$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: KDd1MN5lDkbJEtXGQezFpQxsV7X2yqAbFmIuwktS3zg= Subject key identifier: 71:B4:51:0E:F0:9A:87:99:DB:74:BB:19:47:C9:08:5A:25:09:6E:8F Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 043E Signing time: Tue 01 Jul 2025 01:05:33 +0000 Manifest this update: Tue 01 Jul 2025 01:05:32 +0000 Manifest next update: Tue 08 Jul 2025 01:05:32 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: K2fAF9BLr+pigXTPJbI+ciHdTwX7PwLxtoRyhmXYkQA=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Jul 1 01:05:32 2025 GMT Not After : Jul 8 01:05:32 2025 GMT Subject: CN=6863345c-e7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:09:da:6f:12:19:f1:36:cb:24:8a:41:69:6c: 27:69:41:bb:c3:d0:98:a8:91:2e:51:be:e6:bd:c2: c1:14:cf:69:17:4f:d0:0a:f8:ae:78:e0:fe:31:fa: f6:9f:22:84:a9:4d:6b:81:aa:b7:c7:3c:c4:92:88: 44:51:35:ff:55:92:ff:f0:01:3e:bd:4a:4c:74:5e: 4c:1b:5c:34:53:de:d9:bf:2d:93:8e:52:dc:6d:8a: dc:58:69:cd:10:c9:e6:a3:8f:95:a4:06:81:8e:d3: eb:f2:81:04:51:2b:ee:7f:7d:cb:2b:db:4c:75:f1: 3a:39:39:34:45:bb:c0:96:e8:6d:47:3b:87:bd:81: ca:0a:e6:09:89:18:2c:65:89:dc:66:44:0b:0d:64: ff:09:16:27:68:12:6f:c1:82:58:71:cc:46:8c:e8: 86:42:57:a7:a9:01:a7:45:fe:e3:ad:dc:a9:d7:c3: 61:52:1b:de:a6:93:03:5a:4e:d0:38:9d:65:ac:60: 0e:f4:0f:c6:4c:7d:ea:d3:c0:46:2e:96:c8:9f:d0: 60:fc:9d:88:32:b4:99:d8:ad:57:9e:e6:6e:59:10: 6f:a9:e1:e0:c1:b4:24:3e:92:f0:4e:ec:76:84:32: 9a:3b:29:fc:d6:2c:c5:05:4c:6b:56:89:30:7a:3b: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B4:51:0E:F0:9A:87:99:DB:74:BB:19:47:C9:08:5A:25:09:6E:8F X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:06:3d:fd:1a:d1:98:8f:2b:24:d2:1c:b5:38:c1:48:6a:84: dc:ef:29:35:1c:ec:62:19:9e:2c:28:c1:d8:89:5b:0c:75:8f: 3c:ee:cf:6c:2b:9b:c6:d5:0b:bd:18:67:aa:12:13:58:d8:41: 04:0b:5f:92:e1:e6:c7:57:16:52:a2:a1:04:76:64:b5:63:15: 2d:f9:e6:13:b8:7b:e9:01:3a:8a:ba:87:ca:99:21:7e:c5:f9: 1e:b8:3b:30:bb:44:5c:54:75:9f:95:c6:b4:ef:96:97:ae:1e: a5:57:d2:77:82:b7:c2:ab:50:b2:b4:c3:c3:3b:cc:e5:ab:27: 4f:80:15:82:76:a1:be:c7:ed:83:45:d8:58:8d:df:09:13:f3: 26:b8:d0:08:2a:43:a2:58:8b:5b:b2:de:55:2c:62:dd:d0:e5: e5:3f:56:39:a8:96:ea:a2:8d:c0:15:8f:b2:d7:24:dd:cc:b9: e7:b3:6b:9d:65:9b:43:2e:23:6c:ce:e2:d4:8a:6b:b9:b4:0e: 49:13:81:4e:22:b8:4e:dc:4c:4f:93:99:d9:7d:13:41:0b:e6: 95:44:22:00:f0:17:1e:36:7c:04:c6:19:59:0f:de:d3:68:fe: 17:80:9e:ce:8f:f7:c1:15:1c:b4:79:66:9e:5b:26:68:4f:6b: fd:9f:89:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUwNzAxMDEwNTMyWhcNMjUwNzA4MDEwNTMyWjAYMRYwFAYD VQQDEw02ODYzMzQ1Yy1lN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QnabxIZ8TbLJIpBaWwnaUG7w9CYqJEuUb7mvcLBFM9pF0/QCviueOD+Mfr2 nyKEqU1rgaq3xzzEkohEUTX/VZL/8AE+vUpMdF5MG1w0U97Zvy2TjlLcbYrcWGnN EMnmo4+VpAaBjtPr8oEEUSvuf33LK9tMdfE6OTk0RbvAluhtRzuHvYHKCuYJiRgs ZYncZkQLDWT/CRYnaBJvwYJYccxGjOiGQlenqQGnRf7jrdyp18NhUhveppMDWk7Q OJ1lrGAO9A/GTH3q08BGLpbIn9Bg/J2IMrSZ2K1XnuZuWRBvqeHgwbQkPpLwTux2 hDKaOyn81izFBUxrVokwejsRhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG0UQ7w moeZ23S7GUfJCFolCW6PMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQBj39GtGYjysk0hy1OMFIaoTc7yk1HOxiGZ4sKMHYiVsMdY887s9s K5vG1Qu9GGeqEhNY2EEEC1+S4ebHVxZSoqEEdmS1YxUt+eYTuHvpATqKuofKmSF+ xfkeuDswu0RcVHWflca075aXrh6lV9J3grfCq1CytMPDO8zlqydPgBWCdqG+x+2D RdhYjd8JE/MmuNAIKkOiWItbst5VLGLd0OXlP1Y5qJbqoo3AFY+y1yTdzLnns2ud ZZtDLiNszuLUimu5tA5JE4FOIrhO3ExPk5nZfRNBC+aVRCIA8BceNnwExhlZD97T aP4XgJ7Oj/fBFRy0eWaeWyZoT2v9n4lW -----END CERTIFICATE-----Generated at Wed Jul 2 16:10:45 2025 by rpki-client