$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json) Hash identifier: m32zKvfEdZJBex2iGfnUZQHbyNoU8okUKLjGxYZ62/c= Subject key identifier: A4:C3:4E:84:4D:35:E1:4B:90:C5:38:41:67:87:99:D4:D6:B6:DA:25 Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft Manifest number: 0A Signing time: Thu 03 Jul 2025 08:25:45 +0000 Manifest this update: Thu 03 Jul 2025 08:25:44 +0000 Manifest next update: Thu 10 Jul 2025 08:25:44 +0000 Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: Etb243Sd+Eurdo9LzAi1Ukvbiu0sPqavPpg2mc9Vtc0=) 2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: Dtb6Fb2JpEd/Zi2+qi9cOHLUquodmN8UKkbWls/zEtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Validity Not Before: Jul 3 08:25:44 2025 GMT Not After : Jul 10 08:25:44 2025 GMT Subject: CN=68663e89-d892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:e9:f5:40:c8:7d:17:dc:b7:f9:75:af:e3: d9:ff:29:27:75:19:c7:a6:10:5b:10:b1:17:05:78: a2:6c:c6:6c:7e:bc:9d:0b:c6:df:50:65:a4:81:8c: 14:38:ef:6f:ad:91:dd:a4:b1:ae:b4:34:e8:ea:0a: b2:96:e5:89:19:65:3c:d9:37:84:0d:91:c9:60:41: 9e:94:04:01:82:e5:9c:77:29:dd:ab:27:8c:cb:e8: e2:a0:5a:f2:e3:d6:17:9c:13:5c:d8:83:6b:76:be: 5c:db:ae:58:26:14:98:71:b6:04:9d:ed:16:ff:93: 99:dc:ea:78:6e:f9:c0:1f:76:df:95:68:6c:9b:a7: 81:24:c1:d9:d4:dc:17:41:f4:4a:fe:5f:58:60:be: 35:8a:5f:0e:64:8d:d3:8f:68:11:4f:23:37:d7:f0: 52:7d:63:4b:7c:90:5d:0a:6e:03:9a:33:ed:92:87: 2f:e4:01:75:6f:ff:a2:18:c3:e5:cb:76:96:36:e2: e5:84:c9:ef:8e:ed:98:d9:d9:a1:97:2e:1f:57:a0: 57:1a:39:ab:90:18:cf:64:63:2a:fb:2e:82:b0:18: 1f:3e:a7:ba:07:bc:3c:32:f2:f0:ce:63:c7:df:77: 75:a5:96:d4:1c:fa:b3:10:29:17:6f:7f:07:63:70: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C3:4E:84:4D:35:E1:4B:90:C5:38:41:67:87:99:D4:D6:B6:DA:25 X509v3 Authority Key Identifier: keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:62:2a:88:c0:97:af:9c:71:e7:76:b6:df:96:68:71:b2:9b: 6a:4d:0c:38:fa:1f:63:f8:62:ed:10:25:51:f5:c0:6a:dd:07: fd:e3:85:f6:dd:d7:53:46:1e:d0:20:8b:a2:84:74:92:9b:75: 06:10:20:f9:27:82:54:75:2f:e8:f2:c7:bf:05:ea:3e:5a:ee: 29:99:91:ee:80:28:cf:15:17:24:23:76:2d:bc:c5:67:08:81: fc:9d:e1:e3:4a:06:77:51:31:3e:42:bc:97:a8:b2:c2:de:9c: 7b:f1:6e:91:7e:0b:7d:b7:d6:16:e8:de:94:eb:a3:cd:c0:44: 52:98:17:a0:3a:b9:10:ca:bf:49:a1:d4:8c:ed:0b:d9:9e:25: 59:35:3e:78:a5:70:08:35:bd:74:bf:51:2c:02:51:61:85:88: 25:6e:81:38:17:89:ac:82:a9:fb:78:53:0e:52:a6:f1:a0:3e: 4f:77:cc:0d:ce:4c:f3:07:3e:71:43:33:be:6d:b3:c2:90:37: 9e:f6:91:e9:94:e1:f9:4d:b7:88:63:c0:a8:2a:ab:e7:38:eb: 49:56:9b:c0:8a:b3:8f:19:d7:71:cc:16:b2:d2:e1:6c:8c:31: 23:28:cc:ff:9b:ac:39:a7:89:af:d2:81:d2:6e:fb:9b:18:ee: 8f:77:dd:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNEU3RkVBNzFBNDQ3QTZBMTYxNzlDMjY5N0VCRUU1NTUx OTlEQjA5ODAeFw0yNTA3MDMwODI1NDRaFw0yNTA3MTAwODI1NDRaMBgxFjAUBgNV BAMTDTY4NjYzZTg5LWQ4OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHUun1QMh9F9y3+XWv49n/KSd1GcemEFsQsRcFeKJsxmx+vJ0Lxt9QZaSBjBQ4 72+tkd2ksa60NOjqCrKW5YkZZTzZN4QNkclgQZ6UBAGC5Zx3Kd2rJ4zL6OKgWvLj 1hecE1zYg2t2vlzbrlgmFJhxtgSd7Rb/k5nc6nhu+cAfdt+VaGybp4EkwdnU3BdB 9Er+X1hgvjWKXw5kjdOPaBFPIzfX8FJ9Y0t8kF0KbgOaM+2Shy/kAXVv/6IYw+XL dpY24uWEye+O7ZjZ2aGXLh9XoFcaOauQGM9kYyr7LoKwGB8+p7oHvDwy8vDOY8ff d3WlltQc+rMQKRdvfwdjcPKLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpMNOhE01 4UuQxThBZ4eZ1Na22iUwHwYDVR0jBBgwFoAUTn/qcaRHpqFhecJpfr7lVRmdsJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzhCMjE5MDlDNEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFGaGVjSnBmcjdsVlJtZHNK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG5fcWNhUkhwcUZoZWNKcGZyN2xWUm1kc0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzhCMjE5MDlDNEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFG aGVjSnBmcjdsVlJtZHNKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMhiKojAl6+cced2tt+WaHGym2pNDDj6H2P4Yu0QJVH1wGrdB/3jhfbd 11NGHtAgi6KEdJKbdQYQIPknglR1L+jyx78F6j5a7imZke6AKM8VFyQjdi28xWcI gfyd4eNKBndRMT5CvJeossLenHvxbpF+C3231hbo3pTro83ARFKYF6A6uRDKv0mh 1IztC9meJVk1PnilcAg1vXS/USwCUWGFiCVugTgXiayCqft4Uw5SpvGgPk93zA3O TPMHPnFDM75ts8KQN572kemU4flNt4hjwKgqq+c460lWm8CKs48Z13HMFrLS4WyM MSMozP+brDmnia/SgdJu+5sY7o933ag= -----END CERTIFICATE-----Generated at Thu Jul 3 23:07:26 2025 by rpki-client