$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json) Hash identifier: n61q/G2suWsgLeklZynni0WMwG1jE2KIbfVsbznrJVQ= Subject key identifier: E6:53:FB:9A:E7:EB:82:01:16:AB:1A:56:6D:E8:8D:86:8E:11:11:27 Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft Manifest number: A1 Signing time: Thu 03 Jul 2025 06:30:54 +0000 Manifest this update: Thu 03 Jul 2025 06:30:54 +0000 Manifest next update: Thu 10 Jul 2025 06:30:54 +0000 Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: ATZ1dP8XjGg4Y549XiyOYNkwsbV9rsGs30zONyYWTV4=) 2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: qpNZ0Lm7ohL4bDYSXZ5HFsKxSW3wfA050YYCOcr+GtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Validity Not Before: Jul 3 06:30:54 2025 GMT Not After : Jul 10 06:30:54 2025 GMT Subject: CN=6866239e-8c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:3e:0b:25:59:b3:10:de:82:e9:8c:87:e6: dd:d1:69:ff:8e:37:c4:1b:ee:e3:fb:3f:96:74:83: b2:15:1a:64:c7:1a:b7:fc:35:6e:8b:7b:22:d4:58: be:63:a1:5e:85:e8:15:74:f8:a3:83:56:94:ac:f4: 6a:35:1d:4c:5a:94:8c:b6:f1:40:80:62:a1:e3:16: 8c:c4:73:9f:a9:9c:66:8e:cd:b2:48:a0:0d:50:8d: a4:ce:ca:cc:60:c8:a7:1c:6d:ae:f8:e5:40:6c:27: 88:41:82:bc:cb:e0:26:dc:fd:48:f0:f7:3c:c9:10: b9:6a:d5:b9:65:f6:16:31:53:0c:28:c1:8e:f5:16: a1:2b:67:ce:d5:5f:3c:51:32:37:bc:4b:0c:f5:88: c5:9e:29:78:48:6e:bb:6f:cd:ef:8a:74:b7:99:2f: f9:0f:0e:fb:54:85:06:ee:90:2b:1a:5f:9d:32:80: 0d:9a:6c:4b:72:34:f3:4c:a3:f2:77:0a:b3:ae:e8: 13:97:ed:7f:f2:71:fc:cd:cd:c9:c6:68:fd:17:7f: 3d:80:48:71:78:f4:eb:96:c4:ef:f2:77:04:15:a6: e7:c2:a0:65:13:f2:88:c6:18:f1:6d:9c:17:1a:65: fb:11:f7:01:ad:01:99:2e:47:24:a0:8a:b5:a3:7a: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:53:FB:9A:E7:EB:82:01:16:AB:1A:56:6D:E8:8D:86:8E:11:11:27 X509v3 Authority Key Identifier: keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b7:4e:9a:8c:76:39:8d:fa:3b:d6:7f:e8:25:c9:5d:44:7a: 48:e3:d6:78:46:9b:ea:f4:1e:ff:a4:16:3a:97:73:49:4c:43: f8:19:97:2b:f5:be:71:af:ad:87:27:a2:b7:73:80:7b:14:2b: 7f:3a:e2:d7:57:9b:9d:f6:da:3d:25:ec:62:27:70:ef:a8:e5: 26:ca:ae:25:0f:55:2c:3f:8b:78:60:d7:76:0e:3b:40:09:35: d9:fd:a2:0e:f1:ff:cf:97:87:e5:5b:ae:4d:e7:a3:fa:66:37: ad:df:44:3f:76:cd:d4:d0:14:19:e4:c5:df:7f:80:c7:01:e0: 36:e8:36:ad:5f:b9:63:6c:48:e4:cf:85:13:d3:ae:27:aa:c9: 62:4e:39:4d:30:ff:b7:88:06:72:13:cd:56:47:59:69:28:09: b1:b7:69:c2:43:f7:89:f9:7d:2d:ac:d4:ff:42:75:5f:90:e2: db:0b:57:75:d4:10:09:6b:56:f8:23:b9:65:69:ec:f4:fe:11: 96:16:8f:28:96:d6:fe:6e:fc:4c:06:49:0f:29:d5:3f:e5:d2: ef:30:b7:42:e5:9b:2a:d4:63:9a:27:9f:d5:46:69:c7:33:83: 04:5c:6e:ee:26:d3:38:0f:73:37:b6:67:bc:a8:ad:3b:c1:3a: 5a:fc:ed:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3 MzM1RTRGNTkwHhcNMjUwNzAzMDYzMDU0WhcNMjUwNzEwMDYzMDU0WjAYMRYwFAYD VQQDEw02ODY2MjM5ZS04YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXM+CyVZsxDegumMh+bd0Wn/jjfEG+7j+z+WdIOyFRpkxxq3/DVui3si1Fi+ Y6FehegVdPijg1aUrPRqNR1MWpSMtvFAgGKh4xaMxHOfqZxmjs2ySKANUI2kzsrM YMinHG2u+OVAbCeIQYK8y+Am3P1I8Pc8yRC5atW5ZfYWMVMMKMGO9RahK2fO1V88 UTI3vEsM9YjFnil4SG67b83vinS3mS/5Dw77VIUG7pArGl+dMoANmmxLcjTzTKPy dwqzrugTl+1/8nH8zc3Jxmj9F389gEhxePTrlsTv8ncEFabnwqBlE/KIxhjxbZwX GmX7EfcBrQGZLkckoIq1o3rPxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZT+5rn 64IBFqsaVm3ojYaOEREnMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54 SHhsRWFPcUJWRTF6TmVUMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOt06ajHY5jfo71n/oJcldRHpI49Z4Rpvq9B7/pBY6l3NJTEP4GZcr 9b5xr62HJ6K3c4B7FCt/OuLXV5ud9to9JexiJ3DvqOUmyq4lD1UsP4t4YNd2DjtA CTXZ/aIO8f/Pl4flW65N56P6Zjet30Q/ds3U0BQZ5MXff4DHAeA26DatX7ljbEjk z4UT064nqsliTjlNMP+3iAZyE81WR1lpKAmxt2nCQ/eJ+X0trNT/QnVfkOLbC1d1 1BAJa1b4I7llaez0/hGWFo8oltb+bvxMBkkPKdU/5dLvMLdC5Zsq1GOaJ5/VRmnH M4MEXG7uJtM4D3M3tme8qK07wTpa/O1E -----END CERTIFICATE-----Generated at Fri Jul 4 13:35:08 2025 by rpki-client