$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: aauMg/DsyrVipTo2UJQLUzdHSUpSF5ij7SemaW0B9+I= Subject key identifier: B4:38:33:5D:7A:39:0A:F6:FA:55:D6:1C:1D:49:45:0C:68:6F:AC:8A Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0128 Signing time: Sat 17 May 2025 04:13:16 +0000 Manifest this update: Sat 17 May 2025 04:13:16 +0000 Manifest next update: Sat 24 May 2025 04:13:16 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: s8IamogfPpw93rV0COyYkw1Mxr9koaNTdVVPLUvgiQY=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: May 17 04:13:16 2025 GMT Not After : May 24 04:13:16 2025 GMT Subject: CN=68280cdc-115f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:78:2e:0b:a0:0b:ff:2e:1c:b2:42:de:27: 31:98:0d:cb:28:47:9e:75:cf:53:3a:64:7a:c9:b8: bb:61:76:05:f3:e3:0c:c8:a0:77:1b:d9:28:37:65: 52:4b:ec:66:00:a1:35:27:45:11:6f:df:b1:ef:63: 53:58:48:b7:03:59:0f:5d:1b:b5:d6:b2:88:7e:03: b4:4c:eb:88:2a:5a:1d:54:cc:ed:2a:e2:6e:9e:c3: fb:de:00:97:a9:c6:74:e9:be:14:b5:f3:13:16:5e: 0c:54:f2:78:63:5e:85:74:78:b1:d7:cd:9b:5d:e3: cd:59:1a:a7:65:59:43:ff:bd:5e:98:e2:24:75:d1: b9:40:28:91:a9:8e:db:17:57:1a:2c:04:fe:db:62: 3d:73:19:eb:56:39:bd:4c:2a:84:44:99:94:bf:5e: 8e:28:4c:75:5b:8e:44:67:89:42:29:52:f1:d9:9e: 28:c1:6f:cd:9b:d4:62:be:2c:70:01:75:f7:68:fa: 86:41:34:6a:78:4f:e8:82:50:1b:89:8c:94:15:df: aa:13:dc:fc:20:ef:0a:3a:19:82:a6:1b:90:15:59: 76:16:36:ad:37:f9:ba:07:a0:6e:b5:89:2d:6f:8c: b7:95:b9:e9:d4:2d:d3:7b:d1:8b:b7:39:e5:b6:8d: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:33:5D:7A:39:0A:F6:FA:55:D6:1C:1D:49:45:0C:68:6F:AC:8A X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:db:74:e9:86:1f:de:89:8e:fb:ca:9b:8a:d4:d3:1d:72:20: ab:4f:fa:0c:7b:32:cd:d4:75:2c:25:49:07:fc:6e:a9:43:86: f1:27:96:67:f6:8b:30:8b:e0:63:ee:89:4a:d5:73:4a:4d:5f: d8:9c:13:8c:b0:03:5e:3f:b3:10:2d:b5:83:34:3b:70:80:6d: cb:b8:bf:3f:21:78:5f:21:1f:9b:fa:82:38:a1:a6:7f:9d:d6: cf:87:15:5c:22:b0:f7:3b:41:4e:92:50:a5:6a:ca:14:a1:7c: 46:b1:c0:ae:5d:c7:8d:72:51:01:96:a3:32:1f:a5:0a:bf:f2: 01:c2:60:93:3b:39:d8:4c:06:87:45:6f:90:9a:e7:28:90:1f: 3f:d5:c8:70:94:34:0c:b4:91:ae:6d:6d:84:8a:cb:b7:b0:c6: 77:17:cb:c9:bc:0c:e7:67:ae:d2:35:7a:db:14:9d:27:db:f0: fc:e3:35:22:36:3b:f7:08:74:8a:c0:90:b6:85:96:3d:4b:33: 94:e4:ee:97:c0:a2:ff:8b:21:5d:75:56:7e:29:f4:d1:4c:0a: 45:df:06:dc:d2:ca:4d:f6:b7:af:fb:19:8c:24:fa:e1:89:3f: d0:70:97:27:3f:e4:ba:80:49:76:3c:85:5a:2a:1d:69:bc:6c: a3:56:e2:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUwNTE3MDQxMzE2WhcNMjUwNTI0MDQxMzE2WjAYMRYwFAYD VQQDEw02ODI4MGNkYy0xMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Yx4LgugC/8uHLJC3icxmA3LKEeedc9TOmR6ybi7YXYF8+MMyKB3G9koN2VS S+xmAKE1J0URb9+x72NTWEi3A1kPXRu11rKIfgO0TOuIKlodVMztKuJunsP73gCX qcZ06b4UtfMTFl4MVPJ4Y16FdHix182bXePNWRqnZVlD/71emOIkddG5QCiRqY7b F1caLAT+22I9cxnrVjm9TCqERJmUv16OKEx1W45EZ4lCKVLx2Z4owW/Nm9Rivixw AXX3aPqGQTRqeE/oglAbiYyUFd+qE9z8IO8KOhmCphuQFVl2FjatN/m6B6ButYkt b4y3lbnp1C3Te9GLtznlto0L3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQ4M116 OQr2+lXWHB1JRQxob6yKMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM23Tphh/eiY77ypuK1NMdciCrT/oMezLN1HUsJUkH/G6pQ4bxJ5Zn 9oswi+Bj7olK1XNKTV/YnBOMsANeP7MQLbWDNDtwgG3LuL8/IXhfIR+b+oI4oaZ/ ndbPhxVcIrD3O0FOklClasoUoXxGscCuXceNclEBlqMyH6UKv/IBwmCTOznYTAaH RW+QmucokB8/1chwlDQMtJGubW2Eisu3sMZ3F8vJvAznZ67SNXrbFJ0n2/D84zUi Njv3CHSKwJC2hZY9SzOU5O6XwKL/iyFddVZ+KfTRTApF3wbc0spN9rev+xmMJPrh iT/QcJcnP+S6gEl2PIVaKh1pvGyjVuJl -----END CERTIFICATE-----Generated at Sat May 17 13:03:30 2025 by rpki-client