$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: oKDeHPxYIloY0GppkKVIFOQTzkOvWgQNhg05RPzPD2Q= Subject key identifier: 17:1B:B0:1D:C5:E1:E6:B1:DC:08:38:80:E2:5B:26:17:BC:49:C9:5B Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06DC Signing time: Fri 04 Jul 2025 22:26:17 +0000 Manifest this update: Fri 04 Jul 2025 22:26:17 +0000 Manifest next update: Fri 11 Jul 2025 22:26:17 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: 7aJmBaXenTQ3k13SLJ8V1rKpF0pBiXPGi+MDJPMuByc=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Jul 4 22:26:17 2025 GMT Not After : Jul 11 22:26:17 2025 GMT Subject: CN=68685509-b36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:e4:db:7f:59:dc:74:34:f1:0c:f8:17:ef: ed:ee:85:6d:f9:13:81:36:c9:c4:c3:33:af:d2:e8: 8b:d1:b8:13:c8:7f:a7:69:e1:d4:c0:4a:3c:7c:e3: 5d:dd:f9:84:76:68:7b:13:72:12:ba:f0:cd:3c:ef: 5e:b1:f6:b9:39:66:f8:b0:73:b3:c5:a8:cb:76:36: c0:11:d5:66:e4:ec:cd:11:1e:78:75:3f:98:34:da: c4:d6:40:9c:6b:2d:8e:fe:b5:73:f2:44:84:54:6f: 2f:bc:60:93:16:47:bd:b7:47:37:e6:31:96:d5:7d: e2:83:9a:4f:1b:55:f1:26:c3:5b:85:b0:f0:b7:33: 84:1c:d3:d6:b5:08:f7:0b:7a:12:ff:88:29:1e:bc: 04:da:2d:05:ff:d9:c7:45:57:bd:89:d7:13:fb:f3: 85:a3:f2:a5:13:51:3e:37:ff:4c:e6:c5:42:2f:77: 09:88:bc:67:82:0f:5e:b4:5a:f2:8f:f4:a8:3d:95: 05:95:61:0b:ee:84:24:c1:e3:49:ef:82:1e:5e:d8: 89:c0:a9:c1:33:7e:ec:30:22:5b:0c:e0:ad:33:71: 18:e9:35:27:97:9b:2c:33:d4:fb:df:58:ea:2f:8b: c8:69:bd:33:7b:2a:17:82:64:5e:97:77:c1:2b:90: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:B0:1D:C5:E1:E6:B1:DC:08:38:80:E2:5B:26:17:BC:49:C9:5B X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:99:d7:48:46:b3:2b:26:dc:da:fe:ef:77:20:ba:bd:23: 0d:17:a0:b3:6a:67:ab:b5:fd:50:77:f2:c5:bd:e9:4a:96:81: 38:f8:66:b8:51:d2:7b:d6:7d:8e:89:d8:8b:a4:72:61:4b:5e: 84:6a:c3:7f:18:67:de:76:3c:c8:61:8f:02:0a:68:a7:d0:e2: 8c:cc:8a:9b:6d:b8:4a:7d:d9:3e:4e:75:c7:22:41:f3:5e:60: 81:b5:b0:4c:fe:e7:5d:7e:34:cd:74:4a:1f:a5:99:7c:a4:3d: d6:12:20:36:55:15:05:fa:e6:d3:1b:54:d2:7c:77:5e:01:02: ef:f0:bc:07:9c:48:ed:b7:56:f9:23:41:9a:ee:61:58:5f:7b: 0f:e2:bf:a7:56:7a:b8:10:2d:fe:05:63:b1:e6:49:65:3e:27: 7c:e8:8f:31:7c:4f:0a:dd:9d:72:63:e5:f2:22:d0:53:2a:30: 1a:02:b8:6f:c3:8b:0b:fa:0c:a8:8d:17:2f:00:72:16:8a:0e: 83:3e:f6:bd:2c:cf:12:90:8f:a4:51:8b:b5:2b:4b:0f:40:f4: ea:90:5f:b3:7c:b8:a3:e6:4a:eb:d7:54:4d:6e:32:7d:9d:a7: d9:b4:18:7e:8b:0d:0c:44:0d:73:ee:28:50:99:fc:ab:fa:bd: 74:47:16:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwNzA0MjIyNjE3WhcNMjUwNzExMjIyNjE3WjAYMRYwFAYD VQQDEw02ODY4NTUwOS1iMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16zk239Z3HQ08Qz4F+/t7oVt+ROBNsnEwzOv0uiL0bgTyH+naeHUwEo8fONd 3fmEdmh7E3ISuvDNPO9esfa5OWb4sHOzxajLdjbAEdVm5OzNER54dT+YNNrE1kCc ay2O/rVz8kSEVG8vvGCTFke9t0c35jGW1X3ig5pPG1XxJsNbhbDwtzOEHNPWtQj3 C3oS/4gpHrwE2i0F/9nHRVe9idcT+/OFo/KlE1E+N/9M5sVCL3cJiLxngg9etFry j/SoPZUFlWEL7oQkweNJ74IeXtiJwKnBM37sMCJbDOCtM3EY6TUnl5ssM9T731jq L4vIab0zeyoXgmRel3fBK5CLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcbsB3F 4eax3Ag4gOJbJhe8SclbMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANOZnXSEazKybc2v7vdyC6vSMNF6Czamertf1Qd/LFvelKloE4+Ga4 UdJ71n2OidiLpHJhS16EasN/GGfedjzIYY8CCmin0OKMzIqbbbhKfdk+TnXHIkHz XmCBtbBM/uddfjTNdEofpZl8pD3WEiA2VRUF+ubTG1TSfHdeAQLv8LwHnEjtt1b5 I0Ga7mFYX3sP4r+nVnq4EC3+BWOx5kllPid86I8xfE8K3Z1yY+XyItBTKjAaArhv w4sL+gyojRcvAHIWig6DPva9LM8SkI+kUYu1K0sPQPTqkF+zfLij5krr11RNbjJ9 nafZtBh+iw0MRA1z7ihQmfyr+r10RxZk -----END CERTIFICATE-----Generated at Sat Jul 5 18:47:29 2025 by rpki-client