$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json) Hash identifier: tyVK/fn6uBIBohI1K+olQWhSdeXKdZyzyV6ASl8MaMY= Subject key identifier: FD:79:D5:67:04:02:A5:87:4F:1D:F2:5E:A8:F6:2F:15:3B:E9:BB:FB Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft Manifest number: 42 Signing time: Thu 03 Apr 2025 06:42:16 +0000 Manifest this update: Thu 03 Apr 2025 06:42:16 +0000 Manifest next update: Thu 10 Apr 2025 06:42:16 +0000 Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: 5Qsvja79AZRIBRyGGe4QihLtaFLIlWDF3m9VD2CevQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2 Validity Not Before: Apr 3 06:42:16 2025 GMT Not After : Apr 10 06:42:16 2025 GMT Subject: CN=67ee2dc8-47d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:47:7f:bb:15:36:4e:1b:c0:f0:af:bc:22: 8e:ab:19:eb:c7:08:b7:3f:81:73:e7:40:95:63:7f: 85:7b:c1:24:c6:df:05:1c:ee:b6:c6:e1:e3:80:99: ab:09:de:5a:2c:ef:04:63:9b:bd:d7:40:d6:79:11: 55:ce:1e:91:34:7d:b1:08:47:4d:89:6c:a5:97:a1: 00:48:70:aa:c2:16:00:0b:93:00:56:dd:e8:f2:fa: 0e:34:36:c1:36:66:ff:76:92:13:3f:19:fd:fd:61: 64:30:56:0e:7d:b6:30:ce:62:78:00:5c:20:3f:b8: 79:73:45:a1:6c:df:c7:70:f0:7f:58:b4:6d:2f:4f: 96:7f:e5:03:14:77:e4:3c:2f:61:7b:e3:dc:8c:dc: 97:58:09:a8:60:3e:df:22:86:f8:f2:b1:85:26:c7: 33:1d:37:23:e5:a2:46:47:03:a7:58:00:af:0e:1e: 99:74:3a:9a:35:89:0b:e7:10:53:d9:d9:d9:87:c3: c9:c1:63:6e:07:c7:ec:ff:1d:9b:81:46:4c:fa:c6: 6d:8f:80:bb:b8:ae:9d:d7:c2:09:b8:cb:2b:59:49: 6b:47:dd:7a:98:4c:61:ec:86:da:d3:da:94:c4:f8: c4:51:86:78:f1:c8:57:34:17:18:00:f9:1e:f7:1f: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:79:D5:67:04:02:A5:87:4F:1D:F2:5E:A8:F6:2F:15:3B:E9:BB:FB X509v3 Authority Key Identifier: keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:49:b5:12:52:37:46:6a:98:9a:8f:4c:0d:bc:b9:f4:13:af: ea:b8:1a:16:23:12:c0:4a:59:08:95:df:fc:a3:8f:27:cf:57: a9:56:12:f8:88:a3:67:71:9d:f2:2a:e9:e5:d5:91:92:9c:dd: 02:b8:fb:68:36:67:36:35:72:96:73:5d:63:47:76:69:3d:13: 10:72:fe:fc:73:19:fc:0a:fe:38:1f:2f:17:c4:d1:fe:e1:b3: ea:b2:4e:0f:d9:32:30:45:35:4d:46:a9:e4:fe:0d:f8:67:a3: fd:98:30:21:6f:9c:b7:cd:bf:2f:c0:76:11:c1:ca:55:e5:a1: 74:f1:ff:d6:4d:70:15:77:73:b2:1f:91:75:ce:37:25:51:b3: 2a:4b:4d:55:ac:4e:e3:32:08:17:31:94:29:65:9a:7b:3d:2c: 5d:04:d9:de:0d:6c:81:00:fa:99:a0:4b:66:84:f9:46:a7:9f: 06:02:78:c0:33:52:09:51:54:a2:c8:39:2a:e3:c1:20:1c:e4: 6a:f9:2c:5c:97:88:53:32:0e:fc:97:37:df:ee:04:7c:78:ff: b3:e0:14:10:3f:2b:a7:5a:c8:b2:81:c2:64:d6:79:03:4c:2b: 96:e3:20:44:65:b6:ab:04:f6:21:20:13:74:be:2a:81:e8:6d: 41:fa:74:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjNBMjExMC8GA1UEBRMoNEZGMEYyRjhEQkYzQjE0QTVFQjEyM0I0MUZFOURFNjcz QjEyNTE3RjAeFw0yNTA0MDMwNjQyMTZaFw0yNTA0MTAwNjQyMTZaMBgxFjAUBgNV BAMTDTY3ZWUyZGM4LTQ3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsBEd/uxU2ThvA8K+8Io6rGevHCLc/gXPnQJVjf4V7wSTG3wUc7rbG4eOAmasJ 3los7wRjm73XQNZ5EVXOHpE0fbEIR02JbKWXoQBIcKrCFgALkwBW3ejy+g40NsE2 Zv92khM/Gf39YWQwVg59tjDOYngAXCA/uHlzRaFs38dw8H9YtG0vT5Z/5QMUd+Q8 L2F749yM3JdYCahgPt8ihvjysYUmxzMdNyPlokZHA6dYAK8OHpl0Opo1iQvnEFPZ 2dmHw8nBY24Hx+z/HZuBRkz6xm2PgLu4rp3Xwgm4yytZSWtH3XqYTGHshtrT2pTE +MRRhnjxyFc0FxgA+R73HxFPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/XnVZwQC pYdPHfJeqPYvFTvpu/swHwYDVR0jBBgwFoAUT/Dy+NvzsUpesSO0H+neZzsSUX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzY3OEFDQTE0QUU0 OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1VwZXNTTzBILW5lWnpzU1VY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9EeS1OdnpzVXBlc1NPMEgtbmVaenNTVVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG M0EyLzY3OEFDQTE0QUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1Vw ZXNTTzBILW5lWnpzU1VYOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMtJtRJSN0ZqmJqPTA28ufQTr+q4GhYjEsBKWQiV3/yjjyfPV6lWEviI o2dxnfIq6eXVkZKc3QK4+2g2ZzY1cpZzXWNHdmk9ExBy/vxzGfwK/jgfLxfE0f7h s+qyTg/ZMjBFNU1GqeT+Dfhno/2YMCFvnLfNvy/AdhHBylXloXTx/9ZNcBV3c7If kXXONyVRsypLTVWsTuMyCBcxlCllmns9LF0E2d4NbIEA+pmgS2aE+UannwYCeMAz UglRVKLIOSrjwSAc5Gr5LFyXiFMyDvyXN9/uBHx4/7PgFBA/K6dayLKBwmTWeQNM K5bjIERltqsE9iEgE3S+KoHobUH6dJQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:37 2025 by rpki-client