$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: SbMTeIl2xvdVGWypR/VH2TkR28aaWg/ZwIR05mdtY1k= Subject key identifier: B8:54:A2:99:A2:54:79:03:1A:FF:37:60:93:21:37:03:87:9D:A8:D9 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A2A Signing time: Wed 02 Jul 2025 19:59:25 +0000 Manifest this update: Wed 02 Jul 2025 19:59:25 +0000 Manifest next update: Wed 09 Jul 2025 19:59:25 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: aSVRDvBe0o+EKNhh5L50Sq+Xjb1JwngDHVZ3SrAzPik=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Jul 2 19:59:25 2025 GMT Not After : Jul 9 19:59:25 2025 GMT Subject: CN=68658f9d-85db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:13:f8:fa:2c:0a:a1:29:49:1c:1f:83:e5: ba:0b:d5:6f:e1:22:b1:1a:3f:f6:a8:33:b4:02:16: d5:d3:ab:07:3e:0c:3c:f4:73:8b:61:15:81:42:f7: 7c:0d:e3:d3:39:50:2b:cf:fc:44:69:33:9c:8d:20: c5:c7:f0:56:1e:05:2b:10:1c:bc:4a:cd:2e:88:0a: 55:1f:ca:f9:ce:70:76:15:a4:37:84:f3:60:3f:71: e7:fe:72:91:28:5e:77:76:7d:2b:24:e5:10:02:b1: 88:24:25:03:41:a1:34:96:38:f8:ee:4b:a0:d7:23: 5e:76:2e:82:5f:1a:ee:1f:71:2f:32:7f:ad:0a:5d: 1c:a3:71:70:4d:fd:67:48:a5:63:f3:59:50:34:d7: 94:26:fb:a4:1c:9e:e3:07:d8:d9:3d:22:29:94:8c: 7e:1d:c4:ac:23:8b:d7:bd:d4:a6:72:45:f8:1b:d1: 65:9c:7e:b8:fb:7c:b7:fa:f6:f7:34:b1:b0:75:8c: ff:1b:34:67:17:1e:82:c7:1e:87:34:9b:4c:5a:ad: e0:51:f9:b3:77:89:43:4d:a7:19:ea:1f:c1:11:70: 3a:9d:8b:f6:e6:27:a1:20:37:5b:62:ea:00:b3:c6: 98:bf:24:f4:16:9b:83:e2:24:2d:d9:2c:2d:bf:0d: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:54:A2:99:A2:54:79:03:1A:FF:37:60:93:21:37:03:87:9D:A8:D9 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:de:90:5b:a4:1e:58:2e:11:9f:ed:80:04:d0:ed:d4:1b:8a: ae:72:72:f8:60:c8:2e:bd:c6:04:3a:25:8d:f2:39:65:b0:1b: 28:66:ff:c0:30:60:b7:a7:3b:60:33:00:4c:4b:96:81:dc:c3: 34:c8:34:1c:c5:5f:dd:e4:f7:ed:62:69:b1:d5:59:4e:61:ee: 78:ce:31:1d:de:5a:4e:ce:98:69:b2:28:c5:10:78:aa:eb:2a: d2:8c:e0:12:38:33:c9:88:34:56:bb:b7:08:eb:30:46:3a:ac: dd:23:57:00:17:26:27:17:27:e4:9d:66:3f:c1:be:eb:87:8e: 82:20:9d:70:86:4c:af:3f:48:73:fc:f8:fe:d5:5e:63:8f:08: b8:a1:34:2a:94:2a:0a:28:4d:c6:61:ae:dd:52:e8:9e:13:7e: 9d:bd:21:8e:5b:61:45:67:be:d3:f8:6e:71:23:e0:c8:b1:e6: 4c:ec:63:0c:fb:af:6d:78:fc:8a:58:f7:54:38:f0:1f:86:f2: 69:c6:16:2c:9e:cc:33:12:30:9b:15:25:d4:65:7c:2b:25:21: 61:84:ce:cc:67:58:f8:cf:f3:d8:d2:ff:fd:b1:99:f2:c6:fd: 17:e8:65:31:9a:c1:b1:94:54:18:7f:4b:87:5e:86:1d:02:a0: 7d:01:f8:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwNzAyMTk1OTI1WhcNMjUwNzA5MTk1OTI1WjAYMRYwFAYD VQQDEw02ODY1OGY5ZC04NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA330T+PosCqEpSRwfg+W6C9Vv4SKxGj/2qDO0AhbV06sHPgw89HOLYRWBQvd8 DePTOVArz/xEaTOcjSDFx/BWHgUrEBy8Ss0uiApVH8r5znB2FaQ3hPNgP3Hn/nKR KF53dn0rJOUQArGIJCUDQaE0ljj47kug1yNedi6CXxruH3EvMn+tCl0co3FwTf1n SKVj81lQNNeUJvukHJ7jB9jZPSIplIx+HcSsI4vXvdSmckX4G9FlnH64+3y3+vb3 NLGwdYz/GzRnFx6Cxx6HNJtMWq3gUfmzd4lDTacZ6h/BEXA6nYv25iehIDdbYuoA s8aYvyT0FpuD4iQt2Swtvw0/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhUopmi VHkDGv83YJMhNwOHnajZMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC53pBbpB5YLhGf7YAE0O3UG4qucnL4YMguvcYEOiWN8jllsBsoZv/A MGC3pztgMwBMS5aB3MM0yDQcxV/d5PftYmmx1VlOYe54zjEd3lpOzphpsijFEHiq 6yrSjOASODPJiDRWu7cI6zBGOqzdI1cAFyYnFyfknWY/wb7rh46CIJ1whkyvP0hz /Pj+1V5jjwi4oTQqlCoKKE3GYa7dUuieE36dvSGOW2FFZ77T+G5xI+DIseZM7GMM +69tePyKWPdUOPAfhvJpxhYsnswzEjCbFSXUZXwrJSFhhM7MZ1j4z/PY0v/9sZny xv0X6GUxmsGxlFQYf0uHXoYdAqB9Afi+ -----END CERTIFICATE-----Generated at Fri Jul 4 00:29:50 2025 by rpki-client