$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json) Hash identifier: oJK3Ynd24vGartwa1DXAWIUgCAlUqirdrG1xeSfo83o= Subject key identifier: 94:5A:63:9E:52:43:03:A6:86:FA:34:C7:D2:DA:4B:EB:77:01:DF:AA Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft Manifest number: 0115 Signing time: Thu 03 Jul 2025 05:00:24 +0000 Manifest this update: Thu 03 Jul 2025 05:00:24 +0000 Manifest next update: Thu 10 Jul 2025 05:00:24 +0000 Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: XtVrEx/wiK4dFiL7d7E06m+rLyWTcneT0qdZ9HI5Jj8=) 2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: pBuyb8tUeoDi0BGNU1PyCW1Le78/gB9wiXHTRO2r0pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Validity Not Before: Jul 3 05:00:24 2025 GMT Not After : Jul 10 05:00:24 2025 GMT Subject: CN=68660e68-a262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:58:af:4f:b1:12:35:0c:d0:86:44:f0:68: 7e:9f:1d:58:03:70:bf:26:01:ed:fb:6d:ec:7a:ac: d6:20:77:c3:74:5d:d9:1a:94:31:c0:9a:82:ef:2f: e6:ae:7b:d2:3f:62:c9:2d:1d:d3:cf:1d:48:64:2c: be:fe:8f:5a:76:a7:0c:be:83:44:6b:61:cd:70:54: 82:63:76:57:9d:38:4f:33:fa:12:30:df:fb:7a:f2: b3:13:3e:c1:70:9b:68:10:e4:42:68:54:3f:2d:91: b8:51:11:01:99:8a:fe:96:e3:38:a8:4c:f4:52:58: 79:d1:e0:a1:1b:1d:cd:be:1e:78:21:96:4c:04:aa: 67:b2:f3:ec:dd:21:6f:88:05:28:50:c5:cb:8a:58: 7d:72:32:e3:44:44:bd:84:f8:0a:71:15:8e:f1:35: ba:ec:bf:6c:16:4c:84:bc:75:7c:59:d2:ab:db:42: 2f:7f:ee:c8:ce:83:03:cd:07:21:4e:be:d6:58:03: b7:41:36:a2:0b:f3:82:29:ae:5c:fc:bc:83:38:a7: 79:08:b8:00:62:1e:9b:87:3d:bf:19:54:62:04:6c: 41:d7:4c:0d:e7:4a:c3:90:b1:3b:d8:0a:5e:7a:8e: 80:ce:09:0c:dd:59:b5:9c:14:9a:15:fc:f6:c5:cf: e5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:63:9E:52:43:03:A6:86:FA:34:C7:D2:DA:4B:EB:77:01:DF:AA X509v3 Authority Key Identifier: keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:16:39:bd:43:b8:cb:a0:23:e7:b2:61:ce:3b:99:f1:6a:54: b4:5d:c1:35:95:58:f5:6e:63:51:bb:73:fc:60:40:37:97:3c: 0f:0f:77:ba:75:6e:55:a4:47:e7:17:f3:ba:2d:de:0e:77:2d: 8f:4d:49:52:0e:da:29:66:c4:79:65:a1:b9:38:e9:88:9a:47: 07:d7:5b:0c:0a:54:e1:6e:14:f0:f5:49:28:66:eb:23:28:61: ab:2c:37:69:a8:17:c7:1d:ec:fc:1d:28:54:00:d4:27:56:99: c3:58:6f:d7:97:5c:02:d3:59:d9:10:4f:52:14:07:81:c1:cc: c0:14:30:92:af:6c:c9:56:a7:52:ca:5e:c3:a6:04:d9:84:e0: 66:de:08:fc:1f:8c:18:93:da:72:98:f8:c7:b1:0c:17:a1:fb: 18:fd:8f:2a:9e:50:bc:26:7f:5a:80:35:83:3b:b6:36:0b:c3: 4c:20:c9:c7:3c:b3:7e:d3:3f:33:50:5e:20:4e:0d:6f:93:88: 96:1c:86:df:70:70:aa:e4:ae:66:20:d3:55:47:7f:a6:30:70: 17:56:3f:6b:b3:55:24:db:7e:08:bb:59:6a:9c:38:0d:3d:da: 5e:60:01:34:4e:2d:9c:6f:40:61:dd:61:fc:de:60:fc:ee:2f: 24:62:b0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx NTI4RUNFN0EwHhcNMjUwNzAzMDUwMDI0WhcNMjUwNzEwMDUwMDI0WjAYMRYwFAYD VQQDEw02ODY2MGU2OC1hMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkZYr0+xEjUM0IZE8Gh+nx1YA3C/JgHt+23seqzWIHfDdF3ZGpQxwJqC7y/m rnvSP2LJLR3Tzx1IZCy+/o9adqcMvoNEa2HNcFSCY3ZXnThPM/oSMN/7evKzEz7B cJtoEORCaFQ/LZG4UREBmYr+luM4qEz0Ulh50eChGx3Nvh54IZZMBKpnsvPs3SFv iAUoUMXLilh9cjLjRES9hPgKcRWO8TW67L9sFkyEvHV8WdKr20Ivf+7IzoMDzQch Tr7WWAO3QTaiC/OCKa5c/LyDOKd5CLgAYh6bhz2/GVRiBGxB10wN50rDkLE72Ape eo6AzgkM3Vm1nBSaFfz2xc/lrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRaY55S QwOmhvo0x9LaS+t3Ad+qMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH X2h2dTY5QUJJMTBWS096bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Fjm9Q7jLoCPnsmHOO5nxalS0XcE1lVj1bmNRu3P8YEA3lzwPD3e6 dW5VpEfnF/O6Ld4Ody2PTUlSDtopZsR5ZaG5OOmImkcH11sMClThbhTw9UkoZusj KGGrLDdpqBfHHez8HShUANQnVpnDWG/Xl1wC01nZEE9SFAeBwczAFDCSr2zJVqdS yl7DpgTZhOBm3gj8H4wYk9pymPjHsQwXofsY/Y8qnlC8Jn9agDWDO7Y2C8NMIMnH PLN+0z8zUF4gTg1vk4iWHIbfcHCq5K5mINNVR3+mMHAXVj9rs1Uk234Iu1lqnDgN PdpeYAE0Ti2cb0Bh3WH83mD87i8kYrAV -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:13 2025 by rpki-client