$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json) Hash identifier: bBBeFYiNFqQDZBbf4IcKbA+++weGoU+4VAtrdCIFm5s= Subject key identifier: FE:B3:55:FA:97:8E:60:2F:8C:72:59:DD:66:E2:CD:03:FF:CF:85:B3 Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft Manifest number: FC Signing time: Tue 13 May 2025 04:18:52 +0000 Manifest this update: Tue 13 May 2025 04:18:52 +0000 Manifest next update: Tue 20 May 2025 04:18:52 +0000 Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: XV0nle0eq9apdTpdwoAzk+DVSYgMKgxkenbPHzOUFYI=) 2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: pBuyb8tUeoDi0BGNU1PyCW1Le78/gB9wiXHTRO2r0pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Validity Not Before: May 13 04:18:52 2025 GMT Not After : May 20 04:18:52 2025 GMT Subject: CN=6822c82c-b102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:37:72:3f:b8:d3:ae:50:fa:89:3c:6e:00: 8c:10:ca:e9:a9:dd:8c:d1:a6:6c:a9:af:c0:3f:85: b9:fc:63:c0:0e:3b:fb:8b:24:99:00:ea:73:c2:a5: 5a:63:90:d0:7f:00:b2:b9:f7:d4:c3:28:a5:28:2a: 1c:23:4b:93:ed:6f:99:79:7b:e1:ef:52:46:db:40: ce:c9:90:a0:2d:83:27:3e:3a:96:a2:e3:82:6e:25: 8c:6c:ca:ac:f1:0d:23:46:f6:69:0c:92:3d:a0:30: 27:6f:a0:aa:bf:f7:f3:64:18:7b:4b:1a:73:52:38: 64:ff:80:af:d7:3e:23:9a:b6:23:79:3a:f8:c2:67: 7f:43:f4:0a:45:f5:9d:d1:50:c0:dd:ca:0b:62:45: f7:9c:74:fa:0f:1c:6a:be:40:14:d5:e5:8d:4b:ba: a3:48:0f:4a:f6:7c:d2:16:d2:19:08:f9:83:21:47: 6b:98:2e:65:fa:16:cf:32:bf:7b:69:ec:48:fb:4b: d0:a7:9c:86:94:7d:87:70:97:50:6c:f7:f7:74:82: fb:6b:0b:b0:7d:66:f4:1a:af:a1:59:17:ca:d8:91: a3:0b:54:a6:04:2e:1a:c8:2e:0e:2a:c4:43:85:df: d4:45:35:88:28:0a:58:b6:63:a6:e8:9c:1f:23:a1: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:55:FA:97:8E:60:2F:8C:72:59:DD:66:E2:CD:03:FF:CF:85:B3 X509v3 Authority Key Identifier: keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:69:ac:01:1e:4d:d3:7f:84:b2:2b:c6:03:f3:b1:c3:66:b0: ab:12:c3:a7:4f:43:e7:c3:40:c3:56:50:a1:05:65:51:cf:b9: c8:47:ef:7d:4a:f3:d3:21:fb:f9:e6:41:8c:08:e7:0f:f7:cb: 73:10:1d:1c:5c:4c:65:bc:75:fa:09:c6:98:76:5d:59:a4:a3: a9:95:f8:9a:5e:97:fe:a8:34:9f:69:4c:b3:76:4f:f0:38:58: 14:19:49:44:55:17:bc:31:99:4b:c6:09:d4:9e:32:88:ee:68: c5:21:59:b6:98:14:7f:e4:e8:2f:d8:6d:c0:5b:9e:54:6c:22: 84:3e:10:ea:7b:5f:75:88:a5:be:30:f9:41:f6:8f:69:45:1a: 29:90:b0:5b:c8:30:50:f7:81:df:b3:51:e6:1c:7f:0c:20:17: bf:8d:51:c6:a2:0b:ec:a9:ba:6f:d1:80:c4:fd:95:c3:0a:4a: 94:2e:4b:77:e4:4d:32:a9:da:ae:39:df:8c:27:27:d7:23:cf: 76:52:5b:37:65:24:62:20:08:67:79:04:51:bf:cc:69:be:d0: ca:b8:d0:8c:60:e8:19:2d:40:2d:3f:01:0d:fc:62:c6:14:aa: bf:f6:27:fc:b8:d9:42:08:57:39:1a:36:a6:c9:a2:43:32:ea: f1:2b:64:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx NTI4RUNFN0EwHhcNMjUwNTEzMDQxODUyWhcNMjUwNTIwMDQxODUyWjAYMRYwFAYD VQQDEw02ODIyYzgyYy1iMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36A3cj+4065Q+ok8bgCMEMrpqd2M0aZsqa/AP4W5/GPADjv7iySZAOpzwqVa Y5DQfwCyuffUwyilKCocI0uT7W+ZeXvh71JG20DOyZCgLYMnPjqWouOCbiWMbMqs 8Q0jRvZpDJI9oDAnb6Cqv/fzZBh7SxpzUjhk/4Cv1z4jmrYjeTr4wmd/Q/QKRfWd 0VDA3coLYkX3nHT6DxxqvkAU1eWNS7qjSA9K9nzSFtIZCPmDIUdrmC5l+hbPMr97 aexI+0vQp5yGlH2HcJdQbPf3dIL7awuwfWb0Gq+hWRfK2JGjC1SmBC4ayC4OKsRD hd/URTWIKApYtmOm6JwfI6EuLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6zVfqX jmAvjHJZ3WbizQP/z4WzMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH X2h2dTY5QUJJMTBWS096bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAaawBHk3Tf4SyK8YD87HDZrCrEsOnT0Pnw0DDVlChBWVRz7nIR+99 SvPTIfv55kGMCOcP98tzEB0cXExlvHX6CcaYdl1ZpKOplfiaXpf+qDSfaUyzdk/w OFgUGUlEVRe8MZlLxgnUnjKI7mjFIVm2mBR/5Ogv2G3AW55UbCKEPhDqe191iKW+ MPlB9o9pRRopkLBbyDBQ94Hfs1HmHH8MIBe/jVHGogvsqbpv0YDE/ZXDCkqULkt3 5E0yqdquOd+MJyfXI892Uls3ZSRiIAhneQRRv8xpvtDKuNCMYOgZLUAtPwEN/GLG FKq/9if8uNlCCFc5GjamyaJDMurxK2Ti -----END CERTIFICATE-----Generated at Tue May 13 22:57:23 2025 by rpki-client