$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: xN06WQ2AdYibhQbBLHq5ojnT86f5pEewJI2o0XWjLdc= Subject key identifier: FB:E1:DD:A3:07:BE:F1:A1:C6:41:68:0F:A7:70:35:0F:66:E1:9B:90 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0135 Signing time: Fri 13 Jun 2025 03:25:48 +0000 Manifest this update: Fri 13 Jun 2025 03:25:47 +0000 Manifest next update: Fri 20 Jun 2025 03:25:47 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: oxX3hUudRS5YzUHRjygS1zz8RyXs/FQRz54lkqG960Y=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Jun 13 03:25:47 2025 GMT Not After : Jun 20 03:25:47 2025 GMT Subject: CN=684b9a3c-3344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:94:45:e4:90:af:7e:b9:d5:d1:61:b3:ba: 25:a8:a9:f5:bf:ff:4d:9b:74:ed:3d:00:e0:71:28: 22:14:d3:e9:ea:fe:38:3a:ef:ce:85:18:68:e1:d2: bc:02:85:08:1e:43:53:af:05:49:cd:60:ed:ff:92: 4b:a0:a9:f0:08:14:53:b8:10:da:e5:00:e7:05:4d: 86:e8:5e:96:07:d0:c6:95:23:4b:c9:e6:94:f0:b2: 7e:a2:ec:dd:7f:3d:d5:88:36:00:54:9f:ec:b1:88: 6d:ad:a0:12:13:3e:99:6b:a0:ba:09:c2:08:db:87: 2e:a6:70:70:ee:0f:75:d3:21:2e:87:b0:c8:81:58: 8f:e4:8e:8b:5b:60:32:42:9b:c1:43:ff:e7:3d:2e: 79:b3:ea:88:bb:21:16:38:77:75:cc:68:cd:c1:4e: 81:d0:0d:9e:59:e2:90:89:99:4d:48:51:f4:c6:08: b7:6f:2f:be:08:bf:a2:a2:2a:4c:df:d6:0c:2b:35: 7b:e3:e7:9a:67:ab:01:a8:fa:eb:b8:98:f8:2c:62: 1e:46:18:de:0b:58:56:15:39:c9:01:30:5f:b9:13: eb:8d:9f:f9:5f:d4:c2:65:20:f7:18:95:51:8a:28: d0:52:23:32:a9:18:2c:b7:95:d0:8d:15:6d:2b:9a: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E1:DD:A3:07:BE:F1:A1:C6:41:68:0F:A7:70:35:0F:66:E1:9B:90 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4a:76:7c:e2:dc:24:b2:2e:95:46:42:13:f4:c4:a3:6a:2e: 9d:d2:5b:93:9c:f4:39:ee:06:20:54:e0:41:89:aa:fe:b8:d4: dd:3e:f0:68:56:0c:cc:17:8d:b1:bc:e3:d6:ca:bc:79:30:8e: 4a:e7:00:0b:d2:11:ae:4b:4b:ff:d0:c2:b1:17:db:42:ce:8f: 55:14:7e:e6:58:03:01:f5:1c:1a:53:ad:99:ed:20:ef:ab:db: 13:e4:b9:ca:cb:7c:f8:a0:6e:a4:f1:ae:45:24:9b:7c:d0:70: 2a:6d:f4:eb:e6:91:74:45:6e:ed:f4:b2:38:6b:56:cd:6b:f9: bd:f6:c6:20:60:ae:e5:49:ad:41:fd:2d:de:9c:57:d2:2c:53: 5b:61:22:6d:a3:21:9c:22:fb:27:aa:13:b6:a3:02:66:9e:39: 8a:7c:d5:71:3e:e6:04:e1:ef:1b:c1:12:11:b5:74:6c:11:6b: ec:fc:77:0a:74:49:3a:12:95:49:b9:6b:b9:57:02:c4:d9:37: 5c:c8:79:b5:8a:3f:65:04:70:c0:80:c4:e7:a3:7f:08:f9:3d: b0:d8:d3:0b:20:02:f1:ac:94:18:11:f7:50:02:bb:b9:9a:3e: 6d:04:d0:21:78:16:6f:71:f8:7f:4c:bf:34:16:70:d0:1c:e4: 82:c8:21:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUwNjEzMDMyNTQ3WhcNMjUwNjIwMDMyNTQ3WjAYMRYwFAYD VQQDEw02ODRiOWEzYy0zMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOKUReSQr3651dFhs7olqKn1v/9Nm3TtPQDgcSgiFNPp6v44Ou/OhRho4dK8 AoUIHkNTrwVJzWDt/5JLoKnwCBRTuBDa5QDnBU2G6F6WB9DGlSNLyeaU8LJ+ouzd fz3ViDYAVJ/ssYhtraASEz6Za6C6CcII24cupnBw7g910yEuh7DIgViP5I6LW2Ay QpvBQ//nPS55s+qIuyEWOHd1zGjNwU6B0A2eWeKQiZlNSFH0xgi3by++CL+ioipM 39YMKzV74+eaZ6sBqPrruJj4LGIeRhjeC1hWFTnJATBfuRPrjZ/5X9TCZSD3GJVR iijQUiMyqRgst5XQjRVtK5pMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvh3aMH vvGhxkFoD6dwNQ9m4ZuQMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTSnZ84twksi6VRkIT9MSjai6d0luTnPQ57gYgVOBBiar+uNTdPvBo VgzMF42xvOPWyrx5MI5K5wAL0hGuS0v/0MKxF9tCzo9VFH7mWAMB9RwaU62Z7SDv q9sT5LnKy3z4oG6k8a5FJJt80HAqbfTr5pF0RW7t9LI4a1bNa/m99sYgYK7lSa1B /S3enFfSLFNbYSJtoyGcIvsnqhO2owJmnjmKfNVxPuYE4e8bwRIRtXRsEWvs/HcK dEk6EpVJuWu5VwLE2TdcyHm1ij9lBHDAgMTno38I+T2w2NMLIALxrJQYEfdQAru5 mj5tBNAheBZvcfh/TL80FnDQHOSCyCEt -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:40 2025 by rpki-client