$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft File: TI176iTK_MV6U-jndIctPYsutF0.mft (raw, json) Hash identifier: +oI0EuAtw3PrEEXZITe8LIFMQ5FmFB/ahY+elR84fr8= Subject key identifier: 0D:F6:C2:6A:8F:F9:5A:B6:37:9B:5D:54:01:1C:60:91:EE:5D:07:39 Authority key identifier: 4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D Certificate issuer: /CN=A9158F8D/serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft Manifest number: 3A Signing time: Thu 03 Jul 2025 06:27:21 +0000 Manifest this update: Thu 03 Jul 2025 06:27:21 +0000 Manifest next update: Thu 10 Jul 2025 06:27:21 +0000 Files and hashes: 1: TI176iTK_MV6U-jndIctPYsutF0.crl (hash: naBgEs+iJ6+/D7yGqtvH0JnWvammsOPKCsfhP0d6mx8=) 2: 9180262C1B6111F08E120D13C4F9AE02.roa (hash: UO0nTpEkdJy+JoHNof8rmf/UJPCvzKCOY9ll8YOUh5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D Validity Not Before: Jul 3 06:27:21 2025 GMT Not After : Jul 10 06:27:21 2025 GMT Subject: CN=686622c9-7574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:a2:22:24:0d:d8:8b:be:a3:60:7b:da:1e: 6a:62:b2:41:b8:15:12:fc:a0:dd:fd:66:37:0c:85: 63:ad:d8:f2:5a:ee:0b:b5:6e:8c:c3:12:2a:d9:88: 95:b5:2b:21:ad:24:ab:be:2f:d8:a3:00:bb:13:3b: a6:ce:81:a7:76:f9:59:34:4f:b5:a2:1e:da:9e:a9: e3:ad:18:aa:58:e2:d0:99:ba:d3:fa:dd:ce:99:2a: 3b:4c:18:41:20:b3:7c:b4:1e:dc:73:0e:54:2e:a3: 55:4a:1d:93:b7:b5:c1:8b:a6:4a:81:bf:88:82:da: f4:e8:6b:f6:65:02:bb:b1:0c:73:68:9f:4c:00:96: 90:52:09:68:bf:02:33:51:03:d9:e2:06:94:27:a5: 35:51:a5:17:a7:41:2c:70:10:81:92:fb:2a:7d:3e: 45:1e:27:e8:c0:f2:7c:7a:0e:b0:89:fc:48:45:01: e2:00:7a:af:7a:66:e6:ee:00:12:e7:ab:10:50:dc: c7:9e:a4:34:dc:81:5e:b5:a0:9e:76:94:e9:bb:df: 1b:07:76:f9:cd:b3:72:a2:6d:00:ad:5f:d4:89:43: ea:9c:ed:46:96:b3:15:ff:9b:e0:ed:b2:7d:21:a0: 57:b2:e2:00:0a:93:63:49:2d:6d:66:a3:4f:18:f9: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F6:C2:6A:8F:F9:5A:B6:37:9B:5D:54:01:1C:60:91:EE:5D:07:39 X509v3 Authority Key Identifier: keyid:4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6f:74:54:1a:cb:5d:ce:81:d2:6f:42:46:17:3f:ac:1f:14: 87:ae:ab:8c:71:ac:e6:b7:f3:78:fb:3c:ca:8f:68:cc:f6:ca: ca:64:73:ac:d2:99:54:b3:bc:65:27:f7:ba:28:d4:ad:88:57: 06:d5:ff:5d:7d:88:a7:ba:72:d8:4b:32:80:e2:ba:e2:8f:b7: 5a:13:b4:13:64:70:0e:04:57:6d:86:4b:5a:35:67:77:2d:3a: d7:3e:b8:b2:fc:f2:d1:5d:67:05:a9:e2:47:b0:ca:c9:3d:fd: 61:d1:c9:ef:e0:5d:35:d3:4f:da:5a:7d:46:33:00:da:25:d7: 22:28:5a:72:01:3f:86:6e:af:96:a9:a0:0c:29:ae:ea:83:fd: ee:d0:07:bd:12:b7:a3:ea:f6:87:08:6c:d9:46:91:46:64:cd: c0:17:70:ee:51:e0:19:ca:eb:d9:cf:28:e7:78:e9:0e:0a:1a: 00:72:bf:59:53:6e:ff:66:c4:bd:25:b5:61:0a:14:c5:a4:86: cd:66:f7:09:8d:47:c6:f7:27:3e:10:d7:14:11:ac:a9:a1:22: bb:6e:9b:56:66:c8:f8:58:0f:1d:c6:4f:64:24:72:2e:7a:42: 8d:4c:ba:d8:b7:03:3e:bc:25:1a:2a:70:82:af:93:f3:6a:2c: aa:05:55:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEY4RDExMC8GA1UEBRMoNEM4RDdCRUEyNENBRkNDNTdBNTNFOEU3NzQ4NzJEM0Q4 QjJFQjQ1RDAeFw0yNTA3MDMwNjI3MjFaFw0yNTA3MTAwNjI3MjFaMBgxFjAUBgNV BAMTDTY4NjYyMmM5LTc1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNbKIiJA3Yi76jYHvaHmpiskG4FRL8oN39ZjcMhWOt2PJa7gu1bozDEirZiJW1 KyGtJKu+L9ijALsTO6bOgad2+Vk0T7WiHtqeqeOtGKpY4tCZutP63c6ZKjtMGEEg s3y0HtxzDlQuo1VKHZO3tcGLpkqBv4iC2vToa/ZlAruxDHNon0wAlpBSCWi/AjNR A9niBpQnpTVRpRenQSxwEIGS+yp9PkUeJ+jA8nx6DrCJ/EhFAeIAeq96ZubuABLn qxBQ3MeepDTcgV61oJ52lOm73xsHdvnNs3KibQCtX9SJQ+qc7UaWsxX/m+Dtsn0h oFey4gAKk2NJLW1mo08Y+ZrTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDfbCao/5 WrY3m11UARxgke5dBzkwHwYDVR0jBBgwFoAUTI176iTK/MV6U+jndIctPYsutF0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RjhELzQ2NTgzQjA4RkZD ODExRUY5RTZBOEE0REM0RjlBRTAyL1RJMTc2aVRLX01WNlUtam5kSWN0UFlzdXRG MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvVEkxNzZpVEtfTVY2VS1qbmRJY3RQWXN1dEYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RjhELzQ2NTgzQjA4RkZDODExRUY5RTZBOEE0REM0RjlBRTAyL1RJMTc2aVRLX01W NlUtam5kSWN0UFlzdXRGMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANvdFQay13OgdJvQkYXP6wfFIeuq4xxrOa383j7PMqPaMz2yspkc6zS mVSzvGUn97oo1K2IVwbV/119iKe6cthLMoDiuuKPt1oTtBNkcA4EV22GS1o1Z3ct Otc+uLL88tFdZwWp4kewysk9/WHRye/gXTXTT9pafUYzANol1yIoWnIBP4Zur5ap oAwpruqD/e7QB70St6Pq9ocIbNlGkUZkzcAXcO5R4BnK69nPKOd46Q4KGgByv1lT bv9mxL0ltWEKFMWkhs1m9wmNR8b3Jz4Q1xQRrKmhIrtum1ZmyPhYDx3GT2Qkci56 Qo1Muti3Az68JRoqcIKvk/NqLKoFVeY= -----END CERTIFICATE-----Generated at Fri Jul 4 13:36:40 2025 by rpki-client