$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json) Hash identifier: S+NX9WT8hOXH/4gX6xBlnvK6lv2w9d4MwX18FTfn1Ns= Subject key identifier: C1:0D:DE:CC:B8:C5:FE:B9:02:19:28:03:3F:22:3F:EB:B6:B8:8C:53 Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft Manifest number: 5E Signing time: Sat 31 May 2025 06:40:44 +0000 Manifest this update: Sat 31 May 2025 06:40:44 +0000 Manifest next update: Sat 07 Jun 2025 06:40:44 +0000 Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: +ZQAsbleUKzb2Se3bMopc1dAsUOE1Z8/LUEHjv/LSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Validity Not Before: May 31 06:40:44 2025 GMT Not After : Jun 7 06:40:44 2025 GMT Subject: CN=683aa46c-16cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:a5:e2:f1:36:70:f6:ac:d3:ac:27:d2:06: 5e:ac:37:9e:bc:59:9f:05:d9:32:b0:b8:ad:2f:df: 90:eb:f6:22:72:2f:d4:12:c5:39:08:bc:20:d7:75: f0:95:67:7d:c4:ce:4a:cd:60:ff:f1:fc:e1:00:34: fb:70:af:aa:ff:fa:8f:51:de:67:a9:62:96:e6:67: 19:79:e1:ec:de:85:2d:78:0d:9c:91:8f:b8:53:0e: ee:29:ed:14:34:a3:44:ce:aa:8e:55:19:2a:45:d4: cf:12:62:8d:f7:07:a6:4c:4d:2a:37:4b:8b:fe:ad: fd:89:08:cc:9d:1d:47:e2:42:1e:54:84:42:a3:27: 7e:83:f0:2d:3f:30:58:19:c9:76:f4:ac:18:54:3e: 0c:cd:6c:29:e7:7e:bb:12:7c:56:80:80:72:45:54: 65:8b:dc:3b:e0:48:f4:06:9a:34:b8:ea:9c:9e:90: 86:87:7c:09:16:d9:66:37:a3:23:95:f8:f4:30:ae: 5c:ae:be:f8:09:04:20:db:0e:1c:68:c6:10:14:91: ac:e3:f8:91:9a:24:b6:73:c8:fd:e5:aa:e4:85:c0: b6:f9:20:36:ad:c3:e2:82:7e:90:6d:09:5b:1b:57: e4:37:3a:7d:94:39:26:39:1e:be:11:62:ec:e0:7b: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0D:DE:CC:B8:C5:FE:B9:02:19:28:03:3F:22:3F:EB:B6:B8:8C:53 X509v3 Authority Key Identifier: keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6e:d4:df:3c:ee:61:fd:e2:41:15:fe:e1:08:c0:f9:43:26: 0a:bb:82:fe:4e:14:13:6c:0e:b0:be:46:31:ae:75:c3:76:88: fc:e8:4f:f3:78:f7:da:15:24:ea:d3:e8:79:3d:f4:ae:3a:04: a2:23:67:b8:7a:09:65:18:32:4e:3a:36:52:ed:51:e2:df:cb: e7:aa:07:4e:d7:33:dd:1e:91:7e:d4:e1:04:19:a9:ac:38:6e: 53:a7:c5:c8:e9:99:6d:bf:c3:81:e6:d5:ce:45:20:a5:3d:73: 2c:6d:e9:97:0f:1f:e6:a1:10:5a:8e:42:a3:07:7d:3a:b0:fa: 88:92:e0:59:4c:f4:62:11:02:79:2f:4a:de:b8:a2:36:d1:0c: 06:85:c4:d7:9f:a6:3c:af:24:d3:67:85:6c:a1:46:d8:5a:8c: 5a:1d:3f:e0:92:b0:59:9e:b5:06:8d:3e:40:a8:87:79:6d:6d: 17:ec:65:c8:9c:27:78:1c:a0:80:61:0b:1d:83:e0:4f:48:ad: 77:5e:73:57:c5:23:38:b2:44:bb:47:94:75:97:90:aa:ac:80: ff:5c:e5:f9:c0:00:28:6b:a5:85:ec:24:af:ff:91:30:d0:27: 7a:48:ec:9c:3d:7c:0e:4f:73:16:d0:85:8f:fb:ce:71:66:9a: 64:63:fa:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjNBMjExMC8GA1UEBRMoNEZGMEYyRjhEQkYzQjE0QTVFQjEyM0I0MUZFOURFNjcz QjEyNTE3RjAeFw0yNTA1MzEwNjQwNDRaFw0yNTA2MDcwNjQwNDRaMBgxFjAUBgNV BAMTDTY4M2FhNDZjLTE2Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK+qXi8TZw9qzTrCfSBl6sN568WZ8F2TKwuK0v35Dr9iJyL9QSxTkIvCDXdfCV Z33EzkrNYP/x/OEANPtwr6r/+o9R3mepYpbmZxl54ezehS14DZyRj7hTDu4p7RQ0 o0TOqo5VGSpF1M8SYo33B6ZMTSo3S4v+rf2JCMydHUfiQh5UhEKjJ36D8C0/MFgZ yXb0rBhUPgzNbCnnfrsSfFaAgHJFVGWL3DvgSPQGmjS46pyekIaHfAkW2WY3oyOV +PQwrlyuvvgJBCDbDhxoxhAUkazj+JGaJLZzyP3lquSFwLb5IDatw+KCfpBtCVsb V+Q3On2UOSY5Hr4RYuzge3jzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwQ3ezLjF /rkCGSgDPyI/67a4jFMwHwYDVR0jBBgwFoAUT/Dy+NvzsUpesSO0H+neZzsSUX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzY3OEFDQTE0QUU0 OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1VwZXNTTzBILW5lWnpzU1VY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9EeS1OdnpzVXBlc1NPMEgtbmVaenNTVVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG M0EyLzY3OEFDQTE0QUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1Vw ZXNTTzBILW5lWnpzU1VYOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGtu1N887mH94kEV/uEIwPlDJgq7gv5OFBNsDrC+RjGudcN2iPzoT/N4 99oVJOrT6Hk99K46BKIjZ7h6CWUYMk46NlLtUeLfy+eqB07XM90ekX7U4QQZqaw4 blOnxcjpmW2/w4Hm1c5FIKU9cyxt6ZcPH+ahEFqOQqMHfTqw+oiS4FlM9GIRAnkv St64ojbRDAaFxNefpjyvJNNnhWyhRthajFodP+CSsFmetQaNPkCoh3ltbRfsZcic J3gcoIBhCx2D4E9IrXdec1fFIziyRLtHlHWXkKqsgP9c5fnAAChrpYXsJK//kTDQ J3pI7Jw9fA5PcxbQhY/7znFmmmRj+iQ= -----END CERTIFICATE-----Generated at Sat May 31 17:28:54 2025 by rpki-client