$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json) Hash identifier: QdH0QipWri7ZWKzzx2tZ9hriB9AyqYPXDFMm5yiJkZ8= Subject key identifier: F8:AC:38:6E:BE:6A:E1:47:45:2B:A2:A2:19:9B:2E:DE:F8:96:3A:56 Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft Manifest number: 4C Signing time: Sun 11 May 2025 06:06:12 +0000 Manifest this update: Sun 11 May 2025 06:06:12 +0000 Manifest next update: Sun 18 May 2025 06:06:12 +0000 Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: 6kF3bkhnuLYE5fnq7Msew5/16zkZ1gr0cuU9YvaVtIs=) 2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Validity Not Before: May 11 06:06:12 2025 GMT Not After : May 18 06:06:12 2025 GMT Subject: CN=68203e54-06bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:51:d1:0c:df:57:9b:3b:5d:18:b8:1c:ce: ba:81:9b:63:90:16:17:4c:75:b1:41:ac:1d:9a:e7: 98:16:db:c9:7a:1b:bc:dc:1d:b8:54:6e:5b:b1:1e: 35:b1:cd:16:0f:b5:a4:6f:86:00:36:e5:ed:cb:89: 30:d8:4b:fd:fa:f8:47:01:2f:57:28:bd:25:22:51: 85:c8:73:cb:df:74:94:2c:51:10:fe:a5:ac:c3:8c: ac:99:e8:cb:20:5f:af:52:87:3d:5d:04:f3:24:0d: 68:5e:71:4a:a9:13:21:3a:89:dd:51:58:73:18:76: e2:e4:69:0f:37:b0:37:c9:b8:3c:fb:cc:e6:41:d0: f8:1a:4a:b0:d6:83:35:f8:e7:b4:35:c2:ca:de:e0: 25:aa:e9:5a:8b:d6:6f:ce:d4:78:6b:15:ca:0a:7f: 0c:d5:33:32:d2:dc:8a:f6:b3:49:7a:4d:6d:05:c8: d4:77:b2:68:3c:35:ca:9a:47:53:e7:1c:9b:a5:48: 74:09:71:f0:09:cb:0c:91:25:da:95:23:64:b8:7e: 18:d2:0f:7f:5f:b4:9b:6f:da:e6:dd:0a:14:ac:a0: b8:c1:95:7d:3b:d5:6d:df:5e:92:67:6c:e8:f9:44: 1d:45:d9:21:d1:e4:37:40:bd:2a:48:3b:81:cc:ce: d4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AC:38:6E:BE:6A:E1:47:45:2B:A2:A2:19:9B:2E:DE:F8:96:3A:56 X509v3 Authority Key Identifier: keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:41:b3:82:0e:27:03:0e:f7:52:14:ff:a6:aa:ae:a6:55:cb: 10:47:96:bc:a2:d0:2a:a8:0f:0d:32:dd:20:79:1e:30:72:d8: e0:db:4f:94:11:03:e7:8b:69:d4:38:fc:c9:4e:b2:05:38:3c: b7:12:03:98:ba:85:b2:f1:ff:85:cb:7e:28:bb:1e:2d:ef:8b: 4f:bd:2a:cf:ea:dd:b6:74:d0:5c:8f:00:a1:ee:80:42:7b:f6: e3:78:af:55:02:17:7f:f3:95:05:e7:f5:45:87:c4:c0:63:ff: 6d:fc:af:e2:ce:8f:0b:7a:31:37:f9:4e:2c:5b:d7:e4:8b:3c: 8b:03:96:f2:f1:54:3f:e4:0e:71:22:de:de:b8:80:b3:d7:62: d2:86:f3:07:57:bc:9d:cd:7c:b5:5d:1f:96:b6:49:94:8e:81: 1b:27:26:1b:08:e0:06:dd:14:47:08:04:4c:94:0a:df:3f:57: 4f:41:ae:f2:2c:4f:41:da:b7:27:6f:0e:2c:0a:9c:9b:f3:e8: 52:4b:7f:02:84:1b:ed:22:49:a0:39:f9:e7:22:45:df:23:63: 17:52:0a:c7:51:69:10:34:72:98:d5:a8:ef:68:61:21:27:08: cb:1e:98:f6:d7:3e:38:8b:5f:5c:0c:30:d2:85:48:25:23:88: 3a:7d:da:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoNEY5RUZENDNCQTc5QTM0OTQ1NTEwOURCMjAwODQ1QTg5 MDhDREM1QzAeFw0yNTA1MTEwNjA2MTJaFw0yNTA1MTgwNjA2MTJaMBgxFjAUBgNV BAMTDTY4MjAzZTU0LTA2YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDac1HRDN9XmztdGLgczrqBm2OQFhdMdbFBrB2a55gW28l6G7zcHbhUbluxHjWx zRYPtaRvhgA25e3LiTDYS/36+EcBL1covSUiUYXIc8vfdJQsURD+pazDjKyZ6Msg X69Shz1dBPMkDWhecUqpEyE6id1RWHMYduLkaQ83sDfJuDz7zOZB0PgaSrDWgzX4 57Q1wsre4CWq6VqL1m/O1HhrFcoKfwzVMzLS3Ir2s0l6TW0FyNR3smg8NcqaR1Pn HJulSHQJcfAJywyRJdqVI2S4fhjSD39ftJtv2ubdChSsoLjBlX071W3fXpJnbOj5 RB1F2SHR5DdAvSpIO4HMztTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+Kw4br5q 4UdFK6KiGZsu3viWOlYwHwYDVR0jBBgwFoAUT579Q7p5o0lFUQnbIAhFqJCM3Fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzJGNzIyQTk4QzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDU3OVE3cDVvMGxGVVFuYklBaEZxSkNNM0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzJGNzIyQTk4QzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBs RlVRbmJJQWhGcUpDTTNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVBs4IOJwMO91IU/6aqrqZVyxBHlryi0CqoDw0y3SB5HjBy2ODbT5QR A+eLadQ4/MlOsgU4PLcSA5i6hbLx/4XLfii7Hi3vi0+9Ks/q3bZ00FyPAKHugEJ7 9uN4r1UCF3/zlQXn9UWHxMBj/238r+LOjwt6MTf5Tixb1+SLPIsDlvLxVD/kDnEi 3t64gLPXYtKG8wdXvJ3NfLVdH5a2SZSOgRsnJhsI4AbdFEcIBEyUCt8/V09BrvIs T0HatydvDiwKnJvz6FJLfwKEG+0iSaA5+eciRd8jYxdSCsdRaRA0cpjVqO9oYSEn CMsemPbXPjiLX1wMMNKFSCUjiDp92q0= -----END CERTIFICATE-----Generated at Tue May 13 02:30:47 2025 by rpki-client