$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: c3EcJaKxFBs7L1rzIM6rQlhTnMrM7hajROcvSuBuRhw= Subject key identifier: 0B:84:B1:CD:A2:50:B5:DE:57:E2:02:B4:30:DE:08:E8:FA:F4:E8:4E Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 1A Signing time: Tue 13 May 2025 07:12:46 +0000 Manifest this update: Tue 13 May 2025 07:12:46 +0000 Manifest next update: Tue 20 May 2025 07:12:46 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: JWBCKbRrAHnbA3ol1ZFLyTho6uJnEWCCQCyLrg0TLSw=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: wilBGqna+OfcXED1b/uTuE5R5bjXwDBDwAo+DwpXl+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: May 13 07:12:46 2025 GMT Not After : May 20 07:12:46 2025 GMT Subject: CN=6822f0ee-a648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:41:b7:be:af:0b:56:0a:d5:fa:93:04:e9: 34:c9:cd:87:23:8d:2c:e5:48:61:0a:87:46:b0:58: 28:b1:70:3b:e4:87:64:d1:5f:57:8d:69:60:65:c2: 2f:c8:0c:9a:dc:0c:23:4c:dd:3b:f7:42:8e:d5:e3: 34:15:9a:6a:3a:95:74:15:e3:37:5b:97:ee:e8:25: c3:90:48:1a:4e:60:43:3c:51:ef:de:34:e3:11:37: 46:e1:61:b4:f8:35:d0:f8:18:3f:da:61:6d:73:52: 99:00:cc:db:e9:f0:95:f0:c3:fb:18:c8:3c:78:e5: 02:d4:13:ee:d2:aa:1f:ea:51:ab:56:1d:61:62:35: 9e:74:73:49:4b:0d:89:11:16:f6:34:0e:79:91:2b: b7:4f:79:da:a9:07:c6:e6:2b:a4:4f:9c:18:bc:98: c5:92:87:f8:7d:8f:81:07:98:d4:f7:35:7a:e3:d6: 88:80:d6:12:e6:42:cd:64:eb:12:09:a0:34:50:e6: 3c:38:aa:9f:a8:74:80:a5:e7:99:cd:cd:37:32:71: 60:38:ae:ab:88:b9:42:e5:b5:4e:8b:65:6b:4c:e8: 12:2f:52:6d:63:f2:ce:b8:53:45:19:b5:c5:56:38: 4f:0a:c7:17:97:6a:06:7b:a3:84:8c:16:fe:1e:14: 4f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:B1:CD:A2:50:B5:DE:57:E2:02:B4:30:DE:08:E8:FA:F4:E8:4E X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:6a:6c:07:4f:2e:34:51:f4:72:17:e8:33:0e:fd:1a:cc:98: a1:a7:0b:e6:c4:62:55:a4:0f:3f:27:d5:a5:de:85:d2:c0:e7: 05:87:35:16:00:70:97:9c:40:9d:00:d6:21:2d:de:6c:56:67: f2:6a:5f:9e:46:8d:c1:f0:c2:6f:a8:a7:ca:79:1a:bc:8d:63: 03:5c:e1:00:07:6a:35:c6:27:88:da:e7:6d:c9:cc:ef:1d:04: fe:1b:8e:81:d6:5c:8b:73:81:a1:9f:eb:b0:d0:89:68:0a:ca: 12:e9:d7:0e:43:97:2a:e5:33:d2:89:b7:f8:30:f2:a3:d9:88: 42:a9:1d:b9:98:e6:a9:cb:d7:13:ff:e6:3a:8d:a4:90:f1:56: 33:13:88:6b:78:6b:5d:12:d1:4c:3e:7c:7f:87:a0:e8:46:24: f8:b8:0c:cf:eb:04:f2:e7:37:82:2e:9e:fe:dc:52:d7:21:6c: e3:19:f0:de:5a:ff:b5:de:a8:69:78:7d:34:c1:cc:40:38:83: b6:c5:f2:74:c3:6d:ab:fb:79:8e:8c:49:12:8f:3a:33:ac:cb: b7:76:86:40:4a:50:68:e8:75:0a:3e:ce:c2:b9:9c:81:c1:fd: 14:52:7d:50:c5:ac:82:32:49:ba:65:f3:51:16:c3:03:fc:96: 9c:cb:13:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTA1MTMwNzEyNDZaFw0yNTA1MjAwNzEyNDZaMBgxFjAUBgNV BAMTDTY4MjJmMGVlLWE2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGSkG3vq8LVgrV+pME6TTJzYcjjSzlSGEKh0awWCixcDvkh2TRX1eNaWBlwi/I DJrcDCNM3Tv3Qo7V4zQVmmo6lXQV4zdbl+7oJcOQSBpOYEM8Ue/eNOMRN0bhYbT4 NdD4GD/aYW1zUpkAzNvp8JXww/sYyDx45QLUE+7Sqh/qUatWHWFiNZ50c0lLDYkR FvY0DnmRK7dPedqpB8bmK6RPnBi8mMWSh/h9j4EHmNT3NXrj1oiA1hLmQs1k6xIJ oDRQ5jw4qp+odICl55nNzTcycWA4rquIuULltU6LZWtM6BIvUm1j8s64U0UZtcVW OE8KxxeXagZ7o4SMFv4eFE8vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC4SxzaJQ td5X4gK0MN4I6Pr06E4wHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMtqbAdPLjRR9HIX6DMO/RrMmKGnC+bEYlWkDz8n1aXehdLA5wWHNRYA cJecQJ0A1iEt3mxWZ/JqX55GjcHwwm+op8p5GryNYwNc4QAHajXGJ4ja523JzO8d BP4bjoHWXItzgaGf67DQiWgKyhLp1w5DlyrlM9KJt/gw8qPZiEKpHbmY5qnL1xP/ 5jqNpJDxVjMTiGt4a10S0Uw+fH+HoOhGJPi4DM/rBPLnN4Iunv7cUtchbOMZ8N5a /7XeqGl4fTTBzEA4g7bF8nTDbav7eY6MSRKPOjOsy7d2hkBKUGjodQo+zsK5nIHB /RRSfVDFrIIySbpl81EWwwP8lpzLE3M= -----END CERTIFICATE-----Generated at Wed May 14 10:27:13 2025 by rpki-client