$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: oGZX/wQno63jqqGR23FMTomvDZLWtWoZUQZd/5KObjk= Subject key identifier: 9B:70:54:48:07:33:6E:C4:3E:AD:5B:A5:9F:87:76:1A:C3:21:B4:03 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B17 Signing time: Wed 02 Jul 2025 19:29:10 +0000 Manifest this update: Wed 02 Jul 2025 19:29:10 +0000 Manifest next update: Wed 09 Jul 2025 19:29:10 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: hpxe2fLeq1IdwfFKWp/ViVS2lTjNnnTOCNWzouAyjaY=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Jul 2 19:29:10 2025 GMT Not After : Jul 9 19:29:10 2025 GMT Subject: CN=68658886-d1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8c:33:69:10:b5:6b:28:24:eb:de:43:72:4e: 28:93:3a:ac:34:7f:a4:37:fe:76:1a:2b:60:09:aa: 62:98:43:f7:b4:72:78:67:2f:78:89:6b:b8:fc:0f: ed:05:86:9e:45:5a:29:65:27:f0:61:77:89:68:48: c1:ff:a5:93:e9:09:4c:e9:dd:6d:d8:5c:c0:41:b0: 76:c3:c7:e3:ea:5d:cf:4e:d7:c5:49:11:1f:79:94: bb:16:0a:04:77:43:bb:e0:9c:30:5e:4c:5e:b1:7b: 5e:ec:4a:9b:3d:5d:a2:53:45:b8:a3:cb:f2:b2:17: 1d:21:8a:77:64:0e:45:d1:eb:fd:03:5c:32:c3:a4: 89:a6:c2:a8:22:fb:30:8e:79:f5:8e:19:e1:13:77: 3a:ee:00:d2:08:95:5a:79:7a:fe:0c:5b:14:c8:2a: 6b:c9:b6:34:3e:a0:63:03:3b:cb:e8:05:a5:b7:65: 79:8c:ae:12:94:6a:d4:48:e3:e8:39:f2:fa:f6:15: ca:f4:24:44:a7:3b:9e:10:ec:ea:28:74:32:e7:39: f0:8a:aa:61:60:d8:8c:6d:f5:65:41:6e:57:df:06: b0:6b:2d:2a:6b:fb:ec:dc:28:9e:c8:7c:66:0b:53: ad:52:19:9d:c3:55:fb:13:5f:c1:b8:96:78:0d:fa: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:70:54:48:07:33:6E:C4:3E:AD:5B:A5:9F:87:76:1A:C3:21:B4:03 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5f:20:7f:29:69:7d:fb:80:a2:43:75:b8:92:4a:be:be:b3: b9:35:6a:66:15:1f:ce:25:54:6b:dc:0f:6f:32:77:5b:c4:77: ca:57:9d:fc:e9:2f:b5:ad:27:d2:dd:92:f5:9f:3e:d6:f9:e2: a1:11:3a:77:34:11:6f:2e:e7:06:6e:e2:b3:de:c2:96:e8:f7: 25:a7:29:6d:e9:5d:b0:bf:d3:f6:9a:6a:a2:60:da:b6:49:22: fc:42:25:a7:46:4e:82:bc:15:bd:53:82:1e:85:6c:ea:44:07: 17:cb:1e:85:4a:1b:e6:02:b6:98:de:bd:3d:f6:a6:d7:27:7a: 05:de:2b:20:71:a0:57:a9:2c:72:a7:6c:b9:5b:81:bb:bc:6f: 18:f2:3f:44:21:79:2d:c2:88:e6:9c:99:7f:ca:6c:3a:e1:3a: 49:4b:a8:c6:58:51:3c:25:c6:01:57:93:45:1b:db:46:8b:c9: f7:d4:82:fa:cc:6e:6e:84:e2:5f:40:c1:40:83:3c:9d:4d:28: 0c:93:1c:30:c7:09:09:9d:19:b5:ab:bf:3f:73:00:7b:9e:9f: 31:0c:f6:43:3d:02:ba:f1:ec:50:74:c0:82:c8:b9:33:ae:25: d6:5b:71:67:e4:bb:08:9a:d7:c1:ed:c7:7f:a0:26:19:07:20: 9b:79:7b:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUwNzAyMTkyOTEwWhcNMjUwNzA5MTkyOTEwWjAYMRYwFAYD VQQDEw02ODY1ODg4Ni1kMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44wzaRC1aygk695Dck4okzqsNH+kN/52GitgCapimEP3tHJ4Zy94iWu4/A/t BYaeRVopZSfwYXeJaEjB/6WT6QlM6d1t2FzAQbB2w8fj6l3PTtfFSREfeZS7FgoE d0O74JwwXkxesXte7EqbPV2iU0W4o8vyshcdIYp3ZA5F0ev9A1wyw6SJpsKoIvsw jnn1jhnhE3c67gDSCJVaeXr+DFsUyCprybY0PqBjAzvL6AWlt2V5jK4SlGrUSOPo OfL69hXK9CREpzueEOzqKHQy5znwiqphYNiMbfVlQW5X3waway0qa/vs3CieyHxm C1OtUhmdw1X7E1/BuJZ4Dfr8SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtwVEgH M27EPq1bpZ+HdhrDIbQDMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbXyB/KWl9+4CiQ3W4kkq+vrO5NWpmFR/OJVRr3A9vMndbxHfKV538 6S+1rSfS3ZL1nz7W+eKhETp3NBFvLucGbuKz3sKW6Pclpylt6V2wv9P2mmqiYNq2 SSL8QiWnRk6CvBW9U4IehWzqRAcXyx6FShvmAraY3r099qbXJ3oF3isgcaBXqSxy p2y5W4G7vG8Y8j9EIXktwojmnJl/ymw64TpJS6jGWFE8JcYBV5NFG9tGi8n31IL6 zG5uhOJfQMFAgzydTSgMkxwwxwkJnRm1q78/cwB7np8xDPZDPQK68exQdMCCyLkz riXWW3Fn5LsImtfB7cd/oCYZByCbeXv0 -----END CERTIFICATE-----Generated at Fri Jul 4 08:17:25 2025 by rpki-client