$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: XOodFZnbdCzQIusG0IOJ7Xssjl4p+Vz8ZHX/MSKXq7A= Subject key identifier: 53:5F:57:C5:87:FB:58:E6:0D:18:88:85:2D:CC:5E:50:A2:8E:0B:CA Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 191B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 190E Signing time: Wed 02 Jul 2025 16:34:14 +0000 Manifest this update: Wed 02 Jul 2025 16:34:13 +0000 Manifest next update: Wed 09 Jul 2025 16:34:13 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: BUsT6/D0eSiQo34CfJnrKVXzMBwXp86xm+dT3gUoFQ8=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Jul 2 16:34:13 2025 GMT Not After : Jul 9 16:34:13 2025 GMT Subject: CN=68655f85-b62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:c4:0a:34:41:16:28:54:b1:04:f4:46:1c: 55:59:df:f8:c4:75:4c:9c:18:53:62:6c:5d:b6:80: 64:6a:98:db:ff:dc:5e:79:0e:82:69:6b:ea:3a:d6: 7b:6d:c6:8a:32:6a:a0:8a:2f:cc:00:81:f5:6f:2b: 20:23:97:b6:cf:3d:bb:75:c7:76:ce:21:26:db:3b: 42:88:7a:d1:70:2c:4d:db:a1:1f:3f:dc:3a:9e:00: a7:5e:6c:91:2b:a0:f2:d1:3f:ce:89:2f:63:87:c0: 8d:45:5e:01:d4:47:62:d9:34:34:d8:98:21:42:b7: a4:fd:96:52:9b:90:75:ab:af:0c:a7:82:0e:90:a5: 7f:34:53:19:7e:db:f5:29:60:89:aa:99:2b:36:c0: 8f:60:8f:17:ed:c7:61:2f:6b:71:b8:39:15:ae:08: 29:28:cb:bc:d0:f7:68:a8:00:09:68:6f:4f:e2:78: 14:73:1d:56:06:e9:a3:4b:ca:eb:e9:0c:e9:87:ac: f8:ab:34:32:d9:ec:a5:bf:ac:7b:2c:c2:96:15:6f: 5e:36:29:01:aa:96:84:a3:00:17:73:c2:1a:2c:07: 22:58:84:7d:e1:a6:9e:4c:7b:56:bd:35:a3:87:5d: 0a:12:ce:6a:6a:5e:f9:44:30:53:94:7a:3a:e1:95: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5F:57:C5:87:FB:58:E6:0D:18:88:85:2D:CC:5E:50:A2:8E:0B:CA X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:53:b4:ef:38:92:60:6e:ec:c3:23:9b:52:f3:e5:35:4f:80: f1:da:ab:29:bb:52:08:38:81:80:d8:05:dd:81:d8:3f:a8:72: 11:4a:99:45:9b:e6:ec:e8:4e:f1:4d:55:92:bf:4a:66:71:21: f1:84:f8:92:0d:c2:56:be:a8:1e:28:89:b0:ac:73:84:68:f4: ae:7f:dd:a4:eb:33:08:1b:c8:98:52:57:c5:a0:47:82:eb:c4: b7:f7:83:a4:13:46:15:36:21:da:48:fd:7b:51:82:9a:db:36: 3c:18:57:77:c0:e6:b0:75:27:00:74:3d:90:9a:85:b0:b8:ee: c0:dd:5b:73:88:35:5d:50:a9:eb:10:52:6c:4f:be:ef:0c:64: c8:70:8f:d4:be:00:b4:19:9e:aa:81:9c:e7:61:3b:f7:cb:13: ec:1b:cc:6d:54:cd:1d:13:56:9f:64:f1:82:a5:58:1e:39:b7: 31:90:4e:01:0d:37:c5:f4:fa:a5:03:81:c2:f3:aa:bc:02:eb: ea:1a:47:7a:19:e2:de:42:7d:6e:8d:f9:37:7d:26:10:32:0a: d4:f2:cf:c2:27:c2:0d:07:41:16:ef:51:f0:e7:ce:9e:92:ba: 3a:43:b2:c5:70:05:dd:fe:d3:0a:9f:62:83:e5:ba:17:a6:8b: 7e:58:71:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjUwNzAyMTYzNDEzWhcNMjUwNzA5MTYzNDEzWjAYMRYwFAYD VQQDEw02ODY1NWY4NS1iNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyXECjRBFihUsQT0RhxVWd/4xHVMnBhTYmxdtoBkapjb/9xeeQ6CaWvqOtZ7 bcaKMmqgii/MAIH1bysgI5e2zz27dcd2ziEm2ztCiHrRcCxN26EfP9w6ngCnXmyR K6Dy0T/OiS9jh8CNRV4B1Edi2TQ02JghQrek/ZZSm5B1q68Mp4IOkKV/NFMZftv1 KWCJqpkrNsCPYI8X7cdhL2txuDkVrggpKMu80PdoqAAJaG9P4ngUcx1WBumjS8rr 6Qzph6z4qzQy2eylv6x7LMKWFW9eNikBqpaEowAXc8IaLAciWIR94aaeTHtWvTWj h10KEs5qal75RDBTlHo64ZX23QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNfV8WH +1jmDRiIhS3MXlCijgvKMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9U7TvOJJgbuzDI5tS8+U1T4Dx2qspu1IIOIGA2AXdgdg/qHIRSplF m+bs6E7xTVWSv0pmcSHxhPiSDcJWvqgeKImwrHOEaPSuf92k6zMIG8iYUlfFoEeC 68S394OkE0YVNiHaSP17UYKa2zY8GFd3wOawdScAdD2QmoWwuO7A3VtziDVdUKnr EFJsT77vDGTIcI/UvgC0GZ6qgZznYTv3yxPsG8xtVM0dE1afZPGCpVgeObcxkE4B DTfF9PqlA4HC86q8AuvqGkd6GeLeQn1ujfk3fSYQMgrU8s/CJ8INB0EW71Hw586e kro6Q7LFcAXd/tMKn2KD5boXpot+WHHg -----END CERTIFICATE-----Generated at Fri Jul 4 14:47:10 2025 by rpki-client