$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: Km84kqdV36ZmYAtESmMUjf0wnrh0FSLRhxptZLQLN7s= Subject key identifier: FD:55:FA:DB:45:94:98:F2:78:E3:B6:77:AD:B8:8C:7C:8E:B4:7D:03 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0D98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D63 Signing time: Fri 22 Aug 2025 18:10:37 +0000 Manifest this update: Fri 22 Aug 2025 18:10:36 +0000 Manifest next update: Fri 29 Aug 2025 18:10:36 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: 5/cqhRG3jbCdL8Ein+gWD+S5NZBJxhGXSjRqL+F4vgk=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: EfyBsaHY8sXfh+FtDY0lWUNRe0HDOeGbUlITqUD7/qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3480 (0xd98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Aug 22 18:10:36 2025 GMT Not After : Aug 29 18:10:36 2025 GMT Subject: CN=68a8b29d-9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:c4:b2:ba:8f:35:40:62:66:b9:31:a7:ff: 2f:40:ee:83:c7:73:5b:2d:ed:d6:93:8f:ab:82:7d: 72:e0:9b:cf:29:40:02:51:33:e1:3b:22:5a:d0:74: 2b:ce:70:00:76:b7:1a:ba:2c:58:c5:fa:a1:98:5e: 58:ba:8f:ec:1c:d8:d9:b6:b2:fe:90:83:e6:03:e8: 9e:0b:33:38:73:32:89:d4:47:cd:79:de:5d:2d:30: 74:d4:ed:5f:52:55:d4:df:54:d3:01:2b:b5:41:9e: 53:74:5a:68:7b:8a:83:36:62:f5:57:60:15:7a:2b: 0e:48:72:15:75:e2:8e:d0:a7:a7:a7:57:a6:16:b5: 3a:68:a2:4f:f0:07:59:dd:5c:88:b3:43:cb:1c:ef: ff:d6:ea:88:39:e8:f0:a0:7a:1b:41:2c:e7:3e:aa: 15:39:41:dc:da:81:a0:02:fc:7a:a0:94:dc:c3:ff: 37:f8:de:3b:41:42:83:3d:0c:3b:a5:ac:fc:17:b1: 13:37:b4:09:60:c0:af:cb:67:46:fe:18:08:c4:ac: 48:9a:32:4b:6f:92:f2:cb:57:f8:23:cb:6e:c8:25: 2f:a2:d1:8b:c1:c2:da:36:1a:3f:06:f8:b7:27:86: c0:c3:1f:80:3e:2a:9e:0b:7b:72:b2:23:fc:96:c2: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:55:FA:DB:45:94:98:F2:78:E3:B6:77:AD:B8:8C:7C:8E:B4:7D:03 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e4:57:f2:40:5b:08:c4:2b:e6:94:67:bf:f9:5c:08:68:2a: 38:44:9b:c5:cb:18:a8:2b:fe:72:a1:ef:95:e1:67:3f:72:b6: 91:48:02:e1:ed:55:39:ef:4d:63:39:ac:5e:77:6e:3c:30:30: 6b:bb:c4:1e:8a:1d:5d:76:28:37:08:31:17:8d:1e:c2:db:2d: 44:5d:7a:f3:ad:6b:af:2c:cc:e2:0c:e9:49:d1:7e:e4:43:0f: 41:a2:f9:29:df:36:02:79:a5:6e:ea:aa:05:99:2f:61:d5:18: 94:53:b4:d7:c3:e1:a2:ca:c1:a1:3f:9a:08:97:62:20:34:97: da:08:10:d8:06:a9:0d:55:a8:77:ba:5e:9c:77:9f:6c:64:20: 27:29:91:b4:f8:00:22:44:ec:66:3a:1f:11:ce:c1:03:0e:84: e7:ff:ff:0d:1b:23:5a:1a:27:03:8d:00:0a:fe:df:3f:55:14: 22:4a:01:81:5f:fd:b0:0a:07:4e:c1:09:34:3a:16:88:0d:d6: 91:20:0b:65:7e:ca:8d:b9:c9:91:6e:7e:44:21:60:12:7e:1f: dd:aa:c1:27:13:1c:ba:ed:16:17:f7:38:1a:c0:ec:be:c7:02: 39:14:24:49:7a:d4:3e:d6:0d:fe:48:a5:03:1c:10:d7:c4:16: fd:5b:e9:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUwODIyMTgxMDM2WhcNMjUwODI5MTgxMDM2WjAYMRYwFAYD VQQDEw02OGE4YjI5ZC05NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nnEsrqPNUBiZrkxp/8vQO6Dx3NbLe3Wk4+rgn1y4JvPKUACUTPhOyJa0HQr znAAdrcauixYxfqhmF5Yuo/sHNjZtrL+kIPmA+ieCzM4czKJ1EfNed5dLTB01O1f UlXU31TTASu1QZ5TdFpoe4qDNmL1V2AVeisOSHIVdeKO0Kenp1emFrU6aKJP8AdZ 3VyIs0PLHO//1uqIOejwoHobQSznPqoVOUHc2oGgAvx6oJTcw/83+N47QUKDPQw7 paz8F7ETN7QJYMCvy2dG/hgIxKxImjJLb5Lyy1f4I8tuyCUvotGLwcLaNho/Bvi3 J4bAwx+APiqeC3tysiP8lsJ2xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1V+ttF lJjyeOO2d624jHyOtH0DMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+5FfyQFsIxCvmlGe/+VwIaCo4RJvFyxioK/5yoe+V4Wc/craRSALh 7VU5701jOaxed248MDBru8Qeih1ddig3CDEXjR7C2y1EXXrzrWuvLMziDOlJ0X7k Qw9Bovkp3zYCeaVu6qoFmS9h1RiUU7TXw+GiysGhP5oIl2IgNJfaCBDYBqkNVah3 ul6cd59sZCAnKZG0+AAiROxmOh8RzsEDDoTn//8NGyNaGicDjQAK/t8/VRQiSgGB X/2wCgdOwQk0OhaIDdaRIAtlfsqNucmRbn5EIWASfh/dqsEnExy67RYX9zgawOy+ xwI5FCRJetQ+1g3+SKUDHBDXxBb9W+lg -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:58 2025 by rpki-client