$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: 9luDR6tjbhNzfrAEoF4j3/RxkWWNFwDzxacHhcGXz88= Subject key identifier: EA:47:84:65:86:D3:3C:DE:02:33:97:A7:98:15:A8:DA:D3:D7:B8:18 Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 015E Signing time: Thu 03 Jul 2025 04:08:15 +0000 Manifest this update: Thu 03 Jul 2025 04:08:14 +0000 Manifest next update: Thu 10 Jul 2025 04:08:14 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: EnW+gS8VkBaVud6w7rMHlqq5hle69rzAHr7Sktbf6rk=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: c8xC2gX2VG0WPWJTP0Tr0I6LdHRsTfIm5z3hVzO25VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: Jul 3 04:08:14 2025 GMT Not After : Jul 10 04:08:14 2025 GMT Subject: CN=6866022e-c2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e6:6b:24:eb:0c:91:bc:bb:d5:b4:8c:6a:fe: 83:f1:d4:f7:38:14:5d:3a:bc:fa:18:15:de:4b:4a: 1b:03:33:df:53:88:a0:37:89:ac:53:f2:8d:a9:91: 3d:94:f1:f4:f1:45:65:26:ef:7b:0b:3e:cb:b7:68: 0e:58:d3:66:eb:41:97:1c:34:fd:56:42:d0:16:48: fd:0f:be:33:59:58:3f:b3:0d:e9:2a:83:5f:f1:5b: 7b:66:5f:7c:b9:3e:56:30:c3:5a:91:23:00:74:f7: ae:00:76:0d:10:85:47:3d:59:07:97:cf:57:98:42: a1:a1:3c:bc:30:fc:65:6b:15:ee:84:4f:01:de:23: 8b:9a:d5:12:38:57:b0:90:be:bb:79:6c:b9:97:42: a2:cc:44:0e:3d:98:42:6f:51:00:e1:30:05:21:53: 50:e0:07:5c:1d:aa:d6:3a:3f:65:39:bd:19:fe:a3: cb:66:83:e3:0b:31:77:60:bd:31:a1:ca:58:3a:5b: 59:20:0f:e5:0e:1a:61:57:d8:13:a2:da:91:70:4e: d8:db:02:8d:90:e2:7e:21:3a:d5:0c:d4:50:03:5d: 0a:88:69:da:15:e2:06:f2:46:5d:83:3b:8d:3a:32: 4e:4a:c3:85:26:ec:8d:21:7b:d4:72:30:ff:80:8d: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:47:84:65:86:D3:3C:DE:02:33:97:A7:98:15:A8:DA:D3:D7:B8:18 X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:41:c7:c3:3f:70:04:a4:9c:13:a7:22:20:27:67:93:ba:eb: c7:32:be:25:21:c4:b1:2d:18:25:92:a0:2e:a3:15:44:56:bf: ca:62:3e:95:7d:0c:16:5f:2b:4f:63:d7:1f:ec:0b:56:bf:c3: 41:3b:1b:23:bb:97:9d:e0:be:6b:d7:5f:7a:17:35:fb:67:12: 26:3b:12:a0:db:8e:1f:8e:83:73:47:c8:b0:be:88:f4:c4:2b: ed:d3:e8:ad:79:96:5a:be:13:65:8d:81:b8:73:9d:ef:4b:f2: c1:04:32:36:cd:28:ae:cd:88:81:77:30:fa:18:c1:e7:e7:50: 84:0a:88:90:9a:8f:07:ed:b4:18:43:6a:b9:76:d0:61:42:12: 1e:ea:f8:3a:46:91:e1:03:31:9a:0f:02:f7:02:2e:17:7d:50: 0b:1b:aa:4b:56:9f:65:0f:b1:d8:7e:82:22:9f:c9:c8:06:c7: 45:0b:aa:11:c7:72:1c:e5:ef:f1:15:f7:65:e7:cb:18:04:75: 0c:5e:63:07:ed:af:2b:6c:53:b6:cd:3e:36:21:da:c3:b3:b7: 6c:22:f0:9c:c2:58:80:24:fc:7a:19:8b:9a:63:f2:1c:f2:25: e1:f0:af:a5:8e:75:d6:a1:2f:6d:40:b5:6b:53:c6:d2:df:69: bc:46:4d:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUwNzAzMDQwODE0WhcNMjUwNzEwMDQwODE0WjAYMRYwFAYD VQQDEw02ODY2MDIyZS1jMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uZrJOsMkby71bSMav6D8dT3OBRdOrz6GBXeS0obAzPfU4igN4msU/KNqZE9 lPH08UVlJu97Cz7Lt2gOWNNm60GXHDT9VkLQFkj9D74zWVg/sw3pKoNf8Vt7Zl98 uT5WMMNakSMAdPeuAHYNEIVHPVkHl89XmEKhoTy8MPxlaxXuhE8B3iOLmtUSOFew kL67eWy5l0KizEQOPZhCb1EA4TAFIVNQ4AdcHarWOj9lOb0Z/qPLZoPjCzF3YL0x ocpYOltZIA/lDhphV9gTotqRcE7Y2wKNkOJ+ITrVDNRQA10KiGnaFeIG8kZdgzuN OjJOSsOFJuyNIXvUcjD/gI1W+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpHhGWG 0zzeAjOXp5gVqNrT17gYMB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvQcfDP3AEpJwTpyIgJ2eTuuvHMr4lIcSxLRglkqAuoxVEVr/KYj6V fQwWXytPY9cf7AtWv8NBOxsju5ed4L5r1196FzX7ZxImOxKg244fjoNzR8iwvoj0 xCvt0+iteZZavhNljYG4c53vS/LBBDI2zSiuzYiBdzD6GMHn51CECoiQmo8H7bQY Q2q5dtBhQhIe6vg6RpHhAzGaDwL3Ai4XfVALG6pLVp9lD7HYfoIin8nIBsdFC6oR x3Ic5e/xFfdl58sYBHUMXmMH7a8rbFO2zT42IdrDs7dsIvCcwliAJPx6GYuaY/Ic 8iXh8K+ljnXWoS9tQLVrU8bS32m8Rk02 -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:08 2025 by rpki-client