$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: 4NBrXwtCd8Cykhq58IBONEOO0psUl3LybgNkmR6fFrE= Subject key identifier: CA:A8:40:27:40:D2:B2:6E:04:1B:BF:0C:43:93:8F:86:E9:62:AC:0E Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 093C Signing time: Mon 12 May 2025 20:06:07 +0000 Manifest this update: Mon 12 May 2025 20:06:06 +0000 Manifest next update: Mon 19 May 2025 20:06:06 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: MOh7s6Y9aYk+bAdxW6VZruWksi5QP50WjinorBt3eiA=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: EalLcrhJ2pf9J6rJzGCAE06JbZRtA/SwMcMPpTqGCFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: May 12 20:06:06 2025 GMT Not After : May 19 20:06:06 2025 GMT Subject: CN=682254ae-ffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:64:85:06:6a:2d:79:53:fa:43:a8:37:e5: 4c:1b:08:c3:ef:e4:2e:a9:28:43:98:a1:fe:06:74: 7d:80:6f:28:b0:49:3f:f9:39:ef:ca:03:2f:22:74: ca:8c:46:83:48:8f:00:6f:86:da:ba:5e:4e:03:c6: 5f:04:3a:da:b5:2c:b9:07:20:2e:e3:42:6b:8c:61: 8a:99:ea:ae:a9:0b:3d:be:66:db:8a:81:4f:79:dc: 5d:40:8a:f6:87:39:f7:8d:e0:83:d3:1f:bb:14:96: df:c5:ea:e4:a6:51:11:f9:cd:17:ca:ab:5d:41:99: b1:e8:f7:4e:ba:ca:35:c1:ab:ee:9f:36:27:5f:37: b0:92:e2:d2:61:b9:7d:45:7d:16:aa:d0:e6:d2:00: 5c:d8:1a:02:0c:a6:27:c7:4a:32:a4:f2:1c:dc:5e: 64:51:d5:2f:9f:c8:76:c6:34:21:34:e4:97:b8:b1: 0b:00:12:b3:5f:fd:d6:f5:12:60:7e:48:be:27:55: c0:9e:8c:ba:03:a3:82:85:4d:75:3e:a0:aa:d6:6c: 9f:1d:22:47:15:74:74:17:5c:82:d2:76:45:9b:49: c9:65:9f:d5:1e:9e:1e:9c:dd:81:83:95:06:6f:40: b7:b5:a8:d7:5e:54:d0:84:6b:df:4e:d4:7d:d4:b7: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A8:40:27:40:D2:B2:6E:04:1B:BF:0C:43:93:8F:86:E9:62:AC:0E X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:7f:ac:1c:10:2a:6b:c5:c4:53:76:a9:b3:5f:ef:38:60:e0: a3:b2:fc:e7:fb:33:22:fe:a7:09:29:af:05:3e:42:6f:e0:b2: 09:71:61:9b:c7:b2:35:55:a3:9f:7f:e2:f9:73:9b:b2:ea:1e: 24:9b:39:d1:42:d7:e0:2a:24:a6:f3:63:90:f6:9e:a7:c0:05: 22:82:e7:bd:6f:62:34:03:35:95:ee:01:aa:e0:80:c6:6d:c6: cc:6f:10:8c:33:cf:44:17:86:c0:33:45:2f:c5:fb:44:84:e6: 43:f3:ae:e9:27:cd:88:fe:b6:5f:37:04:55:05:18:a1:d9:44: 6c:22:2b:b8:5a:62:e3:1d:0b:06:6e:42:36:a5:9c:26:14:d3: d9:70:fc:77:6f:23:6c:05:2a:ef:8c:de:90:3a:85:d5:1a:e7: 28:ef:e8:54:53:ed:e3:30:00:c8:c4:85:9e:bd:72:21:fb:e6: 40:d9:5b:be:72:d7:e8:75:be:bf:a3:6b:cd:00:c1:a1:6b:6d: 2b:3e:8c:7a:00:99:59:2a:32:36:55:a9:2b:a5:2c:48:5f:ca: ce:58:d5:b1:75:e5:9e:aa:2a:9b:47:52:8f:d0:e9:6f:69:00: 22:e8:3c:c2:13:55:b3:da:b4:63:d9:5e:db:ca:b1:65:9d:0b: 28:36:35:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjUwNTEyMjAwNjA2WhcNMjUwNTE5MjAwNjA2WjAYMRYwFAYD VQQDEw02ODIyNTRhZS1mZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VNkhQZqLXlT+kOoN+VMGwjD7+QuqShDmKH+BnR9gG8osEk/+TnvygMvInTK jEaDSI8Ab4baul5OA8ZfBDratSy5ByAu40JrjGGKmequqQs9vmbbioFPedxdQIr2 hzn3jeCD0x+7FJbfxerkplER+c0XyqtdQZmx6PdOuso1wavunzYnXzewkuLSYbl9 RX0WqtDm0gBc2BoCDKYnx0oypPIc3F5kUdUvn8h2xjQhNOSXuLELABKzX/3W9RJg fki+J1XAnoy6A6OChU11PqCq1myfHSJHFXR0F1yC0nZFm0nJZZ/VHp4enN2Bg5UG b0C3tajXXlTQhGvfTtR91Lf5UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqoQCdA 0rJuBBu/DEOTj4bpYqwOMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAf6wcECprxcRTdqmzX+84YOCjsvzn+zMi/qcJKa8FPkJv4LIJcWGb x7I1VaOff+L5c5uy6h4kmznRQtfgKiSm82OQ9p6nwAUigue9b2I0AzWV7gGq4IDG bcbMbxCMM89EF4bAM0UvxftEhOZD867pJ82I/rZfNwRVBRih2URsIiu4WmLjHQsG bkI2pZwmFNPZcPx3byNsBSrvjN6QOoXVGuco7+hUU+3jMADIxIWevXIh++ZA2Vu+ ctfodb6/o2vNAMGha20rPox6AJlZKjI2VakrpSxIX8rOWNWxdeWeqiqbR1KP0Olv aQAi6DzCE1Wz2rRj2V7byrFlnQsoNjXo -----END CERTIFICATE-----Generated at Wed May 14 10:36:19 2025 by rpki-client