$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json) Hash identifier: Pz9MIqdGMuAHiJ7bumZLGE7YjmKKCiUSB6Ul7F3rIcU= Subject key identifier: 0B:4E:48:03:4F:92:15:E8:1F:8C:1F:88:11:A9:27:A6:08:1A:9A:B7 Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft Manifest number: 62 Signing time: Fri 25 Apr 2025 06:03:05 +0000 Manifest this update: Fri 25 Apr 2025 06:03:04 +0000 Manifest next update: Fri 02 May 2025 06:03:04 +0000 Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: KW4KigAyoL0PtV/AcFN9/1F/LYVTknFg2ey6jJ8rg2o=) 2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Validity Not Before: Apr 25 06:03:04 2025 GMT Not After : May 2 06:03:04 2025 GMT Subject: CN=680b2599-3131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:11:fd:a3:92:8e:fd:89:9f:79:24:19:86: 41:01:b4:f8:0f:87:75:ed:bc:1f:82:d7:75:aa:23: d3:2c:22:a6:3b:78:e7:14:5b:fa:fc:53:37:14:e6: 38:4e:3b:54:ed:e1:2b:c1:44:9d:61:b6:a3:66:a6: a8:36:30:be:73:aa:6a:cf:60:9c:97:2d:29:2f:8a: e2:67:18:88:1f:6e:7c:58:0a:88:d8:a5:e5:54:de: ca:23:5a:69:39:95:c8:b0:0e:d6:a1:07:79:5e:89: d5:f7:51:b6:63:c1:a9:41:24:c1:25:ef:eb:57:f8: 94:14:df:c3:21:34:33:bf:23:fb:2c:e7:79:88:0a: ec:8b:47:d4:1c:fe:71:7d:ae:44:e8:4d:0b:46:e3: a4:76:32:86:53:3a:e9:c5:b8:23:2a:8b:7b:15:b4: 8f:44:2b:3d:8c:98:6f:7a:97:8e:92:fd:b8:4a:74: 33:c2:ff:de:ce:b2:f0:56:92:f7:4c:55:65:79:85: 96:59:cc:61:fc:5a:83:c0:82:93:f8:85:b7:7e:20: 65:2b:34:4e:d8:78:cd:c0:71:90:5b:15:5d:be:b3: 58:9c:9c:e6:04:9f:be:13:6c:b4:3c:e1:1a:c1:ea: 73:71:b9:d9:75:40:b3:58:d9:f1:3c:df:9f:5c:41: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:48:03:4F:92:15:E8:1F:8C:1F:88:11:A9:27:A6:08:1A:9A:B7 X509v3 Authority Key Identifier: keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8d:cb:59:57:32:8f:77:96:51:0f:99:d0:74:8c:32:1c:59: 8d:6d:36:95:01:8b:75:26:72:00:2e:c1:36:a6:fd:46:9c:8e: 2d:0a:72:87:27:54:30:c1:bf:ad:70:d9:fe:5a:03:d9:db:95: 42:e0:a3:9c:2c:a7:fd:b5:55:5d:fe:9d:62:78:f4:37:b3:bf: 5e:89:91:6d:6b:be:c9:e8:91:07:a0:7d:4a:d9:ba:74:29:4a: e1:6a:0a:cc:91:c9:00:e2:a2:76:a5:a4:46:bc:2f:e9:18:71: 0c:8b:ea:90:09:14:0f:eb:d0:1d:04:8a:b2:87:cb:7e:67:04: 64:19:8c:e1:a7:92:d5:0a:a0:ec:9a:4b:61:cc:2d:a5:b7:6e: f3:17:e4:27:72:66:82:d1:83:1f:f2:d9:d0:8f:db:3d:d6:58: d0:fb:c3:9e:5c:ee:6d:ef:47:e7:13:79:d7:db:d0:94:6f:4b: 4b:8d:9e:cb:90:47:5e:4f:33:74:27:c1:43:c9:30:15:a8:de: cf:ef:d0:8c:e6:ff:36:72:70:ca:d9:d4:82:55:6e:f2:ef:27: 19:fd:a5:bc:94:9f:b0:de:d9:41:48:a4:5d:09:ea:ed:d7:76: 7f:64:75:be:9e:f8:aa:19:6c:87:0e:a6:54:e8:60:03:66:dd: da:fc:cf:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIyODk1Mjc2QTY0 MDIzOUMxQzAeFw0yNTA0MjUwNjAzMDRaFw0yNTA1MDIwNjAzMDRaMBgxFjAUBgNV BAMTDTY4MGIyNTk5LTMxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+dRH9o5KO/YmfeSQZhkEBtPgPh3XtvB+C13WqI9MsIqY7eOcUW/r8UzcU5jhO O1Tt4SvBRJ1htqNmpqg2ML5zqmrPYJyXLSkviuJnGIgfbnxYCojYpeVU3sojWmk5 lciwDtahB3leidX3UbZjwalBJMEl7+tX+JQU38MhNDO/I/ss53mICuyLR9Qc/nF9 rkToTQtG46R2MoZTOunFuCMqi3sVtI9EKz2MmG96l46S/bhKdDPC/97OsvBWkvdM VWV5hZZZzGH8WoPAgpP4hbd+IGUrNE7YeM3AcZBbFV2+s1icnOYEn74TbLQ84RrB 6nNxudl1QLNY2fE8359cQR8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC05IA0+S FegfjB+IEaknpggamrcwHwYDVR0jBBgwFoAUT0X6adnl9VCE3ckiiVJ2pkAjnBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4Lzc1M0MzMDE4OTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDBYNmFkbmw5VkNFM2NraWlWSjJwa0FqbkJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZD RTNja2lpVkoycGtBam5Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIiNy1lXMo93llEPmdB0jDIcWY1tNpUBi3UmcgAuwTam/Uacji0Kcocn VDDBv61w2f5aA9nblULgo5wsp/21VV3+nWJ49Dezv16JkW1rvsnokQegfUrZunQp SuFqCsyRyQDionalpEa8L+kYcQyL6pAJFA/r0B0EirKHy35nBGQZjOGnktUKoOya S2HMLaW3bvMX5CdyZoLRgx/y2dCP2z3WWND7w55c7m3vR+cTedfb0JRvS0uNnsuQ R15PM3QnwUPJMBWo3s/v0Izm/zZycMrZ1IJVbvLvJxn9pbyUn7De2UFIpF0J6u3X dn9kdb6e+KoZbIcOplToYANm3dr8z2U= -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:35 2025 by rpki-client