$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: Fx7R/fHpKQ6JKMyA5oRRumt1GPPjiOunmc3+1zKUi/o= Subject key identifier: 45:8E:E3:79:90:FE:7C:C4:08:40:BB:23:AE:2E:19:FA:FB:43:2A:7D Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 39 Signing time: Sat 31 May 2025 07:09:38 +0000 Manifest this update: Sat 31 May 2025 07:09:37 +0000 Manifest next update: Sat 07 Jun 2025 07:09:37 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: Iya7q64WvQmSWjD3NFZtbvQFwgrrWDfgfsRTi4yYc2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: May 31 07:09:37 2025 GMT Not After : Jun 7 07:09:37 2025 GMT Subject: CN=683aab31-db80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:00:1e:b1:99:ff:5c:02:4a:50:99:75:2a: 5a:16:25:6c:73:1b:f4:de:87:06:56:9d:4a:a2:f3: 77:72:7e:07:fd:ff:32:b4:26:8d:d9:cf:17:60:50: 8b:b0:44:9a:bc:15:eb:84:0b:44:aa:2c:f1:1e:cd: e1:c1:1e:57:53:4b:7a:91:6c:4b:c3:37:1c:8a:7e: e6:4f:75:cc:e5:9a:42:db:d2:87:e6:3d:6b:98:6e: d9:22:b2:7f:e8:90:81:19:13:0e:ed:75:5c:d5:bb: 08:f9:ec:d2:0a:fc:67:4e:14:38:d0:a8:29:87:ae: 1b:6b:33:48:e7:a3:6e:94:f5:33:ca:cc:e4:e7:c6: 05:41:f7:26:2c:56:4c:f7:c7:0f:92:ec:21:d9:fb: 51:2c:3e:cb:f8:b0:09:dd:67:a1:c4:77:a3:1d:12: 62:50:ad:29:38:ad:01:36:81:ac:c3:63:17:72:ea: ea:ed:bd:c2:89:ee:72:ee:54:44:2b:5e:b9:e8:c6: 8e:d8:e2:0e:45:9f:e1:11:40:c2:86:2c:9d:fc:40: 85:7e:66:71:c4:3b:60:5e:98:aa:ec:e6:9f:53:0e: 06:7a:ed:39:c5:80:f2:87:96:e4:9b:85:d8:86:88: 5c:2d:5a:6a:0f:18:eb:18:2f:b6:25:5e:4e:78:c0: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:E3:79:90:FE:7C:C4:08:40:BB:23:AE:2E:19:FA:FB:43:2A:7D X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d1:c4:72:2a:77:e9:90:8c:6c:15:e2:94:e9:14:39:82:d8: d0:f1:85:0f:3a:4f:44:51:b8:09:99:03:55:05:9a:35:71:e0: f1:09:45:6a:03:5d:2b:a9:80:2f:e7:ea:fa:27:11:83:9f:87: 31:73:ac:5c:7c:3a:97:6d:eb:35:ed:2d:30:36:f3:e1:27:d6: ca:34:c6:42:18:7e:9e:95:c4:12:ec:10:0c:d6:0e:52:95:0e: ba:50:6f:34:3b:38:1d:4e:cc:a8:22:2b:a2:d3:53:14:b3:b4: 42:6a:d8:69:6b:10:47:26:21:07:cb:f8:5e:4e:94:6d:9f:4c: e0:3b:11:23:e0:e3:1c:f5:bc:b6:a2:f8:ce:45:0e:7f:eb:49: a2:38:55:32:94:af:29:43:f5:07:96:8c:67:cc:22:83:9c:c4: 99:29:02:ff:1f:53:e1:74:c2:c5:ff:5f:21:2b:10:95:1a:cc: 44:d4:8f:8f:86:b9:bc:dc:e0:f4:63:14:4a:f0:21:49:06:fa: 5e:df:85:7a:cd:7f:0c:8e:de:3e:50:9d:27:d2:aa:a8:63:df: a5:1a:07:cb:ae:3f:bf:d6:b9:89:3d:65:86:8c:89:c2:e2:e1: c0:e6:e2:24:1d:95:6b:37:c8:55:00:b2:45:af:97:db:13:c2: cb:2a:91:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA1MzEwNzA5MzdaFw0yNTA2MDcwNzA5MzdaMBgxFjAUBgNV BAMTDTY4M2FhYjMxLWRiODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCnQAesZn/XAJKUJl1KloWJWxzG/TehwZWnUqi83dyfgf9/zK0Jo3ZzxdgUIuw RJq8FeuEC0SqLPEezeHBHldTS3qRbEvDNxyKfuZPdczlmkLb0ofmPWuYbtkisn/o kIEZEw7tdVzVuwj57NIK/GdOFDjQqCmHrhtrM0jno26U9TPKzOTnxgVB9yYsVkz3 xw+S7CHZ+1EsPsv4sAndZ6HEd6MdEmJQrSk4rQE2gazDYxdy6urtvcKJ7nLuVEQr Xrnoxo7Y4g5Fn+ERQMKGLJ38QIV+ZnHEO2BemKrs5p9TDgZ67TnFgPKHluSbhdiG iFwtWmoPGOsYL7YlXk54wM/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURY7jeZD+ fMQIQLsjri4Z+vtDKn0wHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzRxHIqd+mQjGwV4pTpFDmC2NDxhQ86T0RRuAmZA1UFmjVx4PEJRWoD XSupgC/n6vonEYOfhzFzrFx8Opdt6zXtLTA28+En1so0xkIYfp6VxBLsEAzWDlKV DrpQbzQ7OB1OzKgiK6LTUxSztEJq2GlrEEcmIQfL+F5OlG2fTOA7ESPg4xz1vLai +M5FDn/rSaI4VTKUrylD9QeWjGfMIoOcxJkpAv8fU+F0wsX/XyErEJUazETUj4+G ubzc4PRjFErwIUkG+l7fhXrNfwyO3j5QnSfSqqhj36UaB8uuP7/WuYk9ZYaMicLi 4cDm4iQdlWs3yFUAskWvl9sTwssqkXk= -----END CERTIFICATE-----Generated at Sat May 31 17:51:36 2025 by rpki-client