$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: vIy8D3fyv6HwdyMflM3oNds/NaYkYkkl0HXGPA8PXXM= Subject key identifier: F9:12:27:BA:03:1E:EF:2B:49:24:0A:60:A3:B2:E8:72:06:0A:9B:7C Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 28 Signing time: Fri 25 Apr 2025 06:47:07 +0000 Manifest this update: Fri 25 Apr 2025 06:47:06 +0000 Manifest next update: Fri 02 May 2025 06:47:06 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: QJzx83+oDB79koP9ovbCDtfmvjc7Wq/6ZaSQR0sAqVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: Apr 25 06:47:06 2025 GMT Not After : May 2 06:47:06 2025 GMT Subject: CN=680b2fea-5b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e4:90:66:90:93:14:85:59:67:2a:58:87:50: 84:2c:fd:bb:d5:7f:15:64:15:28:b2:21:84:b3:fe: cd:16:32:c1:7b:15:2e:b4:90:8e:9e:62:5c:9d:b1: ee:af:34:9e:0e:b6:6c:d1:2a:1d:ce:1f:9f:93:a3: c9:ae:f5:19:18:54:dc:87:64:0d:79:89:c7:fc:81: 13:43:3a:23:d4:ba:bd:54:32:70:2c:43:91:08:34: 5d:16:d8:f1:c4:fe:61:42:99:81:78:40:12:87:f1: 08:9f:78:38:b9:ac:78:d3:51:da:e3:ef:29:51:ee: 75:d6:9c:9c:3e:9e:3e:e4:e4:46:24:1e:c4:df:1f: 0a:c3:f3:42:f1:54:97:e6:0f:28:de:3e:9c:53:9c: 73:c4:fa:02:54:a2:5f:42:3b:6f:25:6a:68:5d:08: a2:42:42:b6:c3:a3:d7:e4:c3:9a:a7:d3:f9:57:ea: 18:2c:96:aa:d5:4e:b9:4c:61:a3:57:ce:57:e3:2a: 66:94:4f:10:aa:36:62:33:d1:ea:ff:1a:1a:58:d3: 11:85:7d:e7:6b:ff:52:ca:69:4e:72:cc:84:88:97: 4f:4a:3d:2e:9b:41:b8:2c:84:9d:4e:c4:d9:25:d2: 05:c8:9f:c6:75:df:ab:9c:68:13:73:f3:5b:4c:45: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:12:27:BA:03:1E:EF:2B:49:24:0A:60:A3:B2:E8:72:06:0A:9B:7C X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4d:45:00:8c:cd:bd:0e:48:75:ed:ce:c5:46:89:08:cb:b1: 3b:df:49:62:d9:56:17:4f:9a:1b:6d:c5:15:ca:21:98:79:f3: 3a:82:4d:04:19:15:f1:93:59:f6:4b:9a:21:e6:ab:5b:72:f2: 0f:2b:36:3d:40:a5:3f:9e:c7:88:65:f7:eb:75:97:ad:54:2e: 47:9f:30:78:79:bd:1a:b5:a6:b2:ea:6c:3a:4e:b0:76:05:c1: 45:f4:1b:9c:72:e8:b4:21:b4:f9:89:76:e4:9e:1b:b3:82:67: 62:a9:21:b8:55:e1:51:c6:14:7d:fd:1d:99:a4:d2:90:dd:f5: 06:e5:27:5d:c6:51:a2:24:9f:ca:8e:0e:3b:af:4e:63:25:b2: cc:6f:61:e0:01:95:69:8d:59:b3:b0:93:96:67:2a:9c:ec:45: 0f:2f:21:12:70:b7:f1:12:c7:c3:f4:5a:d0:d4:3f:80:e9:47: ac:07:75:f2:1c:f7:84:35:70:2e:c9:63:7e:d1:d6:d1:dc:f9: 6d:aa:b2:13:25:fc:40:61:45:54:94:ff:07:80:2b:ae:70:d6: 0c:c4:30:d2:0f:fa:14:5a:80:82:d6:68:a3:92:08:3f:f7:9c: dc:e5:43:32:a4:bd:cc:67:5b:7d:76:bb:a9:39:03:ae:fa:a3: 61:b3:27:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA0MjUwNjQ3MDZaFw0yNTA1MDIwNjQ3MDZaMBgxFjAUBgNV BAMTDTY4MGIyZmVhLTViNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd5JBmkJMUhVlnKliHUIQs/bvVfxVkFSiyIYSz/s0WMsF7FS60kI6eYlydse6v NJ4OtmzRKh3OH5+To8mu9RkYVNyHZA15icf8gRNDOiPUur1UMnAsQ5EINF0W2PHE /mFCmYF4QBKH8QifeDi5rHjTUdrj7ylR7nXWnJw+nj7k5EYkHsTfHwrD80LxVJfm DyjePpxTnHPE+gJUol9CO28lamhdCKJCQrbDo9fkw5qn0/lX6hgslqrVTrlMYaNX zlfjKmaUTxCqNmIz0er/GhpY0xGFfedr/1LKaU5yzISIl09KPS6bQbgshJ1OxNkl 0gXIn8Z136ucaBNz81tMRadVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+RInugMe 7ytJJApgo7LocgYKm3wwHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ1NRQCMzb0OSHXtzsVGiQjLsTvfSWLZVhdPmhttxRXKIZh58zqCTQQZ FfGTWfZLmiHmq1ty8g8rNj1ApT+ex4hl9+t1l61ULkefMHh5vRq1prLqbDpOsHYF wUX0G5xy6LQhtPmJduSeG7OCZ2KpIbhV4VHGFH39HZmk0pDd9QblJ13GUaIkn8qO DjuvTmMlssxvYeABlWmNWbOwk5ZnKpzsRQ8vIRJwt/ESx8P0WtDUP4DpR6wHdfIc 94Q1cC7JY37R1tHc+W2qshMl/EBhRVSU/weAK65w1gzEMNIP+hRagILWaKOSCD/3 nNzlQzKkvcxnW312u6k5A676o2GzJyg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:14 2025 by rpki-client