$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft File: T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json) Hash identifier: gZg4IXO7mCcaPCSeV7I+ORhQSGAuNb9rgZhZbUdeszU= Subject key identifier: 28:DB:E1:86:4F:83:36:BB:33:E4:C1:76:99:58:E0:2F:A2:EA:EC:3A Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 Certificate issuer: /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft Manifest number: 02CC Signing time: Sat 05 Apr 2025 01:32:44 +0000 Manifest this update: Sat 05 Apr 2025 01:32:43 +0000 Manifest next update: Sat 12 Apr 2025 01:32:43 +0000 Files and hashes: 1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: o5kixNdPrbyApY1i1DQg3iXBbIGzPuDOU3QNLABqF4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713 Validity Not Before: Apr 5 01:32:43 2025 GMT Not After : Apr 12 01:32:43 2025 GMT Subject: CN=67f0883b-947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:40:55:e7:9f:ab:d3:7e:82:68:1a:b5:9a: 59:f0:e2:27:ac:ab:68:d0:c8:47:67:df:3b:ed:6a: 59:45:0d:15:36:3b:c1:a2:b4:73:df:4e:ba:f2:c5: 54:c2:77:bc:ef:2b:b3:b4:74:b8:bd:a0:03:7a:d4: e5:3d:7e:09:13:65:d9:3d:1f:fa:20:32:6c:19:9d: 08:1d:90:7f:86:c1:5e:ec:de:57:f5:45:97:64:35: 1b:44:0b:6b:22:d3:9a:d8:79:ef:59:e2:b8:2a:ca: 1b:81:3b:4b:d8:a8:73:7f:cb:46:03:54:9b:31:17: b8:88:ad:f6:93:c3:b3:4e:91:68:59:3e:c8:b7:d0: 5a:6b:c0:8c:fd:e2:56:3f:a1:86:16:fa:a0:d6:6e: 40:48:98:74:c5:de:f6:27:1b:64:79:40:3a:74:b5: 3b:0b:eb:7f:f0:2c:60:3c:16:47:17:88:74:cc:b0: 1a:ca:ba:8e:5c:f5:64:d6:66:34:2b:b2:81:07:f1: 07:bd:ba:00:40:f4:7a:99:f1:28:86:e6:61:eb:fe: c3:04:ce:83:69:8f:e5:a5:3b:eb:8a:61:08:01:58: 2a:39:4e:35:09:91:d0:14:17:8b:6c:4f:40:84:3c: 81:06:13:5d:f9:77:da:22:4e:dd:6d:02:e0:66:6e: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DB:E1:86:4F:83:36:BB:33:E4:C1:76:99:58:E0:2F:A2:EA:EC:3A X509v3 Authority Key Identifier: keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fd:91:79:2d:6e:79:32:50:c5:60:b7:24:14:3b:a3:12:6b: dd:24:48:96:74:e4:3b:e0:95:48:fe:92:38:fc:71:17:74:1c: d3:92:a3:1f:09:6b:d9:dc:2e:4f:57:bf:b5:d8:02:64:1b:d3: 6f:38:b6:92:cb:a3:42:18:89:a3:dd:4f:a3:ab:d9:7c:a0:aa: b8:ad:13:12:d3:91:fb:82:e7:d4:ac:39:16:5c:63:9d:65:45: 60:47:75:cb:da:7d:25:bb:e5:03:68:a6:5d:d8:a0:79:a1:ff: cb:76:81:43:82:08:b9:b1:fd:c4:ef:e4:8e:3f:48:39:2a:bb: f1:16:9d:67:ee:d8:0c:55:2b:07:5e:a1:c2:50:74:c8:f4:4a: 1f:e7:32:aa:38:e0:80:09:1f:66:6f:0c:a4:7d:59:15:5f:78: 1b:88:ab:c8:83:30:5b:fd:33:c0:cf:41:70:de:bc:d1:9b:fe: c4:5d:aa:95:7b:3b:cb:40:a6:0f:c7:64:6e:0c:16:7e:e0:94: ad:d0:29:fa:91:98:7c:ce:6c:c4:5b:e3:5e:bc:df:0c:82:10: 3a:36:a2:78:4b:cc:55:76:ed:a1:ec:17:3f:c7:d2:0f:10:d8: 23:c9:69:dc:84:ed:35:c8:a7:ea:9f:de:d0:14:a1:c3:27:c0: 3b:1a:14:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDRGREZFNDRCOTlCMUIyNjU5NjgzOTNENTk2NDJDMjBG OTM5NDQ0QTMwHhcNMjUwNDA1MDEzMjQzWhcNMjUwNDEyMDEzMjQzWjAYMRYwFAYD VQQDEw02N2YwODgzYi05NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlpAVeefq9N+gmgatZpZ8OInrKto0MhHZ9877WpZRQ0VNjvBorRz30668sVU wne87yuztHS4vaADetTlPX4JE2XZPR/6IDJsGZ0IHZB/hsFe7N5X9UWXZDUbRAtr ItOa2HnvWeK4KsobgTtL2Khzf8tGA1SbMRe4iK32k8OzTpFoWT7It9Baa8CM/eJW P6GGFvqg1m5ASJh0xd72JxtkeUA6dLU7C+t/8CxgPBZHF4h0zLAayrqOXPVk1mY0 K7KBB/EHvboAQPR6mfEohuZh6/7DBM6DaY/lpTvrimEIAVgqOU41CZHQFBeLbE9A hDyBBhNd+XfaIk7dbQLgZm5MBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjb4YZP gza7M+TBdplY4C+i6uw6MB8GA1UdIwQYMBaAFE/f5EuZsbJlloOT1ZZCwg+TlESj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zRTVBMDlEMkUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNtV1dnNVBWbGtMQ0Q1T1VS S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5X2tTNW14c21XV2c1UFZsa0xDRDVPVVJLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zRTVBMDlEMkUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNt V1dnNVBWbGtMQ0Q1T1VSS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR/ZF5LW55MlDFYLckFDujEmvdJEiWdOQ74JVI/pI4/HEXdBzTkqMf CWvZ3C5PV7+12AJkG9NvOLaSy6NCGImj3U+jq9l8oKq4rRMS05H7gufUrDkWXGOd ZUVgR3XL2n0lu+UDaKZd2KB5of/LdoFDggi5sf3E7+SOP0g5KrvxFp1n7tgMVSsH XqHCUHTI9Eof5zKqOOCACR9mbwykfVkVX3gbiKvIgzBb/TPAz0Fw3rzRm/7EXaqV ezvLQKYPx2RuDBZ+4JSt0Cn6kZh8zmzEW+NevN8MghA6NqJ4S8xVdu2h7Bc/x9IP ENgjyWnchO01yKfqn97QFKHDJ8A7GhQD -----END CERTIFICATE-----Generated at Sun Apr 6 19:42:48 2025 by rpki-client