$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: FnamOsyGtLdz0QPVbgI/zV0uqD5qHr37t8HgUO9BgCs= Subject key identifier: F8:0A:92:75:94:38:81:F4:B2:11:FD:56:C7:9E:DF:71:B4:5A:77:DD Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0C63 Signing time: Wed 02 Apr 2025 18:20:13 +0000 Manifest this update: Wed 02 Apr 2025 18:20:13 +0000 Manifest next update: Wed 09 Apr 2025 18:20:13 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: cyJViqw8n2sN200Mu874ixuzOOSt5HhpLmibE9pE/nQ=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD Validity Not Before: Apr 2 18:20:13 2025 GMT Not After : Apr 9 18:20:13 2025 GMT Subject: CN=67ed7fdd-e9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:1f:99:67:9d:0f:06:30:c0:35:31:b3:7d: cf:c9:64:c6:99:83:fc:79:a3:ac:2f:ca:5d:d4:07: f2:49:fa:ce:0e:f6:7f:cc:9c:a8:da:7a:24:ce:54: 61:05:6e:b6:a6:97:cf:d3:b6:33:94:a7:18:8e:76: 45:d4:83:ec:62:f0:1f:3a:6d:ef:55:79:24:e5:a8: 3b:01:a5:58:b6:3c:0d:a5:e1:df:6a:a0:dd:95:ea: d4:28:d5:7f:2d:b1:ce:a8:ef:d5:5c:e6:96:d1:b5: 7a:2d:20:fa:02:cd:67:23:4a:30:54:d5:72:dc:88: 77:b3:1e:a4:20:7c:a4:9d:ae:ba:b9:db:b6:82:46: f2:ab:ed:48:52:51:46:a1:cd:c6:0e:bd:3f:23:bf: 54:88:02:25:c2:2a:4a:32:ec:1a:8e:15:fe:93:15: 31:ae:9d:30:bd:a9:5e:bf:c3:95:9c:20:3c:24:ca: b8:97:81:ba:33:11:44:d9:4a:ae:c3:96:85:3b:86: cd:9c:af:12:d9:9a:19:95:5b:0b:3d:94:1e:1a:c8: 5f:06:57:87:fd:a8:e3:bd:80:46:08:53:b7:2f:48: d9:8d:10:05:cf:b3:93:5f:b7:40:f1:71:5e:c6:c0: 65:02:59:0c:5e:59:02:5d:cf:28:2b:e8:33:a7:4f: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0A:92:75:94:38:81:F4:B2:11:FD:56:C7:9E:DF:71:B4:5A:77:DD X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1d:8e:9e:85:df:19:39:39:b4:a7:c8:fd:0e:b7:4c:30:86: 44:3e:df:c1:c7:58:95:7b:57:e2:4d:aa:a2:fd:1f:0e:c9:92: 80:dd:92:45:6a:68:8c:9d:fe:78:1d:19:3b:d2:98:36:e4:25: 2c:35:82:20:b0:35:c5:11:81:a5:e2:55:e8:4a:73:70:2e:d1: 4f:af:35:49:5d:e7:c5:05:34:8e:a9:d4:6c:68:fa:c0:2e:2a: 2a:99:a4:bb:ee:62:f2:2d:91:d7:fa:d4:3f:39:30:be:70:0e: 8e:84:f1:39:73:db:03:90:6e:f6:80:c3:3b:87:21:1d:04:66: e5:da:68:55:ac:c5:40:63:3b:d7:9c:0c:9f:2a:bf:11:7a:f9: 44:d0:5e:86:50:2c:0c:46:b5:70:dc:24:11:3c:3a:7b:d0:e2: bb:75:60:7f:7a:fa:fd:b2:db:fb:44:9b:a3:ff:c2:13:65:94: 96:72:c6:6a:e1:b2:15:55:c2:db:76:51:d9:30:a4:5b:a5:e5: fd:0a:36:bf:a1:2e:33:e2:81:11:b4:03:eb:ba:e5:0a:17:d3: 5d:d8:7b:79:aa:18:e5:8a:77:45:eb:23:97:b4:1d:93:d2:9d: 4f:90:7c:7b:a6:bc:09:52:4e:47:ab:0a:0a:c4:7f:5e:89:02: 57:f8:49:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUwNDAyMTgyMDEzWhcNMjUwNDA5MTgyMDEzWjAYMRYwFAYD VQQDEw02N2VkN2ZkZC1lOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46EfmWedDwYwwDUxs33PyWTGmYP8eaOsL8pd1AfySfrODvZ/zJyo2nokzlRh BW62ppfP07YzlKcYjnZF1IPsYvAfOm3vVXkk5ag7AaVYtjwNpeHfaqDdlerUKNV/ LbHOqO/VXOaW0bV6LSD6As1nI0owVNVy3Ih3sx6kIHykna66udu2gkbyq+1IUlFG oc3GDr0/I79UiAIlwipKMuwajhX+kxUxrp0wvalev8OVnCA8JMq4l4G6MxFE2Uqu w5aFO4bNnK8S2ZoZlVsLPZQeGshfBleH/ajjvYBGCFO3L0jZjRAFz7OTX7dA8XFe xsBlAlkMXlkCXc8oK+gzp0/53QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgKknWU OIH0shH9Vsee33G0WnfdMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcHY6ehd8ZOTm0p8j9DrdMMIZEPt/Bx1iVe1fiTaqi/R8OyZKA3ZJF amiMnf54HRk70pg25CUsNYIgsDXFEYGl4lXoSnNwLtFPrzVJXefFBTSOqdRsaPrA LioqmaS77mLyLZHX+tQ/OTC+cA6OhPE5c9sDkG72gMM7hyEdBGbl2mhVrMVAYzvX nAyfKr8RevlE0F6GUCwMRrVw3CQRPDp70OK7dWB/evr9stv7RJuj/8ITZZSWcsZq 4bIVVcLbdlHZMKRbpeX9Cja/oS4z4oERtAPruuUKF9Nd2Ht5qhjlindF6yOXtB2T 0p1PkHx7prwJUk5HqwoKxH9eiQJX+Eko -----END CERTIFICATE-----Generated at Fri Apr 4 18:26:57 2025 by rpki-client