$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft File: -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json) Hash identifier: /+Y/p2b1TYTewp5HDliFwpTyvQFjPgmnLzs+KTEUzBk= Subject key identifier: 53:D2:55:30:15:C1:86:02:28:92:CF:6C:3B:E8:C0:16:31:45:F5:E6 Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB Certificate issuer: /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft Manifest number: 0B54 Signing time: Sat 28 Jun 2025 18:50:23 +0000 Manifest this update: Sat 28 Jun 2025 18:50:22 +0000 Manifest next update: Sat 05 Jul 2025 18:50:22 +0000 Files and hashes: 1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: pZdYGsJz/C4UYQOp6PgLxI0+HW6lO1NrLji2XvwBbtE=) 2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 88DAO3QlO8H0+j4IQqrGiQaCtaGiXiNDQrSD6ob+BaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Validity Not Before: Jun 28 18:50:22 2025 GMT Not After : Jul 5 18:50:22 2025 GMT Subject: CN=6860396e-8854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:84:14:63:1c:fb:74:f3:f6:7e:91:14:d0: c4:4b:3b:0e:b0:c2:47:da:9c:9c:85:6b:0c:60:8f: 17:db:da:4f:2c:9c:b1:c3:80:ed:b8:46:4e:8b:96: e1:e0:7c:de:51:55:63:f5:8c:77:0c:df:84:d4:75: 60:74:f0:40:12:76:0e:f1:06:a2:4a:d3:df:26:c0: 07:3b:9a:79:07:5d:67:e9:ae:2a:aa:a3:09:e6:67: 4f:4d:df:05:b6:10:ea:41:99:73:13:67:3f:55:0f: 09:78:d4:e3:c7:2f:7a:39:0d:2f:83:d8:d4:8a:59: d7:3d:0b:96:e0:de:41:81:49:0c:98:3e:d8:0e:00: 8e:92:74:f7:1e:de:d3:8d:1e:da:f6:55:28:0b:5a: af:8e:f8:f4:44:53:9c:fa:df:ef:bf:cc:6f:5d:fd: e4:e3:0f:87:eb:9e:af:74:cb:f3:ac:45:7c:50:8d: c1:79:23:a6:eb:c1:e5:e3:fa:44:26:b9:37:dc:ca: 36:5e:83:c4:6d:f7:e3:2c:79:bd:49:85:91:4c:14: 3f:26:91:cf:1f:dc:bb:ae:a9:d4:6a:0c:2f:64:d7: 0a:a9:e6:1a:23:0c:7f:ea:e2:0f:09:ec:d7:be:bc: 26:ea:1d:3a:5d:7f:d3:fc:20:0f:b1:e3:62:ae:56: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D2:55:30:15:C1:86:02:28:92:CF:6C:3B:E8:C0:16:31:45:F5:E6 X509v3 Authority Key Identifier: keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:90:eb:e8:09:6d:ff:a4:51:b0:6e:4a:58:af:10:d4:86:95: cf:6d:12:66:5d:46:5f:a1:d6:42:fa:f0:a9:29:60:a6:e5:4f: b5:5b:78:cf:70:f9:82:a5:92:68:2f:e8:14:ba:6c:8e:b2:1d: ae:26:d5:fb:02:5c:91:b8:c9:f1:54:74:cf:91:27:c0:e6:7a: 2d:95:ff:2d:e6:1e:4f:81:ac:cd:ce:6b:8e:52:71:ff:e8:4a: 8e:37:c6:e1:66:f6:80:a5:7f:3a:e9:72:cb:f7:f2:a2:de:7c: 6c:34:9b:9e:95:15:3c:f8:2c:eb:d9:da:62:74:97:6d:61:e9: f3:43:a7:ca:ef:28:ee:f5:22:6f:46:00:bb:fe:b3:da:53:aa: 0b:6b:86:08:4b:9e:59:24:0a:b6:80:4d:43:9d:98:47:ec:be: 77:88:03:5a:e1:38:6d:f1:36:c7:9d:8d:e8:a4:27:23:1a:09: f6:b9:7c:f6:8f:d3:58:8c:a4:e5:1c:09:be:5c:5e:52:1e:ad: aa:58:12:30:c9:22:7b:65:3f:16:6b:03:9a:6c:50:1a:eb:b3: 9f:8e:b8:0e:75:a0:ab:37:17:a5:a2:ac:45:3a:e8:78:8e:a7: 7f:09:8d:4b:e6:8a:86:44:fe:ab:91:e6:1c:c9:ed:05:cf:d5: 6b:a4:fd:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MkMxMTAvBgNVBAUTKEZBRDRDNjc1RDkzODk2RThGNzVENkQyRDk4RDdGQTVG RTE0ODQ0QkIwHhcNMjUwNjI4MTg1MDIyWhcNMjUwNzA1MTg1MDIyWjAYMRYwFAYD VQQDEw02ODYwMzk2ZS04ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgmEFGMc+3Tz9n6RFNDESzsOsMJH2pychWsMYI8X29pPLJyxw4DtuEZOi5bh 4HzeUVVj9Yx3DN+E1HVgdPBAEnYO8QaiStPfJsAHO5p5B11n6a4qqqMJ5mdPTd8F thDqQZlzE2c/VQ8JeNTjxy96OQ0vg9jUilnXPQuW4N5BgUkMmD7YDgCOknT3Ht7T jR7a9lUoC1qvjvj0RFOc+t/vv8xvXf3k4w+H656vdMvzrEV8UI3BeSOm68Hl4/pE Jrk33Mo2XoPEbffjLHm9SYWRTBQ/JpHPH9y7rqnUagwvZNcKqeYaIwx/6uIPCezX vrwm6h06XX/T/CAPseNirlbG6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPSVTAV wYYCKJLPbDvowBYxRfXmMB8GA1UdIwQYMBaAFPrUxnXZOJbo911tLZjX+l/hSES7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyQy9DNjVEMDVDODM2 REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1ajNYVzB0bU5mNlgtRklS THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10VEdkZGs0bHVqM1hXMHRtTmY2WC1GSVJMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyQy9DNjVEMDVDODM2REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1 ajNYVzB0bU5mNlgtRklSTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEkOvoCW3/pFGwbkpYrxDUhpXPbRJmXUZfodZC+vCpKWCm5U+1W3jP cPmCpZJoL+gUumyOsh2uJtX7AlyRuMnxVHTPkSfA5notlf8t5h5PgazNzmuOUnH/ 6EqON8bhZvaApX866XLL9/Ki3nxsNJuelRU8+Czr2dpidJdtYenzQ6fK7yju9SJv RgC7/rPaU6oLa4YIS55ZJAq2gE1DnZhH7L53iANa4Tht8TbHnY3opCcjGgn2uXz2 j9NYjKTlHAm+XF5SHq2qWBIwySJ7ZT8WawOabFAa67OfjrgOdaCrNxeloqxFOuh4 jqd/CY1L5oqGRP6rkeYcye0Fz9VrpP25 -----END CERTIFICATE-----Generated at Sun Jun 29 16:01:39 2025 by rpki-client