$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json) Hash identifier: 7hRZGTfAOWgYYCQ2maLoxH4e7gLsAbsgizFL0J5neBs= Subject key identifier: 0B:4B:34:F6:75:45:B7:EC:B5:D5:14:37:8C:03:33:59:5F:29:FA:4D Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft Manifest number: 012D Signing time: Tue 01 Jul 2025 05:10:09 +0000 Manifest this update: Tue 01 Jul 2025 05:10:08 +0000 Manifest next update: Tue 08 Jul 2025 05:10:08 +0000 Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: bSpP0jBjT9utAwXORVj7UORy52KNvvW9RJNDexQtmVw=) 2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: 6vLkVoo3xeixncmkuul2aavr7vLSk2WGgm6lp66mNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Validity Not Before: Jul 1 05:10:08 2025 GMT Not After : Jul 8 05:10:08 2025 GMT Subject: CN=68636db0-3d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:28:34:4a:2c:ed:f9:43:47:23:ab:26:0a: 22:a4:a0:98:43:68:0b:e2:2d:98:84:9b:4a:30:81: dc:35:9d:fe:e5:c9:26:68:30:ee:ec:d7:de:c0:cf: 5a:d7:c5:0d:13:a1:d9:84:94:a8:49:d1:96:cb:2e: 32:fa:ca:f1:94:a9:0f:e6:a0:7a:31:bf:7a:95:93: 08:49:e4:b5:50:aa:d7:61:c1:c0:62:4f:57:46:c8: a9:f0:3a:06:90:63:dc:18:03:13:eb:ba:1e:f4:b8: 70:ca:07:2d:ee:f9:91:3a:f8:57:fd:30:39:a5:45: f4:f1:73:09:4f:c4:da:f3:34:ed:67:89:95:c7:e3: 01:89:a1:4f:4b:b3:66:2b:ef:b0:0e:63:3c:3a:cb: 1e:01:3f:f3:33:1e:b8:bb:7c:47:1a:87:23:e1:b7: 77:7e:ae:d5:26:5b:dc:58:35:f5:3e:2d:62:62:fc: e9:03:31:35:49:14:66:80:b5:00:03:14:4d:29:58: 2b:54:6c:ff:65:d3:e2:b8:a1:a9:22:40:b8:7e:ae: 1f:99:68:dd:77:94:92:dc:91:89:55:77:b4:fd:eb: 19:e5:4f:ee:2b:1f:af:7f:ba:6f:25:47:4c:11:fb: a1:d5:20:81:e6:73:a8:67:dd:a1:d1:64:19:a5:e4: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4B:34:F6:75:45:B7:EC:B5:D5:14:37:8C:03:33:59:5F:29:FA:4D X509v3 Authority Key Identifier: keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:52:dc:8e:da:66:61:a9:6e:a6:b6:1f:38:76:7e:7c:0e:ff: 6a:e3:c4:1f:8b:c5:e0:60:62:b4:b5:48:0e:be:63:95:ab:3f: 4d:86:b9:58:34:b8:2f:f0:c0:28:aa:1d:2f:27:e9:82:06:5e: 80:d6:99:0e:42:cf:6a:d1:71:45:48:2c:d6:e2:04:42:20:d3: b9:c8:d9:d4:79:aa:4a:2e:4d:d9:a1:43:ed:d9:2d:89:7c:80: 09:da:ae:34:43:a0:cc:d9:a4:cd:7b:ec:a9:73:98:f3:a6:78: db:53:48:a2:7e:0c:12:ca:09:6a:98:20:7b:a7:a2:bc:39:b7: 6f:69:d6:40:fb:89:2a:1b:21:69:a8:92:9a:8c:a1:51:82:db: 3b:f3:91:b4:a4:e3:82:b9:6c:2f:1f:cc:5f:23:74:19:6f:88: b3:04:d6:ae:c3:15:5d:43:8f:e5:a8:74:0f:ac:2f:b8:86:1e: 19:57:de:2a:a7:a0:1b:bb:1a:ea:e7:5f:d3:64:ff:5a:7b:6f: 12:fb:31:6d:3e:bc:29:a7:8c:d6:11:67:0a:1d:fe:2a:35:e2: b9:f0:e7:2f:b4:f2:87:8c:db:1c:3d:b9:53:fe:61:94:16:2b: 7d:ee:12:44:11:f8:9c:fb:2a:78:af:cd:4b:d2:3b:11:d6:76: 3a:88:cd:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzNTExMTAvBgNVBAUTKEI1NDc2MjgxRjM1OTREMzg2NDlDQ0NGRjUyRjU4QkI0 OUI0NzVGMDkwHhcNMjUwNzAxMDUxMDA4WhcNMjUwNzA4MDUxMDA4WjAYMRYwFAYD VQQDEw02ODYzNmRiMC0zZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BcoNEos7flDRyOrJgoipKCYQ2gL4i2YhJtKMIHcNZ3+5ckmaDDu7NfewM9a 18UNE6HZhJSoSdGWyy4y+srxlKkP5qB6Mb96lZMISeS1UKrXYcHAYk9XRsip8DoG kGPcGAMT67oe9Lhwygct7vmROvhX/TA5pUX08XMJT8Ta8zTtZ4mVx+MBiaFPS7Nm K++wDmM8OsseAT/zMx64u3xHGocj4bd3fq7VJlvcWDX1Pi1iYvzpAzE1SRRmgLUA AxRNKVgrVGz/ZdPiuKGpIkC4fq4fmWjdd5SS3JGJVXe0/esZ5U/uKx+vf7pvJUdM Efuh1SCB5nOoZ92h0WQZpeSUFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtLNPZ1 RbfstdUUN4wDM1lfKfpNMB8GA1UdIwQYMBaAFLVHYoHzWU04ZJzM/1L1i7SbR18J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM1MS8zMUEwRDE4Mjk0 MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRUaGtuTXpfVXZXTHRKdEhY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM1MS8zMUEwRDE4Mjk0MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRU aGtuTXpfVXZXTHRKdEhYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5UtyO2mZhqW6mth84dn58Dv9q48Qfi8XgYGK0tUgOvmOVqz9NhrlY NLgv8MAoqh0vJ+mCBl6A1pkOQs9q0XFFSCzW4gRCINO5yNnUeapKLk3ZoUPt2S2J fIAJ2q40Q6DM2aTNe+ypc5jzpnjbU0iifgwSyglqmCB7p6K8ObdvadZA+4kqGyFp qJKajKFRgts785G0pOOCuWwvH8xfI3QZb4izBNauwxVdQ4/lqHQPrC+4hh4ZV94q p6Abuxrq51/TZP9ae28S+zFtPrwpp4zWEWcKHf4qNeK58OcvtPKHjNscPblT/mGU Fit97hJEEfic+yp4r81L0jsR1nY6iM0d -----END CERTIFICATE-----Generated at Tue Jul 1 16:46:28 2025 by rpki-client