$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: cCxAk0UOSmst87rI2qyGp9rBnzbADMBsnknHd6d++KM= Subject key identifier: C6:CA:FB:52:48:10:22:39:D7:50:5D:2F:B9:09:91:48:BC:A5:E5:F4 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 0374 Signing time: Sat 31 May 2025 01:06:22 +0000 Manifest this update: Sat 31 May 2025 01:06:21 +0000 Manifest next update: Sat 07 Jun 2025 01:06:21 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: K8DybX3U66Bqvl3jNhWXtzufz1aqnEy88Sbh81a3OPE=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: May 31 01:06:21 2025 GMT Not After : Jun 7 01:06:21 2025 GMT Subject: CN=683a560d-ffb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:c0:d2:54:53:e9:be:16:c4:7c:09:78:15: ef:49:b3:c2:68:01:e4:e7:99:02:6d:d5:3a:45:02: 35:4b:16:ac:89:25:08:7c:ef:88:e8:f9:66:62:6d: 32:4d:30:9b:59:b9:ef:2b:44:aa:6d:44:5d:85:dc: ad:c3:d6:0e:33:b0:5d:3f:ee:0f:a6:d4:16:c9:47: e2:43:f0:5c:15:ac:26:fd:f0:32:41:6e:cb:b8:2e: ed:2a:5f:ca:20:b1:03:41:1f:b3:0d:94:e6:d6:d0: 40:d6:e2:64:3f:e5:2f:e9:91:19:06:0f:dd:d0:71: 7e:ad:72:ca:42:cb:a7:06:e6:02:4f:c1:b2:1b:e8: bc:08:4f:80:33:e0:35:16:6d:71:46:4d:1e:b8:a8: 9b:ef:cd:ba:5a:e3:6e:6d:b0:8b:46:8a:87:f6:8c: b3:6e:ca:58:2f:08:98:35:1b:06:86:8e:cf:99:5f: 82:1b:0b:73:87:4a:03:34:ad:5a:ad:c9:e4:2c:ea: 0d:eb:01:a7:93:da:b3:e7:46:be:9d:21:84:94:b7: 7f:57:43:49:54:7f:25:de:e6:3a:e0:61:27:16:95: 6c:6f:7d:38:49:e0:aa:f4:ec:a0:3b:78:bc:eb:36: bb:a5:0e:bb:03:83:19:dc:4c:17:40:4a:ce:84:78: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CA:FB:52:48:10:22:39:D7:50:5D:2F:B9:09:91:48:BC:A5:E5:F4 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0b:fc:5c:e3:d6:a5:b3:a8:e2:40:9d:44:ff:f3:69:5d:d6: 06:c4:8b:aa:fd:58:5a:a9:91:b8:18:4a:5b:22:6f:db:31:48: 45:33:03:c5:95:f1:db:7d:78:e7:7d:0b:b5:41:f2:9d:76:ff: cb:03:79:0f:fa:70:f5:1e:b5:4f:e6:e3:f8:c3:c3:22:ef:84: 9d:88:e5:ae:e0:2b:82:33:4f:87:63:17:4b:30:3e:15:b2:08: 07:2d:20:71:b4:3b:88:7f:3d:24:be:be:c9:43:72:02:34:ee: 7e:7d:33:a1:65:1e:ba:68:ba:ec:85:24:1a:11:45:89:e6:17: 94:2b:3d:f4:9d:7c:29:41:6b:a2:81:82:92:69:77:ca:93:70: c8:0e:17:4a:04:54:29:d7:09:94:3a:b6:13:a0:a2:6f:f0:4a: 59:73:95:36:f0:6e:ff:bc:23:fb:3f:e0:c9:eb:1f:ff:34:cc: 35:58:28:23:66:d1:32:22:8b:f3:58:81:51:10:70:a9:ed:73: b7:ff:c1:f6:43:09:d7:4d:e5:90:0c:8c:68:e0:f9:76:bb:7b: 17:f7:f3:dc:2d:4e:eb:0d:3e:14:cb:14:10:9f:ee:a0:83:c4: e5:9a:96:77:fc:36:a8:e0:ac:62:4b:dc:96:35:ad:a4:f1:ec: 7b:86:09:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwNTMxMDEwNjIxWhcNMjUwNjA3MDEwNjIxWjAYMRYwFAYD VQQDEw02ODNhNTYwZC1mZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymnA0lRT6b4WxHwJeBXvSbPCaAHk55kCbdU6RQI1SxasiSUIfO+I6PlmYm0y TTCbWbnvK0SqbURdhdytw9YOM7BdP+4PptQWyUfiQ/BcFawm/fAyQW7LuC7tKl/K ILEDQR+zDZTm1tBA1uJkP+Uv6ZEZBg/d0HF+rXLKQsunBuYCT8GyG+i8CE+AM+A1 Fm1xRk0euKib7826WuNubbCLRoqH9oyzbspYLwiYNRsGho7PmV+CGwtzh0oDNK1a rcnkLOoN6wGnk9qz50a+nSGElLd/V0NJVH8l3uY64GEnFpVsb304SeCq9OygO3i8 6za7pQ67A4MZ3EwXQErOhHjkOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbK+1JI ECI511BdL7kJkUi8peX0MB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFC/xc49als6jiQJ1E//NpXdYGxIuq/VhaqZG4GEpbIm/bMUhFMwPF lfHbfXjnfQu1QfKddv/LA3kP+nD1HrVP5uP4w8Mi74SdiOWu4CuCM0+HYxdLMD4V sggHLSBxtDuIfz0kvr7JQ3ICNO5+fTOhZR66aLrshSQaEUWJ5heUKz30nXwpQWui gYKSaXfKk3DIDhdKBFQp1wmUOrYToKJv8EpZc5U28G7/vCP7P+DJ6x//NMw1WCgj ZtEyIovzWIFREHCp7XO3/8H2QwnXTeWQDIxo4Pl2u3sX9/PcLU7rDT4UyxQQn+6g g8TlmpZ3/Dao4KxiS9yWNa2k8ex7hglO -----END CERTIFICATE-----Generated at Sat May 31 16:47:43 2025 by rpki-client