$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: MGyuXjIDEuntdAsqlFaTjYvUL68KLUB0bXmznNJmBgg= Subject key identifier: B1:52:FA:54:17:F8:1E:F3:14:A4:E4:0B:C3:D7:70:A8:19:65:B8:BF Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 05CB Signing time: Wed 02 Jul 2025 23:22:11 +0000 Manifest this update: Wed 02 Jul 2025 23:22:11 +0000 Manifest next update: Wed 09 Jul 2025 23:22:11 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: ItufXxdAD6E4ti8fRiz3fEXM8LUIShn4xbya+SqdJzc=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Jul 2 23:22:11 2025 GMT Not After : Jul 9 23:22:11 2025 GMT Subject: CN=6865bf23-ad25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:41:03:c1:8d:f7:2d:31:3a:71:55:d6:f2: 1e:3a:8f:26:67:a5:12:c7:cb:9a:40:41:27:dd:49: 9f:a9:35:af:dd:8b:11:c9:0e:ba:e1:10:2f:37:79: 84:52:f5:d7:11:bb:8a:53:f3:05:af:a1:a8:8f:fa: 4b:44:56:27:30:6b:4e:a1:86:e7:08:7c:eb:a9:b4: 83:01:61:df:c6:4e:bb:68:93:99:5b:13:ee:43:d1: 86:30:b7:93:29:e8:ec:df:34:14:30:0a:40:57:54: 30:60:81:64:7f:e3:2c:79:b7:6b:90:33:e5:ad:68: 4d:c4:7d:30:38:3b:ec:55:ea:f8:ad:8a:f3:31:0f: b7:e3:d5:af:8f:7f:05:b8:9d:8a:fe:0a:78:dd:2c: 2c:d9:c9:d3:fc:b1:a4:5f:f2:8d:12:cd:49:90:5b: 7d:1e:ba:db:ed:f1:2b:db:56:8d:0a:7f:3d:fe:ba: 52:d5:a4:41:6f:8b:a9:3d:0e:db:62:99:37:00:05: 63:81:13:db:80:a2:5e:dd:3a:3d:aa:b6:3b:62:64: 86:81:fe:e3:e0:14:02:75:a8:d9:ea:36:8f:37:4c: 0b:4a:3e:67:dc:a9:af:cd:81:2f:7d:a3:90:e4:18: d5:6d:7c:da:2b:67:fb:5a:56:6c:8c:89:ea:28:4c: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:52:FA:54:17:F8:1E:F3:14:A4:E4:0B:C3:D7:70:A8:19:65:B8:BF X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d6:f1:e1:10:01:bf:67:20:fb:4a:29:d1:da:dd:8d:df:64: 20:60:16:bc:3a:ac:30:8f:60:55:8d:1b:66:ff:66:0a:70:f8: 18:dc:1b:78:7b:5d:12:00:47:b4:57:6c:f3:6a:53:72:02:22: 1a:82:68:45:e7:73:46:d5:c5:ce:78:54:f6:91:ad:cf:ab:9b: 0f:59:f7:25:a8:30:3e:b0:3a:5e:b5:a1:3c:89:74:e6:40:fe: 75:84:71:64:20:0a:20:08:04:44:d2:13:97:1e:74:d0:2a:d5: b6:4b:ef:6f:b4:64:72:81:e6:7e:36:50:f6:db:de:76:83:9c: b9:47:fb:ab:4d:21:fd:94:f7:24:49:f0:a0:77:aa:99:4d:8b: 81:85:11:2f:48:d1:c3:31:92:e4:10:61:82:ff:bb:e1:a2:f7: dd:4e:2d:04:fa:6d:4c:13:eb:24:56:ee:ac:ed:4a:81:5d:95: 20:b4:c1:5e:81:3a:be:2f:19:f6:92:e8:d5:10:d6:29:03:30: 51:2c:6b:4d:9d:dd:bc:7e:eb:61:e3:be:d9:da:34:d1:3e:df: 75:da:51:41:ec:49:0a:bb:aa:1a:5f:f6:f4:11:b1:66:d5:a4: 86:7d:ca:c7:70:fb:39:a0:43:2b:5e:df:7e:b9:30:56:ba:4f: 27:77:80:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUwNzAyMjMyMjExWhcNMjUwNzA5MjMyMjExWjAYMRYwFAYD VQQDEw02ODY1YmYyMy1hZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1tBA8GN9y0xOnFV1vIeOo8mZ6USx8uaQEEn3UmfqTWv3YsRyQ664RAvN3mE UvXXEbuKU/MFr6Goj/pLRFYnMGtOoYbnCHzrqbSDAWHfxk67aJOZWxPuQ9GGMLeT Kejs3zQUMApAV1QwYIFkf+MsebdrkDPlrWhNxH0wODvsVer4rYrzMQ+349Wvj38F uJ2K/gp43Sws2cnT/LGkX/KNEs1JkFt9Hrrb7fEr21aNCn89/rpS1aRBb4upPQ7b Ypk3AAVjgRPbgKJe3To9qrY7YmSGgf7j4BQCdajZ6jaPN0wLSj5n3KmvzYEvfaOQ 5BjVbXzaK2f7WlZsjInqKEz/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFS+lQX +B7zFKTkC8PXcKgZZbi/MB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB31vHhEAG/ZyD7SinR2t2N32QgYBa8Oqwwj2BVjRtm/2YKcPgY3Bt4 e10SAEe0V2zzalNyAiIagmhF53NG1cXOeFT2ka3Pq5sPWfclqDA+sDpetaE8iXTm QP51hHFkIAogCARE0hOXHnTQKtW2S+9vtGRygeZ+NlD22952g5y5R/urTSH9lPck SfCgd6qZTYuBhREvSNHDMZLkEGGC/7vhovfdTi0E+m1ME+skVu6s7UqBXZUgtMFe gTq+Lxn2kujVENYpAzBRLGtNnd28futh477Z2jTRPt912lFB7EkKu6oaX/b0EbFm 1aSGfcrHcPs5oEMrXt9+uTBWuk8nd4DF -----END CERTIFICATE-----Generated at Thu Jul 3 17:37:35 2025 by rpki-client