$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: perpPCoPtvYz9gfASyRZI1JK4oc2UrJPOm0U+8mGnrA= Subject key identifier: 92:0D:C5:23:FB:20:2C:AC:08:5D:57:6D:BF:98:0E:23:51:26:60:BF Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0C80 Signing time: Fri 30 May 2025 18:26:59 +0000 Manifest this update: Fri 30 May 2025 18:26:58 +0000 Manifest next update: Fri 06 Jun 2025 18:26:58 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: LHuWJ+rIpsXb7oiFTq4rZQ2GNH/wpdwgSjw/IW/NC1o=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: May 30 18:26:58 2025 GMT Not After : Jun 6 18:26:58 2025 GMT Subject: CN=6839f873-c3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:9c:0f:5d:4a:12:5b:39:17:5a:53:48:f2: 9a:e5:bc:e7:58:e3:30:01:2a:c8:43:89:bd:88:b7: 31:81:71:06:92:03:5b:fe:55:da:59:a6:9d:7d:42: ff:38:9b:32:06:df:9c:aa:8b:cd:bd:c3:c4:5e:84: 16:82:77:12:f7:87:5e:40:bf:c4:f6:2f:f0:6a:9d: ce:7f:58:c3:c6:cc:59:16:c3:e3:c1:c9:56:96:e0: 95:8b:5b:cd:18:1c:d1:b1:47:c5:c4:40:29:3d:48: 10:0c:73:c8:68:f8:75:b4:db:66:d6:e7:79:79:92: 64:3c:26:f2:99:99:5e:0a:c9:37:8d:3a:fd:d7:68: 88:c5:40:5a:2d:04:e4:1e:54:6e:9c:87:39:a2:e4: 5a:9e:a5:db:96:4b:e3:48:2d:e2:80:b2:b6:c1:01: 6a:d8:c3:89:39:4a:7b:02:9f:83:1b:27:b5:2a:61: aa:b3:2f:e5:05:29:2a:bf:67:56:fd:c4:36:47:4c: 6e:73:3c:f5:61:46:17:6c:49:96:c0:b9:97:c8:36: f1:fe:1e:7d:7b:e7:b4:63:0b:23:c6:c3:35:5b:cd: bb:6e:d4:54:06:de:4c:a7:83:84:c4:32:47:27:37: b0:ca:82:a2:60:52:9e:6a:c0:72:f0:cf:38:b6:4e: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0D:C5:23:FB:20:2C:AC:08:5D:57:6D:BF:98:0E:23:51:26:60:BF X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:22:cb:8b:1b:d9:59:71:3f:cd:eb:cc:2c:28:67:77:27:e8: fc:dd:20:fa:01:4d:5a:ad:99:4a:c1:17:d9:c3:b6:9e:f3:94: 58:4a:db:09:4b:56:c4:57:23:f3:b5:71:95:06:d3:5c:b3:32: 67:c5:9b:cf:1d:32:d4:bd:b4:37:33:08:ad:9d:6d:72:bd:7b: ae:0b:4f:a6:1a:76:9c:c1:fd:b6:69:18:16:c4:88:3a:6f:75: 91:bd:6e:5a:7a:24:b3:2a:db:bd:06:74:17:02:68:15:ea:a6: c5:e6:cc:f7:fc:98:96:3e:89:ca:d1:3e:73:86:25:ca:db:bd: c7:c4:08:7a:54:fb:ee:3d:67:bd:e0:2e:c1:b9:0f:19:3c:3e: 3b:cf:cf:a2:e0:29:a7:a4:28:0c:c0:ea:03:0b:3b:19:dd:36: d5:d8:85:56:bc:61:ab:74:e7:99:3d:e5:4f:d5:fb:00:10:ca: 8f:33:55:6c:09:08:fe:75:b7:77:8b:35:3f:a6:5b:91:9b:b6: b1:47:ed:f3:11:bf:44:20:05:9e:1b:8e:05:e1:9b:61:6d:eb: 5d:8a:fb:69:c4:8f:f1:82:25:85:e3:43:be:9f:31:25:e2:4c: 01:06:5c:82:9f:61:1b:02:65:e5:1b:b3:13:55:18:a0:3d:92: 4e:45:dc:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUwNTMwMTgyNjU4WhcNMjUwNjA2MTgyNjU4WjAYMRYwFAYD VQQDEw02ODM5Zjg3My1jM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A+cD11KEls5F1pTSPKa5bznWOMwASrIQ4m9iLcxgXEGkgNb/lXaWaadfUL/ OJsyBt+cqovNvcPEXoQWgncS94deQL/E9i/wap3Of1jDxsxZFsPjwclWluCVi1vN GBzRsUfFxEApPUgQDHPIaPh1tNtm1ud5eZJkPCbymZleCsk3jTr912iIxUBaLQTk HlRunIc5ouRanqXblkvjSC3igLK2wQFq2MOJOUp7Ap+DGye1KmGqsy/lBSkqv2dW /cQ2R0xuczz1YUYXbEmWwLmXyDbx/h59e+e0YwsjxsM1W827btRUBt5Mp4OExDJH JzewyoKiYFKeasBy8M84tk6NFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJINxSP7 ICysCF1Xbb+YDiNRJmC/MB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSIsuLG9lZcT/N68wsKGd3J+j83SD6AU1arZlKwRfZw7ae85RYStsJ S1bEVyPztXGVBtNcszJnxZvPHTLUvbQ3MwitnW1yvXuuC0+mGnacwf22aRgWxIg6 b3WRvW5aeiSzKtu9BnQXAmgV6qbF5sz3/JiWPonK0T5zhiXK273HxAh6VPvuPWe9 4C7BuQ8ZPD47z8+i4CmnpCgMwOoDCzsZ3TbV2IVWvGGrdOeZPeVP1fsAEMqPM1Vs CQj+dbd3izU/pluRm7axR+3zEb9EIAWeG44F4ZthbetdivtpxI/xgiWF40O+nzEl 4kwBBlyCn2EbAmXlG7MTVRigPZJORdxx -----END CERTIFICATE-----Generated at Sat May 31 17:36:09 2025 by rpki-client