$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: zVSgNK107+rWoe9bEhOF6h8eDKgbCqeTKDaNt13QFdY= Subject key identifier: 7F:73:66:58:D8:7F:11:9E:25:20:D5:1D:58:6E:80:9D:30:46:30:2A Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 036B Signing time: Sun 11 May 2025 00:29:57 +0000 Manifest this update: Sun 11 May 2025 00:29:57 +0000 Manifest next update: Sun 18 May 2025 00:29:57 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: 1csyfapO4TFyPlrfvG/01qcl7k6JKbBIQx4tT2mI1+M=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: May 11 00:29:57 2025 GMT Not After : May 18 00:29:57 2025 GMT Subject: CN=681fef85-a41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:af:84:c2:fe:2b:d3:da:e4:98:3d:55:7a:0b: 09:fd:fd:e5:95:56:56:1c:3e:d1:f7:ed:83:6d:8c: 67:1f:76:59:ad:46:bc:29:9a:04:38:2f:93:78:b5: 4f:05:a9:28:85:ea:07:a5:c4:ce:78:11:bc:9c:90: 62:91:4a:91:a1:2e:39:9c:f5:f9:48:c0:a6:57:3f: 4b:c0:42:79:c7:c2:96:a0:5f:08:78:95:a9:c6:5e: de:fc:77:cd:a6:f3:7e:fd:4a:3e:40:15:48:9c:f7: f7:ff:18:c8:83:55:39:5c:79:cc:1c:9a:9b:ad:89: cb:df:45:7d:b0:5b:b0:d3:af:ad:ae:c6:1a:3d:03: 13:9c:a7:78:ec:ba:30:d0:d0:2e:4e:b1:dc:7a:a2: f9:e0:90:a5:9c:3a:71:c4:6d:f5:81:ec:d5:c6:0b: a2:cf:20:e2:ac:df:bb:cb:76:ce:f8:c3:5c:6e:d8: 9e:dd:9e:08:c3:59:5e:18:5c:26:d3:ef:16:d1:d1: a8:25:f4:6c:0f:28:dd:b5:e7:bb:5b:2f:2a:fd:0e: 4f:3a:f0:9b:5c:ff:e1:5d:ad:84:ad:7a:4c:99:e0: af:51:10:38:01:55:3d:35:fa:82:3f:90:da:24:87: b3:2b:55:68:7e:3d:fb:01:98:0c:6e:96:2d:50:22: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:66:58:D8:7F:11:9E:25:20:D5:1D:58:6E:80:9D:30:46:30:2A X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:02:5e:c1:15:cb:ca:a3:c4:cf:a3:30:8b:f5:bf:55:b5:93: e0:d4:be:53:b0:23:d6:b1:8a:25:15:52:a0:f8:32:c5:77:ed: ce:55:15:92:48:70:56:47:67:20:a7:f8:bd:e5:fc:05:60:1b: 7a:4c:a8:4a:fc:bb:49:5a:de:25:b8:63:b4:6e:35:ca:40:3f: 2b:1d:49:36:c2:1a:79:f4:01:7c:70:1c:4c:12:22:a2:5a:ec: 6c:ca:a9:28:33:50:7a:b3:17:b5:73:8f:9e:cf:9b:f2:f6:6f: 72:96:6c:6f:1d:7d:ce:0f:c9:3a:64:e8:53:0e:53:f3:4e:35: 33:11:28:93:83:14:f8:49:6d:de:41:93:16:78:aa:8a:eb:b9: 14:79:d3:e0:5d:49:c6:22:52:28:79:7f:c4:8f:4c:bd:24:d6: 66:43:d3:ec:fb:d6:8d:24:4d:08:b0:33:e8:b6:3f:7f:f5:93: ee:1a:d1:44:ae:ed:cb:b3:7d:82:db:4a:17:e1:92:11:b8:8e: 34:c8:91:44:4b:f6:0d:7f:d9:80:84:74:52:c9:c6:e9:94:4f: 6a:8c:49:eb:d2:33:23:08:36:a5:56:71:1a:42:dc:59:e5:f9: c7:a7:e9:ca:b1:72:5e:32:a1:da:d0:4d:f3:7f:e5:4e:dd:e3: 6c:42:41:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwNTExMDAyOTU3WhcNMjUwNTE4MDAyOTU3WjAYMRYwFAYD VQQDEw02ODFmZWY4NS1hNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6q+Ewv4r09rkmD1VegsJ/f3llVZWHD7R9+2DbYxnH3ZZrUa8KZoEOC+TeLVP BakoheoHpcTOeBG8nJBikUqRoS45nPX5SMCmVz9LwEJ5x8KWoF8IeJWpxl7e/HfN pvN+/Uo+QBVInPf3/xjIg1U5XHnMHJqbrYnL30V9sFuw06+trsYaPQMTnKd47Low 0NAuTrHceqL54JClnDpxxG31gezVxguizyDirN+7y3bO+MNcbtie3Z4Iw1leGFwm 0+8W0dGoJfRsDyjdtee7Wy8q/Q5POvCbXP/hXa2ErXpMmeCvURA4AVU9NfqCP5Da JIezK1Vofj37AZgMbpYtUCI+qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9zZljY fxGeJSDVHVhugJ0wRjAqMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnAl7BFcvKo8TPozCL9b9VtZPg1L5TsCPWsYolFVKg+DLFd+3OVRWS SHBWR2cgp/i95fwFYBt6TKhK/LtJWt4luGO0bjXKQD8rHUk2whp59AF8cBxMEiKi WuxsyqkoM1B6sxe1c4+ez5vy9m9ylmxvHX3OD8k6ZOhTDlPzTjUzESiTgxT4SW3e QZMWeKqK67kUedPgXUnGIlIoeX/Ej0y9JNZmQ9Ps+9aNJE0IsDPotj9/9ZPuGtFE ru3Ls32C20oX4ZIRuI40yJFES/YNf9mAhHRSycbplE9qjEnr0jMjCDalVnEaQtxZ 5fnHp+nKsXJeMqHa0E3zf+VO3eNsQkF+ -----END CERTIFICATE-----Generated at Mon May 12 07:11:47 2025 by rpki-client