$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: 7a/kXSVPeqxWP9v2iWL0i9U5Y80PpdWAzJuqSvm2y70= Subject key identifier: F5:7D:70:9D:DE:C2:12:74:03:29:11:01:54:0B:C3:CC:AD:98:20:18 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 011D Signing time: Fri 25 Apr 2025 03:50:29 +0000 Manifest this update: Fri 25 Apr 2025 03:50:29 +0000 Manifest next update: Fri 02 May 2025 03:50:29 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: v3tfCHQTv8BgNqWbnvuZrQMtk16LE/T2KKFATJ4FVxo=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Apr 25 03:50:29 2025 GMT Not After : May 2 03:50:29 2025 GMT Subject: CN=680b0685-aef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:60:8a:80:bb:10:2e:a6:8b:83:bc:d4:ac: 5c:65:db:55:90:49:ef:40:e2:1b:88:51:5b:40:db: 6d:8f:df:93:1b:7c:cd:3c:ed:49:14:11:44:af:5a: 7f:ab:e7:da:c7:8c:7b:03:a7:3d:0e:3e:53:78:27: 49:b8:b3:fb:b8:bc:39:ff:27:ce:9c:af:f9:66:e9: 5e:90:1d:32:38:dc:62:7c:6b:1e:a1:65:20:68:6f: 2d:45:45:b7:4e:c1:32:38:d7:12:a0:4b:20:23:a4: d2:9a:40:0d:2e:3b:e7:2a:b8:1f:6a:9c:5a:bf:c7: c6:a9:1b:cd:90:f3:d4:0b:df:56:48:ca:01:13:4f: fa:d4:75:61:8c:f6:b0:04:f3:48:28:ee:8d:ab:0f: e9:c5:9c:19:6e:4a:36:c9:e8:75:dc:36:39:b0:3f: a2:8a:91:b9:ee:44:91:0b:0a:fd:d9:77:b8:e0:cd: b1:91:0a:fd:6f:a4:9a:82:b9:9a:da:a5:ed:d5:4d: 73:03:8e:d6:8d:8b:44:64:f3:dd:6a:d0:95:76:7a: 19:b5:90:13:b0:40:db:4b:76:e6:c1:db:59:63:20: d5:45:a2:06:04:81:57:c1:f8:2a:ce:61:20:16:06: b8:4f:2d:6e:5f:7e:a3:0e:af:3d:ab:3d:53:9a:66: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7D:70:9D:DE:C2:12:74:03:29:11:01:54:0B:C3:CC:AD:98:20:18 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:76:15:a0:ad:69:9e:37:5f:01:51:94:cc:58:ce:b7:7d:93: ad:59:4a:da:32:d4:2b:18:a6:7e:b9:02:37:0d:0b:7c:fa:15: 8f:66:9b:ea:5d:0d:44:a9:45:72:2e:ea:0b:59:2d:9d:47:cf: b4:b0:03:83:77:16:2c:f1:7a:31:62:92:45:76:8a:8a:7c:f0: d6:36:fc:b9:3c:5f:3c:81:8c:92:89:e4:2e:58:95:66:8d:20: af:f1:9f:b8:ec:76:00:e6:cf:fc:99:e3:65:42:6a:ba:63:b1: 27:38:a8:be:12:6c:e1:28:89:40:88:5b:ac:ed:88:fc:44:b3: 2b:22:b8:cd:b1:99:e8:af:f4:47:b6:37:97:fb:37:bc:f3:50: 4c:3b:bc:a2:b5:e8:37:0b:e6:d3:56:3a:20:d8:1a:3e:5c:f9: 91:38:fd:43:e5:1b:63:d5:96:18:aa:b8:55:a0:0c:64:5f:5e: 68:5a:69:10:ef:ea:3d:1f:6e:40:45:0d:b7:5d:17:e8:70:43: 14:e8:f6:55:8a:89:fe:54:72:f4:ba:64:3f:32:ad:2a:86:df: 40:00:46:26:93:5c:4c:c8:60:e6:7b:b0:26:e9:4b:dc:8e:cf: 82:2d:6c:c2:0b:9a:b7:ee:2b:15:f8:0c:08:41:87:a3:8d:ea: 6d:d0:db:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUwNDI1MDM1MDI5WhcNMjUwNTAyMDM1MDI5WjAYMRYwFAYD VQQDEw02ODBiMDY4NS1hZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkpgioC7EC6mi4O81KxcZdtVkEnvQOIbiFFbQNttj9+TG3zNPO1JFBFEr1p/ q+fax4x7A6c9Dj5TeCdJuLP7uLw5/yfOnK/5ZulekB0yONxifGseoWUgaG8tRUW3 TsEyONcSoEsgI6TSmkANLjvnKrgfapxav8fGqRvNkPPUC99WSMoBE0/61HVhjPaw BPNIKO6Nqw/pxZwZbko2yeh13DY5sD+iipG57kSRCwr92Xe44M2xkQr9b6Sagrma 2qXt1U1zA47WjYtEZPPdatCVdnoZtZATsEDbS3bmwdtZYyDVRaIGBIFXwfgqzmEg Fga4Ty1uX36jDq89qz1TmmaACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPV9cJ3e whJ0AykRAVQLw8ytmCAYMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXdhWgrWmeN18BUZTMWM63fZOtWUraMtQrGKZ+uQI3DQt8+hWPZpvq XQ1EqUVyLuoLWS2dR8+0sAODdxYs8XoxYpJFdoqKfPDWNvy5PF88gYySieQuWJVm jSCv8Z+47HYA5s/8meNlQmq6Y7EnOKi+EmzhKIlAiFus7Yj8RLMrIrjNsZnor/RH tjeX+ze881BMO7yiteg3C+bTVjog2Bo+XPmROP1D5Rtj1ZYYqrhVoAxkX15oWmkQ 7+o9H25ARQ23XRfocEMU6PZVion+VHL0umQ/Mq0qht9AAEYmk1xMyGDme7Am6Uvc js+CLWzCC5q37isV+AwIQYejjept0Nu+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:33 2025 by rpki-client