$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: yMWaIBC3mYKiVKisIuEYAA/KsYX7I7X7njqY69b9CxY= Subject key identifier: 49:24:9F:FD:31:E6:CF:72:7C:43:7D:04:E7:DA:60:A3:AC:68:98:D6 Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 34 Signing time: Thu 03 Jul 2025 07:54:24 +0000 Manifest this update: Thu 03 Jul 2025 07:54:24 +0000 Manifest next update: Thu 10 Jul 2025 07:54:24 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: TkTGM1qkBKF8qUeaKe2Ow+isNy2cu5VixQh73KMOesQ=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Jul 3 07:54:24 2025 GMT Not After : Jul 10 07:54:24 2025 GMT Subject: CN=68663730-1f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:4e:8e:5c:21:9e:fd:1d:dd:5e:65:43:3e: ba:51:8b:30:23:87:c9:bd:84:76:65:5e:01:20:ea: 82:c9:f1:16:fe:e8:1a:08:d4:50:9c:d1:84:c5:35: a5:20:ab:a1:32:1e:2b:30:e7:32:2c:8a:aa:a9:68: 8e:54:5f:58:0e:64:af:4e:9c:3e:07:5f:31:df:7f: 2e:c3:f7:1f:05:41:cb:70:3d:3c:44:3e:13:a8:0b: 8d:71:0f:e8:ed:b6:5e:ee:69:3c:c8:b0:82:8e:ab: ac:36:02:cd:18:b7:82:8e:44:ec:4d:9b:80:30:9e: c6:36:6c:f6:28:59:58:33:91:2d:43:86:b8:92:f4: 61:53:16:a2:ba:14:6b:72:64:72:43:17:55:cd:2b: ad:7e:d1:5c:60:17:b7:56:51:84:de:0b:0f:be:52: e4:42:d3:fd:20:b7:c9:59:3b:76:1b:53:8a:07:e3: 12:90:6d:9e:0c:e4:76:71:de:3d:b1:e3:23:eb:aa: b7:50:e3:1c:f3:e9:9b:29:54:28:3a:a8:3c:f5:58: aa:36:1b:1c:0f:b8:7d:b6:0c:9b:25:7b:5d:58:42: 35:0c:79:c5:11:c0:ee:75:69:64:78:16:00:d7:a0: 2b:51:b4:02:14:24:df:46:62:81:9e:50:cd:54:d8: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:9F:FD:31:E6:CF:72:7C:43:7D:04:E7:DA:60:A3:AC:68:98:D6 X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:52:7c:e0:46:c3:01:a8:9e:77:37:77:78:6f:aa:19:98:d1: c6:3e:59:c9:f7:85:1d:c5:50:b7:18:9b:b6:9a:fa:ea:10:24: 9b:35:1c:1e:56:30:b4:bb:38:34:41:d0:31:95:c2:e0:79:a4: 66:5e:7d:01:90:58:f8:13:ee:e4:b0:db:52:48:2f:26:fd:58: 93:5f:a7:f0:83:f7:d0:d4:71:b6:f8:74:da:0d:2a:ea:aa:25: f5:e1:5f:38:b1:03:67:b6:89:24:bb:25:fd:ef:cb:2f:2b:5e: 79:44:4c:1a:62:f7:f8:cb:0d:17:3e:50:97:a6:63:43:e2:56: dd:cb:32:27:2f:95:82:56:c1:41:3b:9b:01:c7:d6:5a:83:7c: b5:1d:e9:a5:4f:aa:63:81:b4:8b:5a:5d:ac:2c:72:e4:2c:62: 77:31:0c:97:b8:83:22:39:70:18:52:9b:a0:36:ec:db:0f:70: 79:e1:6f:04:7c:c3:ff:6d:79:a5:32:d1:d6:fb:1c:19:39:ad: 95:24:39:7b:a5:1a:a9:d2:3b:cf:37:42:eb:9c:c9:97:2f:52: bc:3e:92:61:e1:4b:7c:0c:ce:18:9d:21:f7:19:28:44:1a:ce: e1:cc:49:35:57:45:89:83:77:b1:ae:82:bf:3d:94:80:d6:2e: 70:0f:ed:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTA3MDMwNzU0MjRaFw0yNTA3MTAwNzU0MjRaMBgxFjAUBgNV BAMTDTY4NjYzNzMwLTFmOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9nE6OXCGe/R3dXmVDPrpRizAjh8m9hHZlXgEg6oLJ8Rb+6BoI1FCc0YTFNaUg q6EyHisw5zIsiqqpaI5UX1gOZK9OnD4HXzHffy7D9x8FQctwPTxEPhOoC41xD+jt tl7uaTzIsIKOq6w2As0Yt4KOROxNm4AwnsY2bPYoWVgzkS1DhriS9GFTFqK6FGty ZHJDF1XNK61+0VxgF7dWUYTeCw++UuRC0/0gt8lZO3YbU4oH4xKQbZ4M5HZx3j2x 4yPrqrdQ4xzz6ZspVCg6qDz1WKo2GxwPuH22DJsle11YQjUMecURwO51aWR4FgDX oCtRtAIUJN9GYoGeUM1U2IqnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSSSf/THm z3J8Q30E59pgo6xomNYwHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1SfOBGwwGonnc3d3hvqhmY0cY+Wcn3hR3FULcYm7aa+uoQJJs1HB5W MLS7ODRB0DGVwuB5pGZefQGQWPgT7uSw21JILyb9WJNfp/CD99DUcbb4dNoNKuqq JfXhXzixA2e2iSS7Jf3vyy8rXnlETBpi9/jLDRc+UJemY0PiVt3LMicvlYJWwUE7 mwHH1lqDfLUd6aVPqmOBtItaXawscuQsYncxDJe4gyI5cBhSm6A27NsPcHnhbwR8 w/9teaUy0db7HBk5rZUkOXulGqnSO883QuucyZcvUrw+kmHhS3wMzhidIfcZKEQa zuHMSTVXRYmDd7Gugr89lIDWLnAP7UM= -----END CERTIFICATE-----Generated at Fri Jul 4 08:03:23 2025 by rpki-client