$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: 6hia0duJVG6M3C3f/zwt1iQW/mJ2xxQJzyMJ1xHI1ss= Subject key identifier: 85:68:92:2F:C2:5A:8A:82:9E:23:BA:F3:D4:04:2D:31:E3:74:BF:47 Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 05F2 Signing time: Wed 02 Apr 2025 22:56:29 +0000 Manifest this update: Wed 02 Apr 2025 22:56:28 +0000 Manifest next update: Wed 09 Apr 2025 22:56:28 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: JgwQUZ6HuyWzP8GgMF5TXmB6Ob6Du/8MY5+jSgydK0Q=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: KzdmZEqJybWPyDEGiwej7P7ZjZ9dGsHz/bpMhD8sTy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815 Validity Not Before: Apr 2 22:56:28 2025 GMT Not After : Apr 9 22:56:28 2025 GMT Subject: CN=67edc09c-53aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8e:2d:d7:37:e7:27:8b:28:3d:c2:79:4c:a5: 9f:55:dc:6a:54:19:f0:a6:81:77:4d:09:42:a4:80: c0:52:88:43:13:3a:84:39:44:7e:78:61:53:4a:39: c4:74:ca:8f:56:de:e1:79:e0:b6:19:57:ae:6d:f7: ce:32:75:a4:10:af:6e:13:a3:7f:68:42:7f:8a:ff: 8f:e4:0d:8c:57:43:eb:9b:41:e3:b1:3c:3b:2c:7c: 58:f4:31:6d:10:fc:95:54:dd:4f:09:d1:bc:45:04: f8:5a:71:9f:44:4b:4e:1f:92:be:52:99:e5:ef:d8: 0e:98:1b:3b:96:32:c6:0b:ab:12:19:0a:84:15:e0: 6c:32:c0:88:dd:b2:bc:ac:8a:3d:a5:b0:6d:8d:1b: a5:86:77:ad:dc:6e:4e:ee:66:56:31:19:2f:4a:42: 14:6d:9c:e2:9b:50:c9:62:76:77:9c:06:11:6b:be: d7:45:86:bf:88:83:81:a0:39:fc:86:87:8b:8a:10: 09:df:96:c1:1d:28:af:1e:75:2d:56:03:5c:fc:7a: 2c:24:7f:bd:3c:90:e2:61:8b:38:be:bd:b2:87:1b: 28:b9:ab:34:b7:f8:97:d1:55:b5:71:a9:bf:ed:87: 96:b9:aa:d0:e1:a2:58:98:5f:f1:03:d8:59:21:f9: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:68:92:2F:C2:5A:8A:82:9E:23:BA:F3:D4:04:2D:31:E3:74:BF:47 X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:be:cd:3e:5f:b7:8e:a4:f2:15:34:96:a1:48:c9:57:74:48: cb:55:7c:b5:e4:7c:ac:b0:81:5f:5c:05:86:20:74:8d:07:13: 54:f7:75:d2:44:d8:6c:60:e7:0f:ff:07:ea:d1:a4:af:0d:e2: 00:3b:d3:a5:bd:41:06:ce:87:a8:80:cd:38:66:9d:9b:4a:4b: d4:f3:63:95:c4:20:bc:5b:bc:ba:08:1f:86:75:f3:33:fc:49: 40:fc:93:75:a3:7f:69:0f:af:6c:c7:c3:25:50:1e:76:eb:69: 41:a3:ea:27:19:ac:86:f3:e9:2a:c1:17:a8:a6:81:99:b7:39: 64:97:b0:3a:04:27:a5:aa:fc:cb:13:28:aa:22:9c:f1:8a:6d: 49:45:14:8f:0c:93:db:55:df:2b:38:6a:b2:55:20:f9:02:74: ff:d4:1c:3a:bb:06:51:47:63:89:0e:a6:b7:51:19:05:46:8e: f7:d9:da:ae:ee:bf:1a:80:8a:ae:07:95:9e:a0:e2:03:0f:f4: 8c:0a:0c:c1:cd:a6:27:8e:43:62:45:f9:90:4f:3e:75:b4:f9: 93:c2:16:f8:6f:6e:e0:8b:43:5b:9d:5f:49:e8:77:a2:a0:ad: 6a:51:b5:af:7d:f2:0f:7a:e0:00:e6:fb:b6:ea:5b:86:4e:1a: 2c:a4:64:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUwNDAyMjI1NjI4WhcNMjUwNDA5MjI1NjI4WjAYMRYwFAYD VQQDEw02N2VkYzA5Yy01M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA144t1zfnJ4soPcJ5TKWfVdxqVBnwpoF3TQlCpIDAUohDEzqEOUR+eGFTSjnE dMqPVt7heeC2GVeubffOMnWkEK9uE6N/aEJ/iv+P5A2MV0Prm0HjsTw7LHxY9DFt EPyVVN1PCdG8RQT4WnGfREtOH5K+Upnl79gOmBs7ljLGC6sSGQqEFeBsMsCI3bK8 rIo9pbBtjRulhnet3G5O7mZWMRkvSkIUbZzim1DJYnZ3nAYRa77XRYa/iIOBoDn8 hoeLihAJ35bBHSivHnUtVgNc/HosJH+9PJDiYYs4vr2yhxsouas0t/iX0VW1cam/ 7YeWuarQ4aJYmF/xA9hZIfkNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVoki/C WoqCniO689QELTHjdL9HMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBavs0+X7eOpPIVNJahSMlXdEjLVXy15HyssIFfXAWGIHSNBxNU93XS RNhsYOcP/wfq0aSvDeIAO9OlvUEGzoeogM04Zp2bSkvU82OVxCC8W7y6CB+GdfMz /ElA/JN1o39pD69sx8MlUB5262lBo+onGayG8+kqwReopoGZtzlkl7A6BCelqvzL EyiqIpzxim1JRRSPDJPbVd8rOGqyVSD5AnT/1Bw6uwZRR2OJDqa3URkFRo732dqu 7r8agIquB5WeoOIDD/SMCgzBzaYnjkNiRfmQTz51tPmTwhb4b27gi0NbnV9J6Hei oK1qUbWvffIPeuAA5vu26luGThospGQX -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:12 2025 by rpki-client