$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: NJpAdaSKYFxzXcSz4fc+OrXu33A3/uqNUfcatNv/Qvo= Subject key identifier: AB:34:85:67:E5:F1:3E:C6:E7:F1:3F:93:BA:9B:E7:06:88:6C:3B:9C Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 0617 Signing time: Thu 12 Jun 2025 22:27:29 +0000 Manifest this update: Thu 12 Jun 2025 22:27:28 +0000 Manifest next update: Thu 19 Jun 2025 22:27:28 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: vmp7GeMqxbzUKrasPbVV3yTENWmym+XSNxDl2YxouH4=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Jun 12 22:27:28 2025 GMT Not After : Jun 19 22:27:28 2025 GMT Subject: CN=684b5451-3ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:80:4f:5d:d6:bd:de:11:80:70:ea:70:9f: fd:3b:28:32:5d:6d:0e:07:f8:9c:11:2b:ba:41:c4: 51:83:46:38:49:d2:3a:f2:14:5c:b6:31:dc:ba:44: 57:e6:f3:b1:e7:ee:73:9f:6e:59:52:3a:7c:2d:9c: 1a:59:24:cf:0a:0c:0a:6c:77:93:74:c7:78:b9:13: 9d:c5:b8:a8:db:03:4e:bd:ac:90:38:aa:86:8d:50: 51:56:3f:7a:d0:27:0d:42:b5:3a:49:88:86:c5:96: e4:59:01:e3:8d:04:67:6f:ba:a9:46:6a:f2:b0:4a: 81:e5:3a:46:f7:43:85:87:e2:90:41:16:76:33:94: 44:d5:05:ae:37:94:d6:74:12:a9:92:8d:d0:3e:3f: ae:81:5d:b4:08:10:11:ab:8e:50:b4:08:5a:fd:5f: d6:9b:b0:06:e9:e3:db:54:60:1c:5a:fb:e6:7d:a5: 41:d7:6d:c0:5d:57:61:e6:5e:aa:70:b4:40:cc:51: 76:29:47:ba:bd:c4:13:77:97:e1:94:da:76:78:31: f0:1d:7d:38:d9:ff:09:bd:16:22:21:77:aa:8d:22: 37:e1:7e:4e:1a:4a:fa:40:41:a8:19:7a:5e:21:82: ae:ce:72:d4:ec:ea:c2:88:a8:72:4f:bd:4f:a2:7b: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:34:85:67:E5:F1:3E:C6:E7:F1:3F:93:BA:9B:E7:06:88:6C:3B:9C X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c3:c0:04:97:38:04:cc:ad:80:38:cd:6e:27:3a:38:d6:ff: f8:22:77:24:67:be:87:8f:b9:aa:9c:d9:d4:e0:3f:d5:dc:32: a5:39:66:9b:54:7d:4c:a3:95:61:e6:08:ab:58:dc:d3:dc:a7: 9a:54:24:95:56:6c:9c:58:94:48:58:66:c1:e3:2c:25:00:03: 97:9a:4b:a1:64:0c:09:fa:77:8d:0b:86:5c:67:55:fe:86:cf: 8c:86:3b:be:0e:10:5d:b7:b3:9d:77:c7:8f:b0:01:f1:1d:4c: 60:2a:33:5c:57:ed:88:39:8f:72:06:31:40:12:f6:a4:50:8f: 43:8a:4c:b5:54:0c:f2:c2:78:98:48:50:37:55:a9:39:f8:20: d3:44:db:0d:27:af:d9:56:ee:7c:f8:b1:a3:c7:a8:5b:72:80: 99:e5:ba:ad:bf:ec:0e:00:7c:ce:81:55:a9:88:eb:1c:36:bb: 4a:2b:26:fa:cb:57:a2:5d:1d:6e:b6:b4:9c:a4:47:7a:e2:c5: ef:de:a7:bb:e5:db:12:4a:83:5b:cb:bc:e6:85:b6:82:6c:61: 68:e0:d1:0e:ab:ef:71:ba:af:2c:98:d6:89:cc:4a:02:0c:67: e6:94:ba:0f:67:4a:d8:f6:c8:d6:08:53:5c:6f:79:5d:39:ee: fd:9e:80:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUwNjEyMjIyNzI4WhcNMjUwNjE5MjIyNzI4WjAYMRYwFAYD VQQDEw02ODRiNTQ1MS0zZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLuAT13Wvd4RgHDqcJ/9OygyXW0OB/icESu6QcRRg0Y4SdI68hRctjHcukRX 5vOx5+5zn25ZUjp8LZwaWSTPCgwKbHeTdMd4uROdxbio2wNOvayQOKqGjVBRVj96 0CcNQrU6SYiGxZbkWQHjjQRnb7qpRmrysEqB5TpG90OFh+KQQRZ2M5RE1QWuN5TW dBKpko3QPj+ugV20CBARq45QtAha/V/Wm7AG6ePbVGAcWvvmfaVB123AXVdh5l6q cLRAzFF2KUe6vcQTd5fhlNp2eDHwHX042f8JvRYiIXeqjSI34X5OGkr6QEGoGXpe IYKuznLU7OrCiKhyT71PontF1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs0hWfl 8T7G5/E/k7qb5waIbDucMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFw8AElzgEzK2AOM1uJzo41v/4InckZ76Hj7mqnNnU4D/V3DKlOWab VH1Mo5Vh5girWNzT3KeaVCSVVmycWJRIWGbB4ywlAAOXmkuhZAwJ+neNC4ZcZ1X+ hs+Mhju+DhBdt7Odd8ePsAHxHUxgKjNcV+2IOY9yBjFAEvakUI9Diky1VAzywniY SFA3Vak5+CDTRNsNJ6/ZVu58+LGjx6hbcoCZ5bqtv+wOAHzOgVWpiOscNrtKKyb6 y1eiXR1utrScpEd64sXv3qe75dsSSoNby7zmhbaCbGFo4NEOq+9xuq8smNaJzEoC DGfmlLoPZ0rY9sjWCFNcb3ldOe79noBu -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:24 2025 by rpki-client