$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json) Hash identifier: IauU7Px3MzABNnNpKQQhVVJuIXtwcJuXODTrj767DIQ= Subject key identifier: C5:1E:BB:99:98:52:82:79:F0:B1:4B:B9:BC:F5:7B:C0:67:3B:D9:15 Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft Manifest number: EB Signing time: Wed 09 Apr 2025 04:13:58 +0000 Manifest this update: Wed 09 Apr 2025 04:13:58 +0000 Manifest next update: Wed 16 Apr 2025 04:13:58 +0000 Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: rXTs2ia+R8fHaGVSNf0v/vB8L5m/o0+prd9piBd4l2k=) 2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: pBuyb8tUeoDi0BGNU1PyCW1Le78/gB9wiXHTRO2r0pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A Validity Not Before: Apr 9 04:13:58 2025 GMT Not After : Apr 16 04:13:58 2025 GMT Subject: CN=67f5f406-8739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:43:33:24:a9:8b:5c:ea:29:66:be:9f:2c: c1:f0:ef:2e:e9:df:22:1e:58:99:27:3b:19:b0:ea: a9:30:44:10:c4:2f:ad:9e:9c:2d:64:a0:c0:e8:7f: 1a:05:26:d4:7c:23:05:ee:24:b4:b8:cc:ec:dd:5a: d7:51:1c:f4:12:7a:4b:f8:6d:95:88:b7:15:96:45: 68:e4:60:e5:7d:e6:79:32:70:9d:fd:b7:0c:9e:a5: 7f:6b:c3:82:28:4f:c4:80:82:1f:da:06:8a:fd:a8: d4:bb:6f:0e:ae:42:06:3f:b8:fc:04:1d:b2:d1:0e: a7:c3:fd:5a:59:17:34:22:ce:38:9e:cd:a6:dd:7b: e3:de:63:bf:70:e7:1b:1d:dd:98:15:50:ee:bb:3a: 8c:f6:c0:9b:b5:54:68:55:93:77:a2:68:16:e4:52: 97:b3:56:b9:39:9d:5a:96:5c:45:dc:2b:05:09:3a: 48:b0:77:b3:02:79:cb:b3:cd:ce:80:24:3d:81:93: 0a:80:7d:e5:b3:c7:80:4b:96:86:c1:e4:15:d0:8e: c3:f6:f0:73:f1:16:95:f5:0d:e1:b8:58:9d:00:63: 46:ee:3d:50:6a:a8:83:42:a5:fc:d6:2a:e8:78:65: ac:28:dc:3f:31:a6:f5:57:f6:a8:4f:b5:4e:5f:bd: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1E:BB:99:98:52:82:79:F0:B1:4B:B9:BC:F5:7B:C0:67:3B:D9:15 X509v3 Authority Key Identifier: keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:00:a6:58:49:9e:f6:17:72:af:19:74:59:11:c9:3c:79: 44:f8:39:61:9e:bd:4c:62:eb:dd:9c:8b:51:55:40:eb:44:56: 69:5e:58:f5:68:e1:e2:72:c9:32:1b:93:0c:06:d3:b8:f7:7b: 73:eb:1a:b1:6a:5f:e1:bc:e1:d9:fe:c0:5c:23:fa:64:33:37: e9:fe:34:57:cd:77:89:63:f3:62:53:d4:71:6c:a4:08:df:c6: 8e:af:80:5a:5c:4c:59:98:65:a0:8d:5c:ac:ec:0a:1b:ec:14: 23:c5:08:a7:c1:57:50:83:29:a5:73:da:1c:9b:91:04:e6:a5: 7a:89:0b:39:78:09:ec:b3:1a:dd:cf:31:a3:25:8f:d1:93:1c: df:22:f5:76:11:df:6e:cb:a6:f4:fb:3b:14:00:10:a0:98:7f: a5:a9:af:3e:5e:94:df:3e:31:f2:ec:16:51:9b:47:87:e7:51: cd:93:0f:23:f2:79:51:18:2c:1a:8e:d6:36:4d:8a:ac:3c:16: be:fd:6e:7c:f0:a3:2f:51:ed:4e:b9:b4:6f:2d:57:ac:64:59: b3:86:76:ef:e0:6a:fd:0a:94:a5:fb:9b:8e:aa:bf:39:27:66: 58:8e:c9:ad:4a:87:6a:f3:71:27:56:46:7c:03:d0:ad:73:95: 50:2a:34:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx NTI4RUNFN0EwHhcNMjUwNDA5MDQxMzU4WhcNMjUwNDE2MDQxMzU4WjAYMRYwFAYD VQQDEw02N2Y1ZjQwNi04NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JVDMySpi1zqKWa+nyzB8O8u6d8iHliZJzsZsOqpMEQQxC+tnpwtZKDA6H8a BSbUfCMF7iS0uMzs3VrXURz0EnpL+G2ViLcVlkVo5GDlfeZ5MnCd/bcMnqV/a8OC KE/EgIIf2gaK/ajUu28OrkIGP7j8BB2y0Q6nw/1aWRc0Is44ns2m3Xvj3mO/cOcb Hd2YFVDuuzqM9sCbtVRoVZN3omgW5FKXs1a5OZ1allxF3CsFCTpIsHezAnnLs83O gCQ9gZMKgH3ls8eAS5aGweQV0I7D9vBz8RaV9Q3huFidAGNG7j1QaqiDQqX81iro eGWsKNw/Mab1V/aoT7VOX73Q+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUeu5mY UoJ58LFLubz1e8BnO9kVMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH X2h2dTY5QUJJMTBWS096bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlQCmWEme9hdyrxl0WRHJPHlE+Dlhnr1MYuvdnItRVUDrRFZpXlj1 aOHicskyG5MMBtO493tz6xqxal/hvOHZ/sBcI/pkMzfp/jRXzXeJY/NiU9RxbKQI 38aOr4BaXExZmGWgjVys7Aob7BQjxQinwVdQgymlc9ocm5EE5qV6iQs5eAnssxrd zzGjJY/RkxzfIvV2Ed9uy6b0+zsUABCgmH+lqa8+XpTfPjHy7BZRm0eH51HNkw8j 8nlRGCwajtY2TYqsPBa+/W588KMvUe1OubRvLVesZFmzhnbv4Gr9CpSl+5uOqr85 J2ZYjsmtSodq83EnVkZ8A9Ctc5VQKjRo -----END CERTIFICATE-----Generated at Fri Apr 11 00:36:58 2025 by rpki-client