$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: av5CDGst4OX87WUYjhrGOfjuTHJgugezCdFplSwpNPA= Subject key identifier: B1:85:64:9D:33:70:CF:4A:59:58:09:DC:54:27:30:3D:92:57:FB:FE Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02DD Signing time: Thu 03 Jul 2025 01:44:07 +0000 Manifest this update: Thu 03 Jul 2025 01:44:06 +0000 Manifest next update: Thu 10 Jul 2025 01:44:06 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: ERtX/4tzQAPTupG0o025Lw2kOPGizxebRVsXdpLBTG0=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Jul 3 01:44:06 2025 GMT Not After : Jul 10 01:44:06 2025 GMT Subject: CN=6865e067-cbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:66:50:7a:ef:05:41:e5:8e:9d:4c:f5:11: 9a:76:aa:9a:e4:d0:7b:cc:f2:cb:29:49:de:30:95: 3f:8d:c0:af:68:2e:0a:79:00:9a:ae:d3:a3:3e:da: c8:e6:14:98:fc:12:89:a5:53:3f:78:c1:5a:bc:44: 99:02:2a:07:75:07:76:54:c6:23:5e:e3:9b:20:24: f5:17:b4:64:b8:c8:94:db:5f:32:ac:24:fa:6d:4d: b8:d5:b7:da:88:f4:6a:8e:fd:22:93:63:19:70:2a: e0:ca:3a:8d:de:11:89:97:55:b4:2f:56:d7:94:36: 58:f6:60:f8:43:1d:44:1e:d8:23:b7:dd:ce:29:06: 01:65:84:45:a5:2c:e4:bb:22:b1:d5:17:68:86:4d: 46:81:b4:a0:f0:39:3d:45:2d:62:18:c3:e2:2a:4c: 86:f7:84:b5:e2:d0:af:c5:34:f1:3e:62:13:e9:88: 60:cc:ea:ae:03:9d:1f:ca:23:ff:6d:6f:89:0a:89: 16:44:ba:81:09:42:7a:eb:83:f8:6f:7f:00:51:8a: d7:2e:55:df:83:74:51:34:be:17:3e:a1:02:b2:dd: 2c:46:d7:2e:cb:ef:ce:f6:66:67:f4:d0:9b:e2:a5: 7a:75:cc:a2:9f:a3:cd:43:3a:03:ef:d3:c0:59:bd: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:85:64:9D:33:70:CF:4A:59:58:09:DC:54:27:30:3D:92:57:FB:FE X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ff:a3:f6:47:4c:ff:4b:9b:7e:c9:2e:b2:19:cc:28:ab:ef: 5e:db:cd:b2:bb:62:aa:ec:52:c3:72:d5:07:08:8e:9b:6e:bd: 2d:d1:8b:14:2b:d7:ef:b0:d5:8b:20:81:e5:ec:77:11:19:6c: ce:76:65:5e:69:8d:f7:d0:54:fe:5c:5c:34:b3:0d:ee:4d:98: 1b:e3:fd:63:4b:cc:93:6b:bc:60:e8:3a:c6:a0:fe:32:ad:b3: c4:e9:e8:da:f3:3b:8c:04:77:24:b7:63:5d:e3:8e:7a:7a:a0: 3f:98:29:d6:31:5b:57:2f:1a:f4:24:bd:25:5c:35:9c:7b:b5: c5:24:8a:b0:83:54:c1:cb:31:b7:f1:ab:d8:f9:7c:97:5c:d9: b4:24:06:44:19:58:5e:22:f9:02:07:6f:ef:37:13:ea:75:1d: 65:cd:e1:ec:1d:90:4d:b2:ea:a9:9e:95:fd:32:82:d7:11:74: a3:e5:0d:ed:cd:ee:21:65:e2:82:6e:66:40:41:a2:76:c1:e7: 94:92:5a:2d:4c:7c:f1:0a:ff:80:69:49:00:9a:0f:ca:ff:9a: c5:79:1b:b4:a9:de:d3:1a:6c:fd:1a:ba:30:42:e5:fb:d8:bd: dd:65:69:5a:fa:5f:69:77:a4:96:66:bf:93:7f:bb:d1:1a:09: c3:87:33:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwNzAzMDE0NDA2WhcNMjUwNzEwMDE0NDA2WjAYMRYwFAYD VQQDEw02ODY1ZTA2Ny1jYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz91mUHrvBUHljp1M9RGadqqa5NB7zPLLKUneMJU/jcCvaC4KeQCartOjPtrI 5hSY/BKJpVM/eMFavESZAioHdQd2VMYjXuObICT1F7RkuMiU218yrCT6bU241bfa iPRqjv0ik2MZcCrgyjqN3hGJl1W0L1bXlDZY9mD4Qx1EHtgjt93OKQYBZYRFpSzk uyKx1Rdohk1GgbSg8Dk9RS1iGMPiKkyG94S14tCvxTTxPmIT6YhgzOquA50fyiP/ bW+JCokWRLqBCUJ664P4b38AUYrXLlXfg3RRNL4XPqECst0sRtcuy+/O9mZn9NCb 4qV6dcyin6PNQzoD79PAWb0v4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGFZJ0z cM9KWVgJ3FQnMD2SV/v+MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX/6P2R0z/S5t+yS6yGcwoq+9e282yu2Kq7FLDctUHCI6bbr0t0YsU K9fvsNWLIIHl7HcRGWzOdmVeaY330FT+XFw0sw3uTZgb4/1jS8yTa7xg6DrGoP4y rbPE6eja8zuMBHckt2Nd4456eqA/mCnWMVtXLxr0JL0lXDWce7XFJIqwg1TByzG3 8avY+XyXXNm0JAZEGVheIvkCB2/vNxPqdR1lzeHsHZBNsuqpnpX9MoLXEXSj5Q3t ze4hZeKCbmZAQaJ2weeUklotTHzxCv+AaUkAmg/K/5rFeRu0qd7TGmz9GrowQuX7 2L3dZWla+l9pd6SWZr+Tf7vRGgnDhzM/ -----END CERTIFICATE-----Generated at Thu Jul 3 16:44:54 2025 by rpki-client