$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: bHHbqiLtEKbRc0sOet92ykiCcVzcEovW1bqhm5cP02A= Subject key identifier: A2:04:61:99:B2:8C:E3:37:F0:22:8A:7E:44:C5:8B:7D:19:B8:B7:82 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D47 Signing time: Wed 02 Jul 2025 18:18:17 +0000 Manifest this update: Wed 02 Jul 2025 18:18:17 +0000 Manifest next update: Wed 09 Jul 2025 18:18:17 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: 0mSlh68h0k3gLixWmo4kC78oXwyiBbDW4YU4pOrD75w=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: 32KvMHFFcuk+NEvVxmKs3hQAjJfV9E6cfnQoi0mJqaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Jul 2 18:18:17 2025 GMT Not After : Jul 9 18:18:17 2025 GMT Subject: CN=686577e9-f552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:3c:81:45:dc:35:d8:66:de:ae:6e:34:ea: cb:be:1b:08:67:1e:1a:00:0c:d2:0c:e0:5c:56:22: 89:71:37:8e:75:a5:8e:b0:56:71:f3:a5:81:ae:b9: 02:4b:c6:d1:a5:99:09:be:23:49:04:00:88:e2:bd: ec:5e:5a:64:1b:36:9a:5a:43:60:e3:72:5e:62:e7: 69:19:a5:e2:6f:1c:1e:6a:3a:31:04:a0:9a:03:01: 6d:cf:a7:8e:18:b7:cd:0c:c4:90:00:6c:10:fd:e0: 48:f8:90:dd:7e:80:de:6c:02:72:51:70:76:3d:77: 04:88:1b:87:9f:9f:e1:68:05:da:52:eb:c9:41:7f: f9:fc:74:73:b1:cc:cb:b8:3a:84:ad:4f:4d:06:84: 35:dd:76:28:8f:63:fb:2b:66:a1:1c:1d:5f:2d:d9: 85:6b:67:1e:b5:ea:c6:8c:9f:eb:51:ef:08:28:73: 2e:ea:f2:0d:b5:d4:08:18:bb:28:93:02:be:81:ac: 02:62:d4:49:d2:70:41:06:b8:62:20:b7:89:0e:9a: fb:ce:19:f8:fe:50:d5:e5:a3:90:53:cf:5c:ca:7b: 2c:db:78:5e:90:62:bd:d7:53:2b:aa:e6:71:2d:22: 6e:e7:d7:e2:25:f5:9e:9a:ac:6f:6d:f8:04:88:2f: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:61:99:B2:8C:E3:37:F0:22:8A:7E:44:C5:8B:7D:19:B8:B7:82 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:57:e2:10:b7:76:34:9c:52:ae:24:e3:17:a1:8a:42:1d:c8: b5:99:98:6c:12:9a:9a:e3:27:7d:db:6e:7f:f3:0d:b7:ac:bf: 73:b3:f9:92:80:f8:c6:2e:94:c0:e5:31:7e:ab:f4:93:80:58: 5f:f1:5e:fb:fe:45:5f:6f:6b:af:5e:17:bc:3d:8f:be:0a:7d: 07:9e:0c:04:e5:41:22:5d:ef:86:b2:cd:58:97:fe:6d:c7:b1: 30:15:cb:de:df:fb:bc:21:a6:03:74:09:86:90:6b:67:1f:18: 63:70:7c:14:83:b3:27:14:6a:1f:99:cd:2f:d9:c6:b9:1f:28: de:cb:35:e6:e1:f5:2d:0c:49:9e:f6:88:f6:90:a4:02:55:de: 26:6f:71:09:bb:da:c4:d4:43:8a:03:40:6b:09:30:22:eb:1f: fd:ca:c2:e9:d3:3f:dc:c8:58:cc:a4:5b:0d:d4:a5:31:70:04: b4:93:e6:be:1c:8b:94:88:9c:4e:a3:af:07:31:15:ac:36:0e: 12:0f:58:dc:0c:2e:ce:f3:21:a0:83:5c:e6:e8:0a:73:a0:59: e9:64:e5:e9:e1:b3:51:8b:da:8c:d3:f6:64:10:08:59:ff:0b: bc:6d:36:d7:85:8b:c9:02:dc:ca:9a:70:c9:39:7a:ec:15:5f: 15:e9:70:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUwNzAyMTgxODE3WhcNMjUwNzA5MTgxODE3WjAYMRYwFAYD VQQDEw02ODY1NzdlOS1mNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAU8gUXcNdhm3q5uNOrLvhsIZx4aAAzSDOBcViKJcTeOdaWOsFZx86WBrrkC S8bRpZkJviNJBACI4r3sXlpkGzaaWkNg43JeYudpGaXibxweajoxBKCaAwFtz6eO GLfNDMSQAGwQ/eBI+JDdfoDebAJyUXB2PXcEiBuHn5/haAXaUuvJQX/5/HRzsczL uDqErU9NBoQ13XYoj2P7K2ahHB1fLdmFa2ceterGjJ/rUe8IKHMu6vINtdQIGLso kwK+gawCYtRJ0nBBBrhiILeJDpr7zhn4/lDV5aOQU89cynss23hekGK911MrquZx LSJu59fiJfWemqxvbfgEiC98hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIEYZmy jOM38CKKfkTFi30ZuLeCMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpV+IQt3Y0nFKuJOMXoYpCHci1mZhsEpqa4yd9225/8w23rL9zs/mS gPjGLpTA5TF+q/STgFhf8V77/kVfb2uvXhe8PY++Cn0HngwE5UEiXe+Gss1Yl/5t x7EwFcve3/u8IaYDdAmGkGtnHxhjcHwUg7MnFGofmc0v2ca5HyjeyzXm4fUtDEme 9oj2kKQCVd4mb3EJu9rE1EOKA0BrCTAi6x/9ysLp0z/cyFjMpFsN1KUxcAS0k+a+ HIuUiJxOo68HMRWsNg4SD1jcDC7O8yGgg1zm6ApzoFnpZOXp4bNRi9qM0/ZkEAhZ /wu8bTbXhYvJAtzKmnDJOXrsFV8V6XB5 -----END CERTIFICATE-----Generated at Thu Jul 3 14:56:53 2025 by rpki-client