$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: 3Ihw4up7IRr2XEUDw3+ecE34OMMyMoZL2CHOMJCfnwI= Subject key identifier: 82:66:F2:20:74:74:23:03:62:E3:BF:6E:8D:1A:EB:C5:A1:74:05:4C Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 0195 Signing time: Wed 02 Jul 2025 19:08:25 +0000 Manifest this update: Wed 02 Jul 2025 19:08:24 +0000 Manifest next update: Wed 09 Jul 2025 19:08:24 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: yhuxOxdKPe9psYdYVa5t7PchyGtMp2FK5sItD+OKxEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Jul 2 19:08:24 2025 GMT Not After : Jul 9 19:08:24 2025 GMT Subject: CN=686583a8-0223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:51:38:06:a7:ff:db:1f:f9:94:03:59:88: 02:dc:1a:41:20:af:19:6a:95:be:b8:80:1d:18:9b: 5a:9b:aa:4f:d0:16:7d:01:c3:32:b2:08:59:de:ed: f4:4d:a6:95:49:11:5f:3a:d9:ba:13:b5:03:44:22: 2a:42:22:a7:37:26:79:72:71:3e:45:4e:cc:7d:0d: d4:51:7e:f5:b8:87:64:0d:9f:64:1e:ac:2d:15:e5: 96:d5:03:4b:89:44:04:ae:30:08:ce:82:cc:0a:f4: 50:3c:81:9c:f5:c3:84:59:48:97:e5:2e:4a:11:4d: 5b:bf:85:59:7c:b6:bc:9e:16:aa:41:fd:b6:49:e0: 25:83:85:7f:36:ed:77:cd:64:bf:a5:50:d8:4a:68: 03:11:c2:10:f4:85:06:dd:9c:c8:f6:b0:fe:66:70: d6:00:a8:f8:c7:cb:59:52:11:aa:df:90:1a:4d:c9: be:52:15:64:e0:65:72:02:ce:5e:f2:7e:cd:8c:65: f7:62:1b:ae:77:76:66:5e:ad:92:63:5a:0b:86:2f: a7:b1:7c:49:3c:e9:e5:d3:3c:8c:61:f5:9e:90:af: e8:b4:44:02:eb:93:bf:c3:5a:6f:2d:fb:88:b6:8d: 62:49:dd:ff:1d:e8:79:86:7e:9e:2e:75:4d:56:0e: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:66:F2:20:74:74:23:03:62:E3:BF:6E:8D:1A:EB:C5:A1:74:05:4C X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:89:2a:08:4f:5e:d5:3b:f0:42:c7:09:11:52:cd:a0:01:bc: f4:d7:a5:9a:b1:9b:40:f4:c2:d8:a0:a4:07:20:81:19:1f:c4: a1:a5:78:5b:bf:ef:9d:35:0e:78:97:86:15:24:4e:d6:76:e6: 06:8e:1a:a8:95:a3:1d:85:9c:e7:aa:27:35:63:fd:54:99:dd: c2:5a:0b:c0:2c:82:32:db:f5:30:ea:df:42:6f:5d:78:8f:dc: f3:47:3c:04:48:1b:e8:61:7f:a0:f6:78:8b:a6:a8:bf:f9:59: 04:96:89:8c:19:de:8b:d8:a3:ad:65:93:0d:9d:74:51:e2:3a: 0f:15:25:57:d1:d2:79:d7:20:dc:e4:09:f8:65:7e:f4:04:b9: 17:44:5c:ce:99:c6:ee:66:00:5a:f5:33:e1:54:2a:ac:d7:3d: 0b:db:27:00:80:df:f9:2f:64:e5:08:d5:b1:61:00:5f:79:23: e2:33:ea:9c:e1:38:89:0c:5b:95:81:66:60:1a:d2:a1:14:aa: f6:ab:ef:51:8a:b1:18:03:25:d2:8b:29:09:08:4d:de:d8:f3: 1f:c4:73:ff:90:9f:bd:d8:e6:3c:4a:e7:84:65:77:06:e4:0e: 01:a8:be:dd:16:c2:1f:4c:3f:28:db:31:2a:e0:7b:59:e8:d6: 8c:25:4e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjUwNzAyMTkwODI0WhcNMjUwNzA5MTkwODI0WjAYMRYwFAYD VQQDEw02ODY1ODNhOC0wMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApitROAan/9sf+ZQDWYgC3BpBIK8ZapW+uIAdGJtam6pP0BZ9AcMysghZ3u30 TaaVSRFfOtm6E7UDRCIqQiKnNyZ5cnE+RU7MfQ3UUX71uIdkDZ9kHqwtFeWW1QNL iUQErjAIzoLMCvRQPIGc9cOEWUiX5S5KEU1bv4VZfLa8nhaqQf22SeAlg4V/Nu13 zWS/pVDYSmgDEcIQ9IUG3ZzI9rD+ZnDWAKj4x8tZUhGq35AaTcm+UhVk4GVyAs5e 8n7NjGX3Yhuud3ZmXq2SY1oLhi+nsXxJPOnl0zyMYfWekK/otEQC65O/w1pvLfuI to1iSd3/Heh5hn6eLnVNVg5oFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJm8iB0 dCMDYuO/bo0a68WhdAVMMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBviSoIT17VO/BCxwkRUs2gAbz016WasZtA9MLYoKQHIIEZH8ShpXhb v++dNQ54l4YVJE7WduYGjhqolaMdhZznqic1Y/1Umd3CWgvALIIy2/Uw6t9Cb114 j9zzRzwESBvoYX+g9niLpqi/+VkElomMGd6L2KOtZZMNnXRR4joPFSVX0dJ51yDc 5An4ZX70BLkXRFzOmcbuZgBa9TPhVCqs1z0L2ycAgN/5L2TlCNWxYQBfeSPiM+qc 4TiJDFuVgWZgGtKhFKr2q+9RirEYAyXSiykJCE3e2PMfxHP/kJ+92OY8SueEZXcG 5A4BqL7dFsIfTD8o2zEq4HtZ6NaMJU5q -----END CERTIFICATE-----Generated at Thu Jul 3 23:21:33 2025 by rpki-client