$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: sZsTOaFNqCOshjOxpjk4RMQN2Qfx3cSimZ8hNnwaHJA= Subject key identifier: EE:60:22:82:9F:42:F5:8E:71:AE:1E:97:AD:45:69:BB:D6:70:19:67 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: CA Signing time: Thu 03 Jul 2025 05:53:44 +0000 Manifest this update: Thu 03 Jul 2025 05:53:43 +0000 Manifest next update: Thu 10 Jul 2025 05:53:43 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: 2OQ+NmdbDM567vjv2p4kLKkZZNHf6iVfWs/LyoFbj78=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: UR1/D+V/HfsARytm1z1u12yu/ZwctEFat0Uu8xOAKlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Jul 3 05:53:43 2025 GMT Not After : Jul 10 05:53:43 2025 GMT Subject: CN=68661ae7-3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:a1:18:41:5d:9b:44:a2:c3:40:7b:d0:81: d6:2a:41:4a:90:8d:a4:3a:16:cb:37:1c:f8:b4:bc: 46:c6:a0:82:77:48:1e:6e:2f:f1:66:05:df:07:a8: 31:f5:15:2e:4d:48:4a:db:17:ab:f8:51:09:34:d6: 46:fb:ea:b9:6a:a9:63:9a:d7:25:fd:db:25:9a:01: ef:e6:84:4f:46:0c:24:d0:76:74:36:6a:2c:71:60: 89:cb:5f:b1:14:14:06:5b:5a:4b:ff:b0:b7:6f:65: af:f8:37:67:a7:5e:87:ad:a7:f6:b0:fd:c7:0f:e1: 4a:a5:0a:73:ea:24:0e:fc:6b:24:16:55:1b:02:f2: 36:18:a1:32:8f:9f:44:c1:33:17:03:9e:f5:ec:21: ac:f9:cf:f1:54:89:5e:92:4d:93:7a:b8:31:a5:22: 17:94:a9:13:c1:9d:b5:a8:f8:18:66:3e:2c:a6:d8: 8a:23:28:e2:53:cc:c1:90:31:2b:ef:7f:7a:a1:5b: ad:43:b7:60:d3:d0:96:7c:58:99:85:ee:55:a4:6c: ac:41:14:03:7d:b9:36:ca:52:62:76:60:91:77:ce: 5a:ad:6f:45:86:03:d0:31:26:ec:a6:3f:7a:51:ec: 92:c5:d7:2d:50:d0:e5:2c:b1:c5:b2:06:6a:10:ca: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:22:82:9F:42:F5:8E:71:AE:1E:97:AD:45:69:BB:D6:70:19:67 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:49:ca:75:b3:4f:2a:a4:d2:88:99:2b:bf:1d:a6:1e:db:15: 59:3a:5e:a4:f8:d6:ac:aa:17:c7:1b:61:d0:ff:32:80:32:8a: 60:fc:99:2a:73:11:db:8a:f7:b9:a7:c0:52:db:86:ab:7e:26: ae:11:10:89:cc:70:35:80:e0:0c:a9:e8:ce:5a:4f:04:39:46: 53:d9:f7:fd:f0:3f:84:e1:ea:63:de:44:f4:d3:de:40:a4:d0: 18:d3:e0:4c:bd:7b:7e:d7:ca:13:41:22:63:9e:8d:38:5a:fd: 6d:2f:3c:c2:8b:21:be:98:77:75:57:56:3c:b1:4b:60:c5:8d: 34:a9:c0:85:61:50:35:a3:66:4b:c6:d2:eb:00:49:a6:74:43: 2a:c7:75:65:72:4e:f7:aa:f0:3c:2a:7f:3d:92:74:ca:5e:78: 20:42:72:d5:2c:19:3e:1c:d2:b9:83:6d:b5:ab:cb:c4:f7:f7: 19:75:53:d4:2a:67:68:37:71:7a:2c:15:9a:61:96:29:2c:5d: e7:f1:b8:97:61:1a:e9:37:c3:4e:10:1e:3b:3d:ae:3f:21:dd: cb:d7:85:d3:cc:d7:d2:36:2c:bb:cf:12:12:d0:04:37:9f:2a: 17:5e:e9:23:5c:14:12:c6:34:02:e1:58:29:04:c8:9e:8c:bf: ae:fe:89:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUwNzAzMDU1MzQzWhcNMjUwNzEwMDU1MzQzWjAYMRYwFAYD VQQDEw02ODY2MWFlNy0zNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47OhGEFdm0Siw0B70IHWKkFKkI2kOhbLNxz4tLxGxqCCd0gebi/xZgXfB6gx 9RUuTUhK2xer+FEJNNZG++q5aqljmtcl/dslmgHv5oRPRgwk0HZ0NmoscWCJy1+x FBQGW1pL/7C3b2Wv+Ddnp16Hraf2sP3HD+FKpQpz6iQO/GskFlUbAvI2GKEyj59E wTMXA5717CGs+c/xVIlekk2TergxpSIXlKkTwZ21qPgYZj4sptiKIyjiU8zBkDEr 7396oVutQ7dg09CWfFiZhe5VpGysQRQDfbk2ylJidmCRd85arW9FhgPQMSbspj96 UeySxdctUNDlLLHFsgZqEMquxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5gIoKf QvWOca4el61FabvWcBlnMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmScp1s08qpNKImSu/HaYe2xVZOl6k+NasqhfHG2HQ/zKAMopg/Jkq cxHbive5p8BS24arfiauERCJzHA1gOAMqejOWk8EOUZT2ff98D+E4epj3kT0095A pNAY0+BMvXt+18oTQSJjno04Wv1tLzzCiyG+mHd1V1Y8sUtgxY00qcCFYVA1o2ZL xtLrAEmmdEMqx3Vlck73qvA8Kn89knTKXnggQnLVLBk+HNK5g221q8vE9/cZdVPU KmdoN3F6LBWaYZYpLF3n8biXYRrpN8NOEB47Pa4/Id3L14XTzNfSNiy7zxIS0AQ3 nyoXXukjXBQSxjQC4VgpBMiejL+u/om+ -----END CERTIFICATE-----Generated at Fri Jul 4 18:55:26 2025 by rpki-client