$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: oDj2WizSzdW5cKMpgzlQ9owxlV2UwBXAD9PZYd7DjMM= Subject key identifier: 7D:A0:10:DE:02:B3:EA:9E:A6:E2:0A:86:C8:31:01:35:02:86:20:5C Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 349D Signing time: Fri 04 Jul 2025 15:15:01 +0000 Manifest this update: Fri 04 Jul 2025 15:15:01 +0000 Manifest next update: Fri 11 Jul 2025 15:15:01 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: w4EQiVVPOL2vv7IoifMrn3jMkHCAqlRd1PgfJUGgH/Q=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Jul 4 15:15:01 2025 GMT Not After : Jul 11 15:15:01 2025 GMT Subject: CN=6867eff5-99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:14:1b:24:31:53:49:44:3a:c6:65:4b:6b: 1e:fe:b1:42:93:e2:af:5a:34:f6:43:36:a3:e8:08: 4a:a4:7d:09:23:be:ee:62:b4:92:64:6e:94:06:a2: f8:68:6b:27:7e:df:f7:8b:bf:5e:09:ce:0e:37:63: 89:bd:d8:d9:aa:43:53:15:79:c2:b2:bb:ec:f8:d7: 32:f1:da:ae:8e:0f:85:32:ac:25:52:98:b1:95:6d: cd:13:d2:72:69:9c:47:e2:37:5f:f1:85:02:90:1c: ab:c5:04:9d:37:4c:7c:45:87:1d:45:91:ab:4c:8c: 67:9d:61:6a:4e:8f:89:55:52:b6:f9:43:75:1d:fc: 4d:bb:06:e8:52:e3:6f:84:94:f4:3a:dc:a0:85:6a: db:e2:08:62:ac:db:cd:71:2f:f7:2b:5e:25:fa:35: 73:ba:61:e9:60:b5:df:c2:cc:6b:fd:90:42:6f:aa: 94:70:14:a1:97:14:59:97:16:55:c1:8d:a2:e5:d0: b5:8c:cd:ba:d1:2d:06:a6:24:a9:21:3e:d0:fb:c0: 66:fb:21:41:4d:dc:fb:01:0e:1a:7e:87:eb:6d:fd: d2:d1:7c:f0:f6:d2:3c:4e:d3:b0:50:35:3a:cb:cf: 42:c7:ec:f9:90:12:a2:d6:75:ea:9b:63:ce:89:74: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A0:10:DE:02:B3:EA:9E:A6:E2:0A:86:C8:31:01:35:02:86:20:5C X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9d:71:9c:57:8a:56:2a:d9:39:83:93:02:3c:5f:1d:8d:76: 84:f6:31:58:45:c7:89:a0:13:c6:30:8f:45:e2:4c:98:4d:0e: d3:61:82:96:0e:ba:11:1d:c5:3a:aa:57:c5:f8:d8:27:70:3e: 39:68:7a:28:61:03:67:ba:9f:f5:9b:b5:b3:ba:3c:6c:e4:62: 8b:44:32:e5:9b:d9:76:05:6d:7d:c7:2b:31:c5:83:a5:ed:60: 94:0d:da:21:a4:84:9e:e3:7c:5f:79:53:96:93:24:ca:27:17: 69:d9:88:15:72:38:27:47:b1:c6:33:34:51:08:fe:4e:03:1c: 1c:1d:13:2d:64:f9:19:7b:84:a3:af:35:b9:09:5f:e5:6b:8b: f1:95:68:c8:22:37:22:83:39:8f:ec:48:ae:02:6a:24:c9:e5: 8e:a8:e7:2a:45:58:bf:5a:68:40:f2:cf:94:81:e0:fb:23:4d: b1:13:ad:79:48:69:08:04:0e:39:5f:12:00:50:4d:fe:8c:85: 93:b5:47:ea:ff:7c:7d:d3:79:df:c1:2f:99:63:09:23:54:16: 63:90:a3:c1:50:da:97:95:6b:69:d3:20:b4:c8:ff:cb:45:c1: 21:8d:b4:90:47:ad:26:ac:ad:22:3e:fa:e9:0e:df:47:39:d7: cc:54:c6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUwNzA0MTUxNTAxWhcNMjUwNzExMTUxNTAxWjAYMRYwFAYD VQQDEw02ODY3ZWZmNS05OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbcUGyQxU0lEOsZlS2se/rFCk+KvWjT2Qzaj6AhKpH0JI77uYrSSZG6UBqL4 aGsnft/3i79eCc4ON2OJvdjZqkNTFXnCsrvs+Ncy8dqujg+FMqwlUpixlW3NE9Jy aZxH4jdf8YUCkByrxQSdN0x8RYcdRZGrTIxnnWFqTo+JVVK2+UN1HfxNuwboUuNv hJT0OtyghWrb4ghirNvNcS/3K14l+jVzumHpYLXfwsxr/ZBCb6qUcBShlxRZlxZV wY2i5dC1jM260S0GpiSpIT7Q+8Bm+yFBTdz7AQ4afofrbf3S0Xzw9tI8TtOwUDU6 y89Cx+z5kBKi1nXqm2POiXQbVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2gEN4C s+qepuIKhsgxATUChiBcMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCenXGcV4pWKtk5g5MCPF8djXaE9jFYRceJoBPGMI9F4kyYTQ7TYYKW DroRHcU6qlfF+NgncD45aHooYQNnup/1m7Wzujxs5GKLRDLlm9l2BW19xysxxYOl 7WCUDdohpISe43xfeVOWkyTKJxdp2YgVcjgnR7HGMzRRCP5OAxwcHRMtZPkZe4Sj rzW5CV/la4vxlWjIIjcigzmP7EiuAmokyeWOqOcqRVi/WmhA8s+UgeD7I02xE615 SGkIBA45XxIAUE3+jIWTtUfq/3x903nfwS+ZYwkjVBZjkKPBUNqXlWtp0yC0yP/L RcEhjbSQR60mrK0iPvrpDt9HOdfMVMal -----END CERTIFICATE-----Generated at Sun Jul 6 00:11:28 2025 by rpki-client