$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: 20Sdxfp0vZUf2YxMH5/9cZLJn3YC2FYdveRknisf1sI= Subject key identifier: 57:67:49:11:13:A3:C8:60:3D:00:19:1B:1D:37:C5:F3:58:42:1C:E0 Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 32 Signing time: Thu 15 May 2025 06:58:18 +0000 Manifest this update: Thu 15 May 2025 06:58:17 +0000 Manifest next update: Thu 22 May 2025 06:58:17 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: 5uT20BGV4+nFIoAYqDgDUKx+ia9XCtjTVsXaQigGl3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: May 15 06:58:17 2025 GMT Not After : May 22 06:58:17 2025 GMT Subject: CN=6825908a-0b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:40:bb:7b:ad:89:26:93:e2:2d:5b:b7:de: b9:b7:b6:c8:7c:1a:02:d5:e6:55:d3:f1:a0:17:be: 6f:21:6a:de:1a:72:81:3c:1f:e3:4f:cd:6c:7f:53: d0:a1:e8:dd:3d:8d:9e:69:6b:40:56:71:59:2c:2f: 3c:57:20:f3:d2:7d:11:98:53:62:07:b3:b2:a6:f4: 5b:8b:18:3f:a1:01:0d:5b:b3:dd:33:4c:27:fe:de: 94:6a:f2:2d:af:c4:8f:72:1f:b1:98:d8:40:46:13: 34:c5:d3:4d:80:a8:21:ad:20:5f:2f:74:84:f2:a6: 6f:2d:05:2a:7c:77:27:42:48:53:e2:46:d7:43:73: 96:29:63:d0:9c:10:f5:e7:d1:51:35:ae:a4:84:ea: bb:77:55:35:b8:b1:e9:5d:73:a2:5b:86:dc:86:04: d0:11:d6:88:98:37:fd:03:4c:e3:08:a0:95:09:b6: 08:c4:cc:68:81:96:3a:41:6d:51:1a:74:32:39:64: ae:72:ac:93:20:a3:f4:a8:1b:73:24:6b:80:8c:0e: a9:43:b3:06:5c:52:a6:52:a1:10:89:14:70:86:ee: eb:97:51:a8:8d:36:74:cc:20:45:82:62:9a:4d:a2: 08:13:69:e0:7a:6c:7a:6a:ba:ca:68:f4:64:dd:b0: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:49:11:13:A3:C8:60:3D:00:19:1B:1D:37:C5:F3:58:42:1C:E0 X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:9a:c0:91:75:06:77:fe:c8:95:da:47:f3:0a:cf:d0:74: af:86:2f:12:69:61:10:04:27:24:4e:74:01:67:c9:ec:ed:40: f5:51:51:a8:a9:0c:d9:f3:6f:4c:1b:28:4e:55:8a:95:d9:f7: 86:a1:5c:85:6e:ad:6d:98:fc:37:41:f3:02:bd:3a:1a:dd:fc: 27:dc:49:a7:3c:86:1b:66:3a:f9:fb:a7:d7:95:27:be:a6:f5: d1:8d:dd:e2:5d:ac:91:17:19:af:20:58:78:18:9d:89:82:32: bd:72:14:02:93:a3:0d:38:51:7a:ba:8a:c4:22:8c:cd:87:3e: 3e:f6:9e:7e:ee:20:db:24:1c:8e:a0:73:ba:de:0e:00:d3:4e: eb:a5:cd:8a:13:17:c0:cd:02:9c:eb:4a:82:f6:ca:96:65:4a: a0:b0:ea:60:9b:f5:1b:09:ad:88:86:4b:4b:28:89:25:01:98: 6d:4f:bd:ea:10:11:07:5c:13:24:e8:d1:65:f8:4d:60:b3:2b: 4f:36:e8:d6:0b:04:ce:fa:33:14:10:a7:07:4f:f0:59:79:a3: e3:df:43:72:35:26:cf:ed:d1:23:e7:98:3c:8c:13:ac:8b:c0: 58:54:38:b1:23:53:29:1b:78:34:ee:1d:9a:7b:f9:63:20:1d: 27:14:a3:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA1MTUwNjU4MTdaFw0yNTA1MjIwNjU4MTdaMBgxFjAUBgNV BAMTDTY4MjU5MDhhLTBiMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8b0C7e62JJpPiLVu33rm3tsh8GgLV5lXT8aAXvm8hat4acoE8H+NPzWx/U9Ch 6N09jZ5pa0BWcVksLzxXIPPSfRGYU2IHs7Km9FuLGD+hAQ1bs90zTCf+3pRq8i2v xI9yH7GY2EBGEzTF002AqCGtIF8vdITypm8tBSp8dydCSFPiRtdDc5YpY9CcEPXn 0VE1rqSE6rt3VTW4seldc6JbhtyGBNAR1oiYN/0DTOMIoJUJtgjEzGiBljpBbVEa dDI5ZK5yrJMgo/SoG3Mka4CMDqlDswZcUqZSoRCJFHCG7uuXUaiNNnTMIEWCYppN oggTaeB6bHpquspo9GTdsGSbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV2dJEROj yGA9ABkbHTfF81hCHOAwHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEP/msCRdQZ3/siV2kfzCs/QdK+GLxJpYRAEJyROdAFnyeztQPVRUaip DNnzb0wbKE5VipXZ94ahXIVurW2Y/DdB8wK9Ohrd/CfcSac8hhtmOvn7p9eVJ76m 9dGN3eJdrJEXGa8gWHgYnYmCMr1yFAKTow04UXq6isQijM2HPj72nn7uINskHI6g c7reDgDTTuulzYoTF8DNApzrSoL2ypZlSqCw6mCb9RsJrYiGS0soiSUBmG1PveoQ EQdcEyTo0WX4TWCzK0826NYLBM76MxQQpwdP8Fl5o+PfQ3I1Js/t0SPnmDyME6yL wFhUOLEjUykbeDTuHZp7+WMgHScUo30= -----END CERTIFICATE-----Generated at Fri May 16 22:41:07 2025 by rpki-client