$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: veHhXfxrZXAFBJRV9+kwFx1a3bZSr0cVXhvmkhjLRmw= Subject key identifier: 48:13:DB:26:CE:EA:89:34:07:FA:88:20:21:3D:3F:F5:80:2C:FF:4B Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 139B Signing time: Sun 20 Apr 2025 18:33:47 +0000 Manifest this update: Sun 20 Apr 2025 18:33:47 +0000 Manifest next update: Sun 27 Apr 2025 18:33:47 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: J7uTseOS80UevcnFpKhmXD3DASIG0V2kOocIZ7DDnVs=) 2: E8D78EDCF28611EF8D2AAD3AC4F9AE02.roa (hash: mLQl1L672XUrQcEZSI3ncLg9X1CTIQZZRIh3i6pq3dY=) 3: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: vQI57o5020OkGxEigG4Zf/nYbRzTA4H4J4BJInGUUoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Apr 20 18:33:47 2025 GMT Not After : Apr 27 18:33:47 2025 GMT Subject: CN=68053e0b-e1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:f6:4b:16:dd:ef:86:d1:ea:89:5b:4b:bb: 5e:78:02:4e:6f:60:30:7b:88:51:39:e3:c2:b5:ad: 46:b2:14:a3:01:26:5c:4f:65:e0:58:23:5e:17:1b: e3:00:cd:d5:bf:68:76:a5:04:30:4e:b3:5e:1d:c1: 01:2e:2f:ba:6c:a5:eb:f7:3c:07:ec:87:19:bc:48: fa:51:46:4c:93:55:53:de:8d:39:b9:64:df:d4:ec: 22:5a:d9:ab:53:7b:8b:8a:9b:63:75:d0:f0:2c:70: 5d:64:f9:71:0d:5e:7f:51:ce:61:f2:29:62:fd:49: 8d:60:5a:12:ec:08:9d:34:19:0a:ec:2f:71:dc:4f: 58:9c:55:e2:13:8f:4a:99:5c:4e:49:46:12:83:69: 14:a0:ab:20:a4:df:c3:c1:85:08:f1:f6:a8:51:30: 45:ad:12:1e:93:df:cf:1d:33:69:21:a6:a9:bd:97: 51:7b:26:40:45:3f:80:c1:24:8a:ec:b3:94:ed:03: 4b:ff:72:36:43:23:d7:41:6e:84:f8:e4:92:b3:7c: bd:60:81:3f:f1:87:c2:ee:bb:1f:2b:b9:ad:cc:bd: 73:a6:d1:1b:b2:06:18:3b:55:57:43:bb:bc:85:eb: a1:b2:df:fe:f0:b5:48:bd:cc:a5:be:43:69:92:cd: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:13:DB:26:CE:EA:89:34:07:FA:88:20:21:3D:3F:F5:80:2C:FF:4B X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:bf:2d:b6:d0:e6:18:73:8b:b5:76:c4:51:19:3d:0d:59: 90:35:18:e3:7f:95:9e:c5:6f:a0:c4:17:f8:5b:95:80:9b:46: a7:cc:f5:d9:5e:39:14:14:76:28:6b:59:c9:60:77:3c:d5:03: e3:f1:f7:07:94:e6:44:31:6e:5f:cc:c3:11:29:e2:ad:d6:d1: 4f:71:e8:13:c8:c0:1c:6f:b9:39:49:d0:1c:c8:17:c2:e4:63: b1:70:bb:8b:ae:8e:99:c2:c7:e5:bb:27:95:bd:ef:64:fb:d3: 3f:c4:c5:17:20:c6:4d:57:8e:3e:2f:18:ce:9d:08:4c:c9:22: 3f:dc:18:50:dd:af:0f:05:ec:30:23:62:30:44:2e:40:a6:9e: 5f:3d:c8:ed:46:d3:b8:30:4f:38:43:09:20:ff:ae:7b:68:55: b8:69:1f:95:f4:4c:60:51:2e:83:7d:3c:73:6e:fe:ab:ed:5b: a1:47:03:60:b8:7e:5e:de:97:69:de:2a:00:d1:80:cb:1d:4e: df:08:dd:82:5d:66:d6:71:4e:8c:99:6f:64:00:18:98:5a:90: 3f:d9:2f:a2:2d:56:06:6c:1e:7e:17:70:c9:33:6a:f8:8f:57: 5f:1d:dd:3a:2d:56:ce:f4:d3:b7:26:1a:66:41:16:d3:a4:0d: 38:ae:18:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUwNDIwMTgzMzQ3WhcNMjUwNDI3MTgzMzQ3WjAYMRYwFAYD VQQDEw02ODA1M2UwYi1lMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql/2Sxbd74bR6olbS7teeAJOb2Awe4hROePCta1GshSjASZcT2XgWCNeFxvj AM3Vv2h2pQQwTrNeHcEBLi+6bKXr9zwH7IcZvEj6UUZMk1VT3o05uWTf1OwiWtmr U3uLiptjddDwLHBdZPlxDV5/Uc5h8ili/UmNYFoS7AidNBkK7C9x3E9YnFXiE49K mVxOSUYSg2kUoKsgpN/DwYUI8faoUTBFrRIek9/PHTNpIaapvZdReyZART+AwSSK 7LOU7QNL/3I2QyPXQW6E+OSSs3y9YIE/8YfC7rsfK7mtzL1zptEbsgYYO1VXQ7u8 heuhst/+8LVIvcylvkNpks1hcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgT2ybO 6ok0B/qIICE9P/WALP9LMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdj78tttDmGHOLtXbEURk9DVmQNRjjf5WexW+gxBf4W5WAm0anzPXZ XjkUFHYoa1nJYHc81QPj8fcHlOZEMW5fzMMRKeKt1tFPcegTyMAcb7k5SdAcyBfC 5GOxcLuLro6ZwsfluyeVve9k+9M/xMUXIMZNV44+LxjOnQhMySI/3BhQ3a8PBeww I2IwRC5App5fPcjtRtO4ME84Qwkg/657aFW4aR+V9ExgUS6DfTxzbv6r7VuhRwNg uH5e3pdp3ioA0YDLHU7fCN2CXWbWcU6MmW9kABiYWpA/2S+iLVYGbB5+F3DJM2r4 j1dfHd06LVbO9NO3JhpmQRbTpA04rhjj -----END CERTIFICATE-----Generated at Tue Apr 22 00:13:38 2025 by rpki-client