$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: fYbFpmGMwXkuPrnhc3LanpJEgGlC37JZjRR7vpnLAuQ= Subject key identifier: 11:B9:19:17:7C:0C:4D:93:CD:0F:46:7F:4E:68:9F:80:ED:73:7E:98 Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 05FD Signing time: Thu 24 Apr 2025 22:41:34 +0000 Manifest this update: Thu 24 Apr 2025 22:41:33 +0000 Manifest next update: Thu 01 May 2025 22:41:33 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: nJL5QlNQG5ifodUtfths4oSYvd0R+Z+uapvMqKofz3A=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: KzdmZEqJybWPyDEGiwej7P7ZjZ9dGsHz/bpMhD8sTy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Apr 24 22:41:33 2025 GMT Not After : May 1 22:41:33 2025 GMT Subject: CN=680abe1e-58a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:5f:34:9d:42:b3:d9:de:38:91:59:a9:a9: 74:a4:8b:77:b7:11:fc:00:75:b9:bd:9c:c7:9c:55: 83:28:66:db:c2:42:89:eb:46:1a:e9:bb:52:57:de: 81:e0:da:38:d1:bf:72:74:fe:ec:97:3e:17:f5:d3: 14:bc:cb:99:a2:f0:b3:09:76:cf:c7:77:58:45:2c: 9d:f4:b3:98:d4:a1:33:dd:d7:6b:d8:8f:f3:05:d2: f6:a2:d9:b7:18:59:cf:8a:e1:27:93:71:81:d0:ad: 5b:74:be:b1:50:9f:5b:96:a4:c4:b9:ce:d2:52:5b: 37:f8:85:72:51:c2:b3:4c:5c:35:24:58:a7:d8:52: 66:8e:39:3a:56:3a:03:cc:68:1f:44:e7:38:53:4b: c3:bb:33:48:66:a2:08:0a:12:8d:f3:83:66:0a:5a: d3:04:32:28:f5:fe:0b:d6:b4:61:35:22:c0:d6:69: df:7b:2b:ef:78:d0:ef:6e:59:dc:d8:ff:cb:13:04: c2:9e:9a:7b:7c:4a:e9:18:63:fd:83:86:8e:74:ba: d5:a1:19:3e:27:9f:2b:71:e3:2c:d4:47:e5:8a:d3: 94:28:de:e5:f7:63:60:99:7a:5e:61:a2:5b:72:59: 63:07:94:d5:a9:c9:e4:c4:ef:71:09:f2:6a:e4:89: 9e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:19:17:7C:0C:4D:93:CD:0F:46:7F:4E:68:9F:80:ED:73:7E:98 X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:50:07:46:a3:30:bd:04:9d:a6:f0:58:1e:be:b0:29:cd: fb:51:2b:9d:6e:12:3a:31:12:3e:7c:f5:8d:27:63:0c:81:8e: ad:93:45:f4:20:2c:83:89:b0:21:ac:da:d9:a5:48:da:75:f2: 71:f9:32:06:d8:af:61:49:0a:3e:e9:cb:88:65:46:5a:98:d6: de:1d:b6:cf:2f:2e:b1:fb:b5:42:29:c8:80:d5:63:1b:42:51: 1e:fb:74:98:a4:e7:52:e2:a0:e6:21:2c:d2:63:c8:2c:b6:d7: cd:de:d5:32:1f:55:6f:10:c1:c2:e1:e1:99:1c:cb:4f:ee:21: 29:a5:08:ad:98:85:b4:90:a3:13:c0:42:ff:f0:aa:c0:db:5e: 9c:f8:c9:b8:90:23:0e:00:b3:7f:4d:95:cc:4a:04:e4:04:d5: e4:55:c2:69:48:f1:d9:1f:c6:62:1d:dc:71:3b:f7:f6:31:f3: de:a9:ef:17:6e:21:4f:34:95:ef:07:bc:47:d9:91:a0:14:8f: f4:b8:3a:48:ed:36:40:3b:46:75:52:e7:ce:bc:c1:dd:f8:51: 16:1a:e0:60:24:0e:37:3b:78:6c:10:6e:01:87:70:8b:10:8a: 3b:21:f8:e9:60:fb:24:44:00:71:fe:0c:8e:39:3e:c9:46:d1: b2:42:3f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUwNDI0MjI0MTMzWhcNMjUwNTAxMjI0MTMzWjAYMRYwFAYD VQQDEw02ODBhYmUxZS01OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFFfNJ1Cs9neOJFZqal0pIt3txH8AHW5vZzHnFWDKGbbwkKJ60Ya6btSV96B 4No40b9ydP7slz4X9dMUvMuZovCzCXbPx3dYRSyd9LOY1KEz3ddr2I/zBdL2otm3 GFnPiuEnk3GB0K1bdL6xUJ9blqTEuc7SUls3+IVyUcKzTFw1JFin2FJmjjk6VjoD zGgfROc4U0vDuzNIZqIIChKN84NmClrTBDIo9f4L1rRhNSLA1mnfeyvveNDvblnc 2P/LEwTCnpp7fErpGGP9g4aOdLrVoRk+J58rceMs1EflitOUKN7l92NgmXpeYaJb clljB5TVqcnkxO9xCfJq5ImeZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG5GRd8 DE2TzQ9Gf05on4Dtc36YMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX0VAHRqMwvQSdpvBYHr6wKc37USudbhI6MRI+fPWNJ2MMgY6tk0X0 ICyDibAhrNrZpUjadfJx+TIG2K9hSQo+6cuIZUZamNbeHbbPLy6x+7VCKciA1WMb QlEe+3SYpOdS4qDmISzSY8gsttfN3tUyH1VvEMHC4eGZHMtP7iEppQitmIW0kKMT wEL/8KrA216c+Mm4kCMOALN/TZXMSgTkBNXkVcJpSPHZH8ZiHdxxO/f2MfPeqe8X biFPNJXvB7xH2ZGgFI/0uDpI7TZAO0Z1UufOvMHd+FEWGuBgJA43O3hsEG4Bh3CL EIo7IfjpYPskRABx/gyOOT7JRtGyQj/1 -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:22 2025 by rpki-client