mft (raw, json) Hash identifier: Azney9ODyZneDj6vup85S9dR46f2fMkk+xkf+809nno= Subject key identifier: FA:1B:75:49:C3:86:2A:1B:26:AA:9A:59:32:8D:3B:2C:F6:54:E2:C0 Authority key identifier: AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C Certificate issuer: /CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft Manifest number: 12C1 Signing time: Thu 24 Apr 2025 17:56:58 +0000 Manifest this update: Thu 24 Apr 2025 17:56:58 +0000 Manifest next update: Thu 01 May 2025 17:56:58 +0000 Files and hashes: 1: rlT2Go-9_rnvA0VXvInXETsBUDw.crl (hash: drkkvvUz0m+PBvHSciGh62yW/iKSnqX5mS0DDnXtsw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C Validity Not Before: Apr 24 17:56:58 2025 GMT Not After : May 1 17:56:58 2025 GMT Subject: CN=680a7b6a-922e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:97:f7:ef:20:cb:e0:92:f5:9a:08:1e:d3: 7c:15:43:38:93:97:c6:e6:cb:c6:cd:f2:ee:4c:f8: fb:d5:58:c8:33:61:64:9f:9e:3f:24:de:37:92:75: c5:d3:4d:98:39:14:74:c8:57:a2:86:2a:64:1e:55: 04:d0:e3:98:58:aa:c8:c7:83:93:b5:2d:6d:9b:97: 4a:62:80:51:8b:9d:cf:3a:c3:d4:39:f0:dd:72:5b: 47:78:17:b3:d7:6d:c5:f3:b3:a5:62:5d:5d:77:e4: 08:9f:21:99:bc:ec:15:58:95:74:0d:af:c4:b7:3d: 0e:5d:34:ca:fd:17:b5:cd:f5:08:df:8f:3b:69:90: 9f:5c:70:78:18:1f:f4:94:99:2c:45:02:5b:a3:18: 5c:32:1d:17:f9:c9:b1:3e:e0:ea:07:6c:35:ed:f4: 42:c8:22:2f:40:55:cf:94:70:73:2d:3b:df:57:24: f9:d3:85:34:d5:18:13:1a:c3:32:71:8a:40:12:e8: 22:90:aa:10:de:27:0b:13:2b:f0:74:ae:3e:53:bd: a0:52:d1:87:d5:d2:98:e6:2f:ba:65:6f:b2:ae:1c: b1:0a:39:72:5b:44:7c:ee:ee:9f:a4:e1:e2:06:d8: ff:e4:64:74:54:ca:d5:dd:d0:af:6c:8e:01:cc:fb: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1B:75:49:C3:86:2A:1B:26:AA:9A:59:32:8D:3B:2C:F6:54:E2:C0 X509v3 Authority Key Identifier: keyid:AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:55:18:c5:0a:db:fd:c6:f0:6d:7c:a0:31:45:08:2f:85:07: 7b:5a:f2:2a:60:4e:82:7a:64:a6:df:8f:d6:84:30:ee:08:50: 51:c6:b5:14:82:e0:d4:5a:0b:e8:8b:1c:f0:97:04:59:b2:9b: fb:e7:86:07:97:90:9d:e5:70:32:18:bb:fa:59:1e:7b:74:5f: 6b:0d:5b:60:78:e9:c1:9a:9e:30:fd:74:da:46:58:24:b6:ab: b5:ab:05:24:7c:91:55:01:46:1c:cc:3e:bb:9e:f7:31:20:57: fe:62:61:4b:af:72:58:8d:b8:c0:b7:72:c8:5c:39:34:d2:cd: b3:24:2f:81:92:c1:9e:b3:df:f9:6c:04:4d:60:42:c0:b6:ce: d2:8c:b7:75:3a:49:d3:d2:02:19:59:53:47:9b:4e:79:98:5d: d9:96:94:dc:71:2c:0f:1f:45:5a:41:6e:f3:98:3b:13:26:e7: fb:3e:c6:fe:72:19:08:95:7b:f9:f9:02:a1:50:77:1d:8b:00: ca:71:dc:c8:9c:56:c1:00:0f:0a:d4:de:4c:66:bf:66:7b:0c: 70:a3:a6:f9:33:bc:f9:22:a6:84:3e:b2:00:6c:67:f4:15:1c: bd:2f:43:26:59:7c:37:6e:aa:c6:35:32:b3:e5:f8:bb:b6:dc: 61:a3:04:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEFFNTRGNjFBOEZCREZFQjlFRjAzNDU1N0JDODlENzEx M0IwMTUwM0MwHhcNMjUwNDI0MTc1NjU4WhcNMjUwNTAxMTc1NjU4WjAYMRYwFAYD VQQDEw02ODBhN2I2YS05MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwemX9+8gy+CS9ZoIHtN8FUM4k5fG5svGzfLuTPj71VjIM2Fkn54/JN43knXF 002YORR0yFeihipkHlUE0OOYWKrIx4OTtS1tm5dKYoBRi53POsPUOfDdcltHeBez 123F87OlYl1dd+QInyGZvOwVWJV0Da/Etz0OXTTK/Re1zfUI3487aZCfXHB4GB/0 lJksRQJboxhcMh0X+cmxPuDqB2w17fRCyCIvQFXPlHBzLTvfVyT504U01RgTGsMy cYpAEugikKoQ3icLEyvwdK4+U72gUtGH1dKY5i+6ZW+yrhyxCjlyW0R87u6fpOHi Btj/5GR0VMrV3dCvbI4BzPvUuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPobdUnD hiobJqqaWTKNOyz2VOLAMB8GA1UdIwQYMBaAFK5U9hqPvf657wNFV7yJ1xE7AVA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9ybFQyR28tOV9ybnZBMFZYdkluWEVUc0JV RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JsVDJHby05X3JudkEwVlh2SW5YRVRzQlVEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9ybFQyR28tOV9y bnZBMFZYdkluWEVUc0JVRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnVRjFCtv9xvBtfKAxRQgvhQd7WvIqYE6CemSm34/WhDDuCFBRxrUU guDUWgvoixzwlwRZspv754YHl5Cd5XAyGLv6WR57dF9rDVtgeOnBmp4w/XTaRlgk tqu1qwUkfJFVAUYczD67nvcxIFf+YmFLr3JYjbjAt3LIXDk00s2zJC+BksGes9/5 bARNYELAts7SjLd1OknT0gIZWVNHm055mF3ZlpTccSwPH0VaQW7zmDsTJuf7Psb+ chkIlXv5+QKhUHcdiwDKcdzInFbBAA8K1N5MZr9mewxwo6b5M7z5IqaEPrIAbGf0 FRy9L0MmWXw3bqrGNTKz5fi7ttxhowT3 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:49 2025 by rpki-client