$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft File: tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json) Hash identifier: XaTIsQvkaUb7/+pX2pG32mKN9UST7aY0R2J4+4WTHr8= Subject key identifier: DF:78:01:DE:4A:C3:11:B8:FE:66:7B:94:98:DD:3E:97:13:54:F2:44 Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft Manifest number: 1D Signing time: Thu 03 Jul 2025 08:09:46 +0000 Manifest this update: Thu 03 Jul 2025 08:09:45 +0000 Manifest next update: Thu 10 Jul 2025 08:09:45 +0000 Files and hashes: 1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: CStGiBsNOsaMC2HQs9b5pUhruykYTjijyLpkOhNLyAc=) 2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Validity Not Before: Jul 3 08:09:45 2025 GMT Not After : Jul 10 08:09:45 2025 GMT Subject: CN=68663ac9-aa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:29:53:ee:13:4a:cd:cc:49:3c:d1:d5:43: 76:1a:84:47:8b:24:36:22:1f:67:7e:0a:e2:87:6b: 69:20:d6:0f:12:22:3e:7a:b5:29:0f:57:72:97:95: d9:c4:68:4c:33:58:f3:61:a1:55:d5:6b:b3:9b:bd: eb:a1:be:32:06:14:bd:4b:96:38:89:57:b1:ee:76: 1d:47:d3:45:f7:bd:9f:08:b0:31:06:8a:a5:8b:19: b9:4b:48:77:d2:3f:d4:d1:64:4f:a7:ec:f2:50:aa: b3:3c:15:b1:32:7c:d2:42:17:31:b1:13:ef:8a:db: f2:54:c9:44:14:b4:1a:00:6f:c9:ec:4d:6c:d8:86: c0:01:96:5a:fb:05:86:88:d1:47:d4:ef:72:e4:95: 8e:2c:b7:f4:f6:ca:12:ee:ec:ee:89:57:c2:87:35: 94:a7:12:0b:3e:3b:2d:58:11:6c:dc:8b:e5:90:3c: f5:fc:b1:a0:9d:70:b4:bc:69:1a:58:99:a4:61:42: 3c:dc:99:1b:23:a3:a0:44:d4:82:99:30:96:e9:cc: a8:af:40:41:9c:0b:71:5f:16:d5:85:96:fe:10:eb: db:eb:d7:42:b2:dd:b9:1f:22:eb:9d:8d:29:4c:d2: a3:11:cf:82:f4:e0:ef:c0:74:fd:23:02:f2:68:fe: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:78:01:DE:4A:C3:11:B8:FE:66:7B:94:98:DD:3E:97:13:54:F2:44 X509v3 Authority Key Identifier: keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:38:70:1b:63:32:7b:00:af:bf:ac:29:01:c2:33:46:47:a8: c1:2e:88:44:b6:4c:44:08:ff:d0:f6:f6:8f:92:10:cf:55:86: b6:a0:25:a1:d3:1a:09:0b:8a:f8:a1:65:0c:7d:91:19:d0:6a: 1d:e1:01:b1:7b:e5:91:cf:3b:c1:20:25:29:8e:af:b6:5e:ec: d0:74:8e:28:f1:20:60:e7:ad:8a:70:62:42:80:48:97:99:08: ab:e9:7a:9a:2d:68:b3:e6:11:a1:fc:24:90:fb:ee:98:49:38: fe:f7:e0:e5:3c:00:51:e0:b7:8c:6f:60:c4:02:26:a0:6c:a9: be:33:b1:89:aa:ce:4c:bd:27:01:1f:03:27:ae:c7:11:44:7e: 1d:51:f6:7d:0c:91:47:ab:25:28:c2:ad:85:89:cb:30:f3:26: dd:e7:84:fa:aa:97:cf:1c:05:ce:a1:3d:09:d4:f2:2c:9e:8e: 9a:02:6b:bb:8d:32:fb:1b:87:2c:4b:13:f2:ac:e2:07:70:28: 50:6f:a3:8f:93:d9:a2:d1:3f:0f:94:46:a3:bd:69:67:cb:e6: f6:c6:12:db:ee:f1:58:d0:a9:04:d4:5e:4f:f5:f9:39:e8:87: 1a:06:58:bb:aa:b9:16:a7:30:f8:ec:1a:3a:0a:85:a8:9e:ae: 99:ba:23:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5 REFGNEQ0RjAeFw0yNTA3MDMwODA5NDVaFw0yNTA3MTAwODA5NDVaMBgxFjAUBgNV BAMTDTY4NjYzYWM5LWFhNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC07ClT7hNKzcxJPNHVQ3YahEeLJDYiH2d+CuKHa2kg1g8SIj56tSkPV3KXldnE aEwzWPNhoVXVa7ObveuhvjIGFL1LljiJV7Hudh1H00X3vZ8IsDEGiqWLGblLSHfS P9TRZE+n7PJQqrM8FbEyfNJCFzGxE++K2/JUyUQUtBoAb8nsTWzYhsABllr7BYaI 0UfU73LklY4st/T2yhLu7O6JV8KHNZSnEgs+Oy1YEWzci+WQPPX8saCdcLS8aRpY maRhQjzcmRsjo6BE1IKZMJbpzKivQEGcC3FfFtWFlv4Q69vr10Ky3bkfIuudjSlM 0qMRz4L04O/AdP0jAvJo/qF/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU33gB3krD Ebj+ZnuUmN0+lxNU8kQwHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3 UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEo4cBtjMnsAr7+sKQHCM0ZHqMEuiES2TEQI/9D29o+SEM9VhragJaHT GgkLivihZQx9kRnQah3hAbF75ZHPO8EgJSmOr7Ze7NB0jijxIGDnrYpwYkKASJeZ CKvpepotaLPmEaH8JJD77phJOP734OU8AFHgt4xvYMQCJqBsqb4zsYmqzky9JwEf AyeuxxFEfh1R9n0MkUerJSjCrYWJyzDzJt3nhPqql88cBc6hPQnU8iyejpoCa7uN MvsbhyxLE/Ks4gdwKFBvo4+T2aLRPw+URqO9aWfL5vbGEtvu8VjQqQTUXk/1+Tno hxoGWLuquRanMPjsGjoKhaierpm6IzQ= -----END CERTIFICATE-----Generated at Fri Jul 4 07:47:31 2025 by rpki-client