$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json) Hash identifier: RjkefhLZP3E+nLxBx+3W8WZxyENWiiBXjcpu+99qZlM= Subject key identifier: 0C:8D:05:4F:F8:A8:51:69:93:C9:74:CA:0E:8B:E2:19:40:C7:9E:E1 Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft Manifest number: 57 Signing time: Tue 03 Jun 2025 07:04:57 +0000 Manifest this update: Tue 03 Jun 2025 07:04:57 +0000 Manifest next update: Tue 10 Jun 2025 07:04:56 +0000 Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: QrFaiZmOj06G3O/V+mexKBgrCVM+e9VCtQJJegcxArY=) 2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Validity Not Before: Jun 3 07:04:57 2025 GMT Not After : Jun 10 07:04:56 2025 GMT Subject: CN=683e9e99-897e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:b8:48:61:3e:84:f7:27:a7:1d:cd:83:b0: af:67:1a:dc:10:f5:41:26:0b:01:99:54:8f:90:2b: 76:91:80:db:f6:06:a3:65:04:5a:c9:78:b8:91:c6: 4d:02:8b:2d:78:18:2a:14:53:1b:96:cd:1c:4f:a3: f6:7f:72:8a:40:09:37:ce:ac:a1:94:ac:27:9d:8c: 5e:bf:cf:61:0a:b5:dc:50:33:a3:b4:d8:a8:ce:14: 7b:8e:c9:10:4e:c2:ad:04:3b:79:89:73:9f:f5:a2: 33:e6:33:16:b9:bc:8a:06:91:38:15:a0:99:01:04: 5a:cd:89:21:c1:a6:18:3f:b4:66:a6:18:19:0f:1a: 0a:a0:95:5e:02:40:fe:fb:fe:8f:0b:f6:ef:ff:07: 27:c7:b5:42:60:96:b6:bc:d7:11:f3:57:86:6a:b1: 7e:7e:f6:d2:19:2d:67:2b:28:09:60:83:38:03:de: 35:62:fd:a2:4d:73:2b:57:19:a0:57:3c:c0:ca:06: b2:0f:59:b1:a9:e6:d4:12:be:fb:d4:e5:58:0d:93: 1e:13:4f:6a:b6:85:b8:01:0d:96:f9:7b:f1:19:68: dc:99:3b:77:b9:b3:ab:f4:10:71:c9:d9:6f:03:45: ea:9a:b9:fe:62:c5:04:3b:9b:5f:18:cc:ad:dc:14: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:05:4F:F8:A8:51:69:93:C9:74:CA:0E:8B:E2:19:40:C7:9E:E1 X509v3 Authority Key Identifier: keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:09:56:9b:5a:aa:56:e5:c0:bd:98:61:63:a6:5d:11:1e:c0: 7a:9d:99:b9:19:c3:da:bd:19:b7:1f:55:3f:ea:0f:7e:e4:fb: 0c:21:51:0d:28:c8:60:24:da:28:5a:9a:e6:14:68:ce:ac:31: 85:9d:39:0d:fa:a5:be:ed:7f:23:e2:5f:24:79:b6:a4:78:a3: c6:87:e9:dd:1e:d6:00:6e:48:32:67:f5:53:be:db:f1:03:77: 03:24:f1:3a:94:78:a0:e4:7f:18:72:c7:5f:82:ad:e2:da:b6: a9:53:91:bb:19:9e:d5:8c:d4:7d:c7:ba:ae:62:03:94:0b:47: 0a:c1:11:01:98:f4:18:51:e0:35:69:19:81:42:77:ac:a7:86: 40:78:b3:7f:c2:bf:3b:ac:fa:22:55:d1:b6:6e:69:99:7c:68: 06:24:a2:4c:d9:57:12:ce:82:25:48:f4:58:69:78:f1:f6:cc: 1c:0a:82:68:ad:55:47:54:82:b0:3c:71:23:c8:61:45:7f:e2: 50:29:e7:3f:f5:9d:9c:c1:77:8c:a6:0a:d5:59:dd:b2:8c:77: f8:d0:e0:55:b6:92:fa:15:07:a8:06:09:2f:4c:a5:4d:10:0c: af:5a:4a:b7:b0:41:98:46:6f:af:e4:86:bb:1d:9a:7a:8e:bd: 12:ac:8d:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoNEY5RUZENDNCQTc5QTM0OTQ1NTEwOURCMjAwODQ1QTg5 MDhDREM1QzAeFw0yNTA2MDMwNzA0NTdaFw0yNTA2MTAwNzA0NTZaMBgxFjAUBgNV BAMTDTY4M2U5ZTk5LTg5N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzfrhIYT6E9yenHc2DsK9nGtwQ9UEmCwGZVI+QK3aRgNv2BqNlBFrJeLiRxk0C iy14GCoUUxuWzRxPo/Z/copACTfOrKGUrCedjF6/z2EKtdxQM6O02KjOFHuOyRBO wq0EO3mJc5/1ojPmMxa5vIoGkTgVoJkBBFrNiSHBphg/tGamGBkPGgqglV4CQP77 /o8L9u//ByfHtUJglra81xHzV4ZqsX5+9tIZLWcrKAlggzgD3jVi/aJNcytXGaBX PMDKBrIPWbGp5tQSvvvU5VgNkx4TT2q2hbgBDZb5e/EZaNyZO3e5s6v0EHHJ2W8D Reqauf5ixQQ7m18YzK3cFHBzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDI0FT/io UWmTyXTKDoviGUDHnuEwHwYDVR0jBBgwFoAUT579Q7p5o0lFUQnbIAhFqJCM3Fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzJGNzIyQTk4QzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDU3OVE3cDVvMGxGVVFuYklBaEZxSkNNM0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzJGNzIyQTk4QzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBs RlVRbmJJQWhGcUpDTTNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEJVptaqlblwL2YYWOmXREewHqdmbkZw9q9GbcfVT/qD37k+wwhUQ0o yGAk2ihamuYUaM6sMYWdOQ36pb7tfyPiXyR5tqR4o8aH6d0e1gBuSDJn9VO+2/ED dwMk8TqUeKDkfxhyx1+CreLatqlTkbsZntWM1H3Huq5iA5QLRwrBEQGY9BhR4DVp GYFCd6ynhkB4s3/Cvzus+iJV0bZuaZl8aAYkokzZVxLOgiVI9FhpePH2zBwKgmit VUdUgrA8cSPIYUV/4lAp5z/1nZzBd4ymCtVZ3bKMd/jQ4FW2kvoVB6gGCS9MpU0Q DK9aSrewQZhGb6/khrsdmnqOvRKsjes= -----END CERTIFICATE-----Generated at Tue Jun 3 23:57:46 2025 by rpki-client