$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft File: TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json) Hash identifier: 7fNIbDJAEOR7wBVv0JIs+us8Wvzm9EXDty2bPk+185s= Subject key identifier: C9:51:1B:C6:38:29:41:14:F8:62:95:E9:D0:E5:B9:4C:54:A1:9E:58 Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 Certificate issuer: /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft Manifest number: 0766 Signing time: Wed 02 Jul 2025 21:50:13 +0000 Manifest this update: Wed 02 Jul 2025 21:50:13 +0000 Manifest next update: Wed 09 Jul 2025 21:50:13 +0000 Files and hashes: 1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: r0xSCaXHkMdMf17hdKp5FpIMfAGhFw3UUsTjIvwsj10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Validity Not Before: Jul 2 21:50:13 2025 GMT Not After : Jul 9 21:50:13 2025 GMT Subject: CN=6865a995-506a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:93:e5:88:18:46:0f:77:3c:9b:db:5e:d5:00: f2:87:70:9b:01:34:0d:82:b5:80:c9:37:6b:2c:12: 16:e0:e4:52:9b:60:6a:1c:12:5c:b7:ef:95:57:cc: 73:f8:da:0f:ee:27:1e:ea:40:fc:b1:7c:88:0a:8c: 95:42:f7:f1:5a:c4:dd:15:ca:fd:ea:48:a4:1c:ee: bf:f5:6c:4b:8b:ec:b8:c7:a6:02:ea:10:65:9d:bd: 74:cf:9f:c8:0a:10:5d:ae:d2:ab:d2:3e:87:5f:82: 32:5f:03:09:55:dc:ee:4e:05:57:44:c1:8e:78:d7: fa:16:58:43:2a:61:b7:6b:fd:3f:a4:ac:13:ff:80: 4d:48:66:cf:2b:5a:c6:b0:96:ef:45:ed:52:f6:66: 29:82:34:c3:c0:c3:79:77:52:ad:7c:d8:d3:2a:30: dd:f9:df:ab:5a:c8:0c:45:f3:e2:7c:52:4b:b9:cc: ff:d0:a2:aa:7f:8c:c2:d5:c4:ed:e9:44:0d:cf:ba: 83:b5:94:5a:b7:14:43:50:4f:d4:5a:7d:95:1a:c1: a3:ba:5c:2d:3e:0c:a1:a1:c8:86:72:f0:e8:3d:ec: a9:01:43:cc:64:b5:a2:ae:4a:1d:72:f7:91:a7:89: 79:bb:b5:a3:0d:b9:a5:7b:07:1f:6a:01:7e:60:21: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:51:1B:C6:38:29:41:14:F8:62:95:E9:D0:E5:B9:4C:54:A1:9E:58 X509v3 Authority Key Identifier: keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a3:5b:93:c4:9d:e4:1c:5d:8d:cc:e1:a0:64:d9:ba:33:f8: 62:d4:89:06:b4:e3:80:ad:2e:ac:c6:75:91:31:8b:3f:29:95: 7d:ed:bf:71:6d:dd:23:0c:5d:c1:1c:ed:ba:94:9b:84:3b:ac: 04:b0:8b:70:3e:3b:dd:ca:2b:bf:4d:61:1e:2c:81:35:91:9f: ce:75:e8:88:27:8e:c0:29:65:c9:ec:cd:1c:19:14:bd:84:ec: 2a:37:ae:94:a1:b8:74:0e:45:d0:a7:b7:83:1f:64:e2:fa:85: eb:23:05:f7:64:4c:58:8a:30:3c:2d:3f:d3:9c:79:bd:82:4f: 9b:59:88:e4:4a:5f:ad:16:49:68:04:f7:9f:d1:7d:1a:c2:82: 26:00:fb:ba:7f:9e:3e:dc:9c:7e:9e:ce:36:c4:63:df:01:fc: ef:dd:05:1f:f6:fb:6d:3f:02:1b:25:20:50:07:96:bd:29:97: 72:7a:d5:11:58:b2:2a:1d:f4:ee:28:9d:25:56:e1:40:6a:05: 02:47:8e:dd:d9:62:03:d5:6d:fe:36:ab:ed:b6:8c:52:62:85: e1:30:73:3d:b5:5d:26:7e:cf:41:4a:d7:f2:39:2e:24:ae:72: 64:04:1c:ce:12:46:95:91:0b:fb:5e:69:37:6b:3a:2f:54:24: 0b:a3:c6:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCODgxMTAvBgNVBAUTKDREMDI0RDdFRTkzQkYwNkU3OEYyMEMyRDk3ODVDMDBD QUVFRDZFNDQwHhcNMjUwNzAyMjE1MDEzWhcNMjUwNzA5MjE1MDEzWjAYMRYwFAYD VQQDEw02ODY1YTk5NS01MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZPliBhGD3c8m9te1QDyh3CbATQNgrWAyTdrLBIW4ORSm2BqHBJct++VV8xz +NoP7ice6kD8sXyICoyVQvfxWsTdFcr96kikHO6/9WxLi+y4x6YC6hBlnb10z5/I ChBdrtKr0j6HX4IyXwMJVdzuTgVXRMGOeNf6FlhDKmG3a/0/pKwT/4BNSGbPK1rG sJbvRe1S9mYpgjTDwMN5d1KtfNjTKjDd+d+rWsgMRfPifFJLucz/0KKqf4zC1cTt 6UQNz7qDtZRatxRDUE/UWn2VGsGjulwtPgyhociGcvDoPeypAUPMZLWirkodcveR p4l5u7WjDbmlewcfagF+YCEfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlRG8Y4 KUEU+GKV6dDluUxUoZ5YMB8GA1UdIwQYMBaAFE0CTX7pO/BuePIMLZeFwAyu7W5E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI4OC8yRTMzRjhCMDFG RTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhHNTQ4Z3d0bDRYQURLN3Ri a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RRSk5mdWs3OEc1NDhnd3RsNFhBREs3dGJrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI4OC8yRTMzRjhCMDFGRTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhH NTQ4Z3d0bDRYQURLN3Ria1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQo1uTxJ3kHF2NzOGgZNm6M/hi1IkGtOOArS6sxnWRMYs/KZV97b9x bd0jDF3BHO26lJuEO6wEsItwPjvdyiu/TWEeLIE1kZ/OdeiIJ47AKWXJ7M0cGRS9 hOwqN66Uobh0DkXQp7eDH2Ti+oXrIwX3ZExYijA8LT/TnHm9gk+bWYjkSl+tFklo BPef0X0awoImAPu6f54+3Jx+ns42xGPfAfzv3QUf9vttPwIbJSBQB5a9KZdyetUR WLIqHfTuKJ0lVuFAagUCR47d2WID1W3+NqvttoxSYoXhMHM9tV0mfs9BStfyOS4k rnJkBBzOEkaVkQv7Xmk3azovVCQLo8a8 -----END CERTIFICATE-----Generated at Thu Jul 3 21:46:18 2025 by rpki-client