$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: 4AmidFlkBplGAeTK3En1jVLMW4ZVuLcDGL8KFYD5HnM= Subject key identifier: E8:08:61:C9:0E:89:14:66:D9:0B:83:6E:71:93:B6:EB:CE:F2:4E:1C Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: F0 Signing time: Fri 25 Apr 2025 04:21:22 +0000 Manifest this update: Fri 25 Apr 2025 04:21:21 +0000 Manifest next update: Fri 02 May 2025 04:21:21 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: 3i3fMtR54jNkPGApBg7ipkru30fe12FKl43Cjvx3ows=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Apr 25 04:21:21 2025 GMT Not After : May 2 04:21:21 2025 GMT Subject: CN=680b0dc1-624c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:fc:fc:3d:06:57:3c:c8:d6:e7:4d:e9:95: e7:9c:6b:44:55:e9:ae:40:02:70:88:d4:27:4b:83: 94:cc:6f:02:dd:95:ae:27:dc:5d:44:92:37:a5:94: c7:3e:e7:a6:9c:cd:6f:9a:3b:ac:3c:fa:f2:66:75: f6:72:43:7e:c6:57:28:25:32:dd:61:b0:87:1f:72: 10:fc:3d:48:b0:a0:76:4e:33:2a:42:44:1c:c8:be: e9:af:a1:2f:a6:12:dd:87:dd:83:62:05:c1:d0:86: c2:07:01:4a:bc:09:ca:f0:34:ec:c2:56:5f:d9:0f: 21:0a:14:f7:fa:8a:a3:11:1e:b4:17:cb:3e:f6:d3: dd:35:96:ff:f8:63:ec:2b:64:5a:cd:7a:98:61:3b: 99:8d:09:8a:e9:e0:e3:43:dc:36:fa:8f:fb:b3:37: 6b:e6:67:4b:0d:de:bf:70:ae:02:ec:0b:86:60:7c: cd:d9:b3:30:ab:68:3d:2a:c9:f8:6f:cf:e5:3a:c4: 9e:99:35:9a:75:8a:10:ef:b3:bd:e7:6b:aa:ca:02: 9f:e7:2d:1d:3b:2e:53:3a:cc:1b:e1:c8:f9:b3:b6: 3c:4b:f3:3a:e2:d2:3c:d1:03:c7:85:4f:fb:10:cb: 9c:33:53:0c:53:7e:b1:f7:3d:fe:81:37:e3:c8:31: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:08:61:C9:0E:89:14:66:D9:0B:83:6E:71:93:B6:EB:CE:F2:4E:1C X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:db:b4:49:d6:3c:a0:22:d5:8a:f3:27:22:0d:7f:20:3d: a0:49:20:32:48:e6:cb:43:1f:1a:09:a6:6c:0c:e8:01:e8:3d: 99:cb:1c:1e:c3:16:18:fd:5f:33:92:21:c9:be:2f:ab:ee:bf: 1f:95:ee:8f:c4:eb:2a:f3:42:38:3d:7f:59:b9:f8:8a:c9:3d: 8f:0b:ef:37:5e:cb:7e:25:a5:5d:28:61:32:5d:e2:5a:ba:02: 6b:75:42:07:9d:0e:97:86:03:a5:f2:f0:5c:95:23:64:31:74: 90:da:17:94:58:8c:a0:b3:e1:af:06:f4:2f:19:62:e3:f7:8b: 5d:f9:aa:5c:42:2f:2f:19:8f:56:d1:c6:c3:f7:58:56:fa:56: 2f:75:b6:8b:0f:20:30:e5:5f:ff:1a:43:04:bf:b2:95:3a:86: cb:df:5f:91:be:47:93:f6:4a:20:6a:9f:ca:c6:fd:71:10:63: 8c:6e:5e:80:e5:38:4a:70:59:64:34:67:be:63:88:26:f9:4c: c0:a6:57:34:62:ff:32:22:af:e5:f5:7d:d6:61:32:6d:2e:76: 34:02:1c:ee:07:1e:0b:3d:dc:8b:57:65:14:7d:32:32:4a:26: 52:68:84:81:54:b9:b8:ae:6c:a3:eb:e9:69:a4:6d:7d:fe:72: 3f:59:25:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUwNDI1MDQyMTIxWhcNMjUwNTAyMDQyMTIxWjAYMRYwFAYD VQQDEw02ODBiMGRjMS02MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iD8/D0GVzzI1udN6ZXnnGtEVemuQAJwiNQnS4OUzG8C3ZWuJ9xdRJI3pZTH PuemnM1vmjusPPryZnX2ckN+xlcoJTLdYbCHH3IQ/D1IsKB2TjMqQkQcyL7pr6Ev phLdh92DYgXB0IbCBwFKvAnK8DTswlZf2Q8hChT3+oqjER60F8s+9tPdNZb/+GPs K2RazXqYYTuZjQmK6eDjQ9w2+o/7szdr5mdLDd6/cK4C7AuGYHzN2bMwq2g9Ksn4 b8/lOsSemTWadYoQ77O952uqygKf5y0dOy5TOswb4cj5s7Y8S/M64tI80QPHhU/7 EMucM1MMU36x9z3+gTfjyDGXewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgIYckO iRRm2QuDbnGTtuvO8k4cMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsM9u0SdY8oCLVivMnIg1/ID2gSSAySObLQx8aCaZsDOgB6D2Zyxwe wxYY/V8zkiHJvi+r7r8fle6PxOsq80I4PX9ZufiKyT2PC+83Xst+JaVdKGEyXeJa ugJrdUIHnQ6XhgOl8vBclSNkMXSQ2heUWIygs+GvBvQvGWLj94td+apcQi8vGY9W 0cbD91hW+lYvdbaLDyAw5V//GkMEv7KVOobL31+RvkeT9kogap/Kxv1xEGOMbl6A 5ThKcFlkNGe+Y4gm+UzAplc0Yv8yIq/l9X3WYTJtLnY0AhzuBx4LPdyLV2UUfTIy SiZSaISBVLm4rmyj6+lppG19/nI/WSVN -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:53 2025 by rpki-client