$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: RtYktFMe5KzMcT8Y9D4aQwAG5akkbH+QlxdSsCtWolM= Subject key identifier: 33:1E:31:73:FD:E1:C1:81:64:25:1A:08:FC:E6:32:61:D0:5B:2B:09 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 194C Signing time: Wed 02 Jul 2025 17:48:28 +0000 Manifest this update: Wed 02 Jul 2025 17:48:27 +0000 Manifest next update: Wed 09 Jul 2025 17:48:27 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: Ha0jl1jv8vHcPxbAAQnlGfYdvd8c7z9xQc9nOuA7Bck=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Jul 2 17:48:27 2025 GMT Not After : Jul 9 17:48:27 2025 GMT Subject: CN=686570ec-b12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:81:82:c3:2f:a3:7b:be:29:42:0c:d3:00: 8a:fe:15:b5:53:c9:a2:09:31:04:52:ac:67:39:7f: 69:6c:12:4d:59:27:a0:c4:69:e7:db:1d:1a:96:1d: 71:13:0c:d3:e4:7e:9b:a3:cb:28:17:cf:e9:00:31: 55:76:42:27:dd:d7:c6:1d:91:25:d3:ca:22:8b:75: 39:fa:70:6a:fc:1e:95:43:22:fe:c7:2b:d3:33:7d: aa:2a:e4:60:21:86:0b:88:67:97:fb:f2:f4:08:aa: 97:4c:d4:0a:bf:04:8d:63:34:d1:2e:5d:5d:d9:d9: d4:2f:85:07:a9:c1:07:d9:16:52:f6:c3:5d:b4:ab: ec:ed:38:f0:2f:71:c1:0d:da:5d:0e:bb:04:0d:88: b3:71:6c:7e:b1:33:63:5a:b2:14:02:f3:0d:a1:2a: 47:be:b5:6d:cb:b9:7b:c1:ae:b7:c7:74:81:16:5e: 91:4c:d5:f2:8c:0f:5e:8a:30:7d:f2:ae:0c:9d:8a: 95:1a:61:d3:1d:ec:6f:e7:a2:91:76:a1:4d:cc:d8: 44:30:da:de:71:ed:6e:f1:01:7a:7a:6e:be:8f:89: 20:d4:a0:24:41:8d:16:2d:d5:9c:36:d0:f1:7f:74: c1:e2:1b:14:a2:64:48:fb:23:c1:13:59:c4:3f:08: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:31:73:FD:E1:C1:81:64:25:1A:08:FC:E6:32:61:D0:5B:2B:09 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ab:2b:d4:01:82:ed:ff:74:fd:7a:69:31:bc:23:10:39:52: f5:e4:d9:ad:fc:4f:e3:48:94:cd:81:03:9e:7f:ec:b6:e1:c2: 64:86:56:c1:91:b8:14:90:cd:d6:a6:80:2c:06:55:f6:b5:e9: 6d:dd:50:70:94:46:65:4e:3a:62:62:7d:c4:d0:c7:bf:94:d5: 22:b0:12:7d:24:2c:08:ac:9b:0b:dd:e0:1e:eb:19:7c:46:4b: 4d:3b:22:74:bc:db:65:5d:77:66:75:d5:20:69:57:96:e7:5f: 61:9b:88:60:5b:a7:5e:f7:7f:60:25:84:c3:13:bd:91:a4:6a: fb:7e:58:c8:cb:cf:ce:8f:b9:80:f5:b0:e0:c6:18:0f:92:3d: 7a:09:82:c4:89:be:62:49:f0:0e:b8:41:66:aa:00:33:b7:92: 55:22:2c:05:d2:9f:19:30:91:5b:19:bb:70:48:6e:9c:0f:ea: a6:1d:58:eb:4f:a6:34:d0:58:11:6a:5d:6d:0a:d0:63:5a:4f: e0:17:dd:be:84:af:6d:01:a0:23:1d:32:2f:a0:e8:70:53:95: e1:43:56:64:f2:36:54:8f:d2:6d:b7:bb:1c:4b:15:8b:a0:ef: 73:09:29:a4:d5:fc:74:28:e4:00:17:44:12:2a:8c:f3:4c:a6: cc:e5:4f:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwNzAyMTc0ODI3WhcNMjUwNzA5MTc0ODI3WjAYMRYwFAYD VQQDEw02ODY1NzBlYy1iMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA2BgsMvo3u+KUIM0wCK/hW1U8miCTEEUqxnOX9pbBJNWSegxGnn2x0alh1x EwzT5H6bo8soF8/pADFVdkIn3dfGHZEl08oii3U5+nBq/B6VQyL+xyvTM32qKuRg IYYLiGeX+/L0CKqXTNQKvwSNYzTRLl1d2dnUL4UHqcEH2RZS9sNdtKvs7TjwL3HB DdpdDrsEDYizcWx+sTNjWrIUAvMNoSpHvrVty7l7wa63x3SBFl6RTNXyjA9eijB9 8q4MnYqVGmHTHexv56KRdqFNzNhEMNrece1u8QF6em6+j4kg1KAkQY0WLdWcNtDx f3TB4hsUomRI+yPBE1nEPwhAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMeMXP9 4cGBZCUaCPzmMmHQWysJMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5qyvUAYLt/3T9emkxvCMQOVL15Nmt/E/jSJTNgQOef+y24cJkhlbB kbgUkM3WpoAsBlX2telt3VBwlEZlTjpiYn3E0Me/lNUisBJ9JCwIrJsL3eAe6xl8 RktNOyJ0vNtlXXdmddUgaVeW519hm4hgW6de939gJYTDE72RpGr7fljIy8/Oj7mA 9bDgxhgPkj16CYLEib5iSfAOuEFmqgAzt5JVIiwF0p8ZMJFbGbtwSG6cD+qmHVjr T6Y00FgRal1tCtBjWk/gF92+hK9tAaAjHTIvoOhwU5XhQ1Zk8jZUj9Jtt7scSxWL oO9zCSmk1fx0KOQAF0QSKozzTKbM5U88 -----END CERTIFICATE-----Generated at Thu Jul 3 10:35:06 2025 by rpki-client