$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: DrV76DMlcbcbxLEfibxOSQGPNLdxrT5cGSuV3H0WksE= Subject key identifier: 97:17:54:45:B2:0E:E5:4D:0C:93:5E:2B:14:0B:FB:82:4A:11:70:A6 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 3518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 34D8 Signing time: Wed 02 Jul 2025 14:16:50 +0000 Manifest this update: Wed 02 Jul 2025 14:16:50 +0000 Manifest next update: Wed 09 Jul 2025 14:16:50 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: NNsCUTEZuX6TpOSxLugxnMtH6wurjx45ngR/lt/xaig=) 2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=) 4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13592 (0x3518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Jul 2 14:16:50 2025 GMT Not After : Jul 9 14:16:50 2025 GMT Subject: CN=68653f52-3646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:67:85:2d:0b:fc:9b:d0:9c:5f:bb:80:05: d8:55:5c:4a:c0:c3:9c:60:f0:6c:38:7e:6f:e0:5a: dd:cb:31:d0:8b:4e:e4:82:11:16:41:e4:3e:0c:bd: 4a:fa:02:04:4c:3a:64:7c:60:52:c9:61:1d:ab:31: a5:00:a5:50:66:46:2a:5d:3b:26:95:2a:e5:24:85: 69:d5:7f:ea:dc:84:a5:59:4a:26:51:86:91:a9:07: 1b:a0:70:f0:2d:23:44:9f:de:c5:03:bd:2b:1e:01: dc:57:b7:0a:56:d5:7d:a5:b6:12:37:08:02:2a:87: bc:03:a0:5b:22:97:28:e4:43:6b:0a:e0:a9:f7:d6: c5:38:fd:ae:f1:d7:fb:4b:f5:09:81:d7:d1:34:45: 73:29:d3:86:12:01:1f:af:d3:ca:59:95:0f:5b:28: fc:ad:bb:e1:5a:40:25:b3:ec:34:dd:a6:f7:a5:e7: a0:45:ea:b3:a9:58:69:90:9d:69:03:d3:b3:40:49: 8b:a0:cb:28:7e:33:fb:21:b0:72:57:f3:b6:ac:07: fc:4f:f0:aa:8c:be:cc:02:2f:56:13:f2:8c:9c:72: a1:30:ba:a0:50:7b:f0:57:7a:8a:02:66:78:4a:b3: f5:10:74:58:7c:41:04:3e:f7:1d:62:17:d7:f1:10: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:17:54:45:B2:0E:E5:4D:0C:93:5E:2B:14:0B:FB:82:4A:11:70:A6 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b2:50:77:90:ea:ae:44:77:4a:5b:05:88:81:d5:63:d5:39: 96:6f:98:0e:64:c1:3c:29:b3:e8:fa:55:f7:32:08:88:03:17: f0:ae:b7:5d:08:5a:33:d8:79:9e:20:81:56:b5:6b:9b:ff:05: af:3d:b8:bb:01:b1:66:4c:d0:b4:da:44:1d:23:64:16:26:93: 89:e4:0d:34:c9:0f:b8:a7:c7:9f:a8:be:50:ab:45:6e:7c:d5: 8d:62:21:fc:28:3e:d5:e0:be:64:58:fe:c9:ee:a6:8a:77:b9: 66:f0:38:e8:e6:ba:e4:0e:e8:df:94:7b:9f:0e:57:86:9e:6d: fc:61:61:81:c5:40:62:94:d5:b3:4d:54:3c:c8:3e:99:e4:fc: be:ae:0e:3e:2a:79:fc:87:de:65:75:54:df:ff:2a:7f:44:b2: 2e:c1:78:34:4e:6b:5a:8b:d4:d6:fc:f9:58:f8:89:52:b7:bb: 04:ec:e0:43:0b:8f:e4:db:03:0f:a9:de:4c:f4:cb:bc:f9:5d: 3a:e3:f0:05:df:9f:97:4d:a1:67:3c:f9:cd:69:5e:a5:50:41: 7f:ed:c7:2f:09:6e:ca:8e:f7:ef:f3:88:e4:eb:06:22:82:d6: b1:44:17:6d:d9:97:b7:dd:cd:48:3c:31:43:c9:ec:b2:04:27: d4:ff:e7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjUwNzAyMTQxNjUwWhcNMjUwNzA5MTQxNjUwWjAYMRYwFAYD VQQDEw02ODY1M2Y1Mi0zNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nBnhS0L/JvQnF+7gAXYVVxKwMOcYPBsOH5v4FrdyzHQi07kghEWQeQ+DL1K +gIETDpkfGBSyWEdqzGlAKVQZkYqXTsmlSrlJIVp1X/q3ISlWUomUYaRqQcboHDw LSNEn97FA70rHgHcV7cKVtV9pbYSNwgCKoe8A6BbIpco5ENrCuCp99bFOP2u8df7 S/UJgdfRNEVzKdOGEgEfr9PKWZUPWyj8rbvhWkAls+w03ab3peegReqzqVhpkJ1p A9OzQEmLoMsofjP7IbByV/O2rAf8T/CqjL7MAi9WE/KMnHKhMLqgUHvwV3qKAmZ4 SrP1EHRYfEEEPvcdYhfX8RA++QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcXVEWy DuVNDJNeKxQL+4JKEXCmMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArslB3kOquRHdKWwWIgdVj1TmWb5gOZME8KbPo+lX3MgiIAxfwrrdd CFoz2HmeIIFWtWub/wWvPbi7AbFmTNC02kQdI2QWJpOJ5A00yQ+4p8efqL5Qq0Vu fNWNYiH8KD7V4L5kWP7J7qaKd7lm8Djo5rrkDujflHufDleGnm38YWGBxUBilNWz TVQ8yD6Z5Py+rg4+Knn8h95ldVTf/yp/RLIuwXg0Tmtai9TW/PlY+IlSt7sE7OBD C4/k2wMPqd5M9Mu8+V064/AF35+XTaFnPPnNaV6lUEF/7ccvCW7Kjvfv84jk6wYi gtaxRBdt2Ze33c1IPDFDyeyyBCfU/+dw -----END CERTIFICATE-----Generated at Thu Jul 3 23:42:24 2025 by rpki-client