$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft File: t0ZCTjTomeFM0znQc7tfSRj9B4c.mft (raw, json) Hash identifier: e+ci69ZLFVKO9o2S4ZIWucryynhBvDRwbdY24hXTMnI= Subject key identifier: 77:DC:AA:EA:40:4F:8E:F0:6D:77:54:97:92:45:6F:66:C1:E0:BE:2A Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft Manifest number: 03 Signing time: Sat 29 Mar 2025 07:34:21 +0000 Manifest this update: Sat 29 Mar 2025 07:34:20 +0000 Manifest next update: Sat 05 Apr 2025 07:34:20 +0000 Files and hashes: 1: t0ZCTjTomeFM0znQc7tfSRj9B4c.crl (hash: haesMG3tlTDuwEB5ZgmghWFFUvu/WJCblABLDkDPChk=) 2: 675707260BDA11F0A768300AC4F9AE02.roa (hash: wilBGqna+OfcXED1b/uTuE5R5bjXwDBDwAo+DwpXl+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC Validity Not Before: Mar 29 07:34:20 2025 GMT Not After : Apr 5 07:34:20 2025 GMT Subject: CN=67e7a27c-edf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:54:30:fa:1b:cb:11:1c:1c:aa:dd:6a:2d:60: 31:86:0d:ba:f7:ef:d9:90:e6:d5:6c:24:59:51:01: 84:70:44:ea:9f:06:66:cc:16:00:7c:14:4f:ba:81: e7:29:72:57:c1:a2:1f:e6:57:73:7b:2c:1d:6f:24: 69:b9:7d:69:27:66:70:14:9f:a8:16:a1:11:b0:b7: 2f:5f:14:97:d6:33:e8:72:90:88:30:db:fc:29:7d: 20:ad:6b:70:09:b0:bb:79:d8:bb:0d:93:76:67:75: 47:a4:72:c8:cf:8e:94:e6:53:a1:61:ac:26:71:c5: 84:bc:ad:37:56:fd:dd:d5:1d:78:7f:e1:0b:d1:05: 8f:f4:c5:ec:39:6a:76:e6:18:12:ff:64:57:c2:b0: d5:c1:9f:37:c0:b7:bb:3a:59:23:47:68:40:1e:95: b5:49:2f:ef:2b:5f:6d:da:e8:20:37:35:34:62:ff: de:a4:6f:dc:f4:46:24:76:49:c0:da:d2:f1:71:f3: 3d:c2:55:31:c8:6a:59:53:15:00:7a:51:5b:60:36: bc:4c:9c:ba:b0:40:9c:8b:b7:fe:ba:99:c4:33:5d: 22:77:1d:7e:46:0c:55:93:11:cf:7d:5e:18:68:f3: 72:5a:1b:85:9d:5d:e6:90:e8:f8:02:0a:14:84:c8: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:AA:EA:40:4F:8E:F0:6D:77:54:97:92:45:6F:66:C1:E0:BE:2A X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:0a:09:ed:dd:ee:e8:a1:7c:fe:d0:ef:29:a3:19:2a:0a:e0: 00:4e:19:a7:58:24:e0:02:9b:f0:7c:cc:df:3f:f9:7d:c7:3a: 5e:03:ec:fb:ad:22:c2:e3:3c:46:08:42:4b:19:f1:77:12:e0: b6:b9:0f:e5:89:a4:40:09:06:7e:c1:94:be:11:78:58:d0:a7: 7a:02:41:87:32:c8:53:ca:0d:5c:b6:26:17:d7:21:db:81:b2: 0c:39:21:88:5f:79:47:65:15:aa:1a:f4:08:06:20:2f:7c:8a: a0:ce:78:3c:44:ea:cc:08:f3:b8:99:2e:9d:9c:96:ba:40:31: 90:9e:f9:75:80:9e:5a:d9:0e:77:09:c2:6a:63:21:37:df:66: 2c:65:3d:92:6b:a0:b2:80:0c:6b:0c:04:97:ae:88:c5:17:48: d2:54:2e:5c:1f:b9:1d:ed:e6:d6:22:5d:ed:39:71:b2:5f:49: da:5e:9d:a2:ba:2a:ae:7c:90:0b:29:ca:27:65:9a:d6:35:6d: bf:f4:f8:54:4c:b0:49:09:40:ed:34:1f:0f:8b:36:e1:3f:0e: 4f:03:77:51:bb:9d:a2:53:fb:42:00:bd:49:a2:60:c4:47:0f: 49:b6:76:60:80:1f:62:cf:4e:95:29:bf:9f:dc:22:39:ed:24: f4:9b:1e:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTAzMjkwNzM0MjBaFw0yNTA0MDUwNzM0MjBaMBgxFjAUBgNV BAMTDTY3ZTdhMjdjLWVkZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtVDD6G8sRHByq3WotYDGGDbr379mQ5tVsJFlRAYRwROqfBmbMFgB8FE+6gecp clfBoh/mV3N7LB1vJGm5fWknZnAUn6gWoRGwty9fFJfWM+hykIgw2/wpfSCta3AJ sLt52LsNk3ZndUekcsjPjpTmU6FhrCZxxYS8rTdW/d3VHXh/4QvRBY/0xew5anbm GBL/ZFfCsNXBnzfAt7s6WSNHaEAelbVJL+8rX23a6CA3NTRi/96kb9z0RiR2ScDa 0vFx8z3CVTHIallTFQB6UVtgNrxMnLqwQJyLt/66mcQzXSJ3HX5GDFWTEc99Xhho 83JaG4WdXeaQ6PgCChSEyIT7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd9yq6kBP jvBtd1SXkkVvZsHgviowHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MENDLzkzNkI0MzMyMEJEOTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVG TTB6blFjN3RmU1JqOUI0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL0KCe3d7uihfP7Q7ymjGSoK4ABOGadYJOACm/B8zN8/+X3HOl4D7Put IsLjPEYIQksZ8XcS4La5D+WJpEAJBn7BlL4ReFjQp3oCQYcyyFPKDVy2JhfXIduB sgw5IYhfeUdlFaoa9AgGIC98iqDOeDxE6swI87iZLp2clrpAMZCe+XWAnlrZDncJ wmpjITffZixlPZJroLKADGsMBJeuiMUXSNJULlwfuR3t5tYiXe05cbJfSdpenaK6 Kq58kAspyidlmtY1bb/0+FRMsEkJQO00Hw+LNuE/Dk8Dd1G7naJT+0IAvUmiYMRH D0m2dmCAH2LPTpUpv5/cIjntJPSbHow= -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:44 2025 by rpki-client