$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: elB6bX8A6vyenurNfRFwZ01ZwSlDMBtCdtFeHtQZMv4= Subject key identifier: 78:69:09:1C:63:4E:A4:80:52:55:92:44:BE:69:FA:33:DF:B7:34:84 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 08CC Signing time: Mon 30 Jun 2025 20:39:41 +0000 Manifest this update: Mon 30 Jun 2025 20:39:41 +0000 Manifest next update: Mon 07 Jul 2025 20:39:41 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: 6W+BM4UpvXuHgfkRkSrkv1ZIoAbQd8ZB/iFwEv35MPo=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Jun 30 20:39:41 2025 GMT Not After : Jul 7 20:39:41 2025 GMT Subject: CN=6862f60d-995d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:e0:2b:4e:68:27:51:c2:47:51:95:a9:48: a0:e3:de:dc:14:e9:8e:b0:39:42:73:4a:eb:d7:2e: 06:c4:2d:2d:3a:c1:02:41:61:62:4c:03:5e:3d:ca: fc:1f:09:85:4c:9e:08:e8:76:b8:09:39:ad:f4:35: 0c:b5:7a:2e:b8:02:22:1f:e4:3e:40:e3:44:c6:6e: c3:b6:36:cc:5b:26:27:d9:df:fb:ee:0f:5c:3f:58: 4f:ca:a6:26:d6:71:fd:5f:dd:0b:30:33:99:40:03: 71:db:96:a5:fb:0a:a4:35:c2:3f:0b:a5:3a:d9:b8: 34:59:04:2e:ec:b8:2c:86:7a:58:ec:a0:30:f1:ed: 43:5d:57:93:85:be:36:59:db:f5:42:9c:36:1c:79: f2:c0:8e:d9:aa:f2:83:5e:ce:4c:0d:aa:08:97:d0: 76:ed:7d:07:48:9d:8b:c4:03:76:ef:9f:c6:68:b3: d0:d1:ec:8a:d7:78:66:66:8e:3e:c7:df:86:5c:9a: e3:51:fd:4e:60:c2:ea:85:1f:e6:4c:25:e3:5a:76: f0:66:32:a3:f3:15:4e:fe:82:0f:4a:86:66:5c:96: 85:ff:80:f6:71:91:e2:a3:1c:7a:fb:d7:1c:fe:9c: f6:b3:9e:14:83:6b:17:d1:7f:f7:13:fa:45:c1:a5: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:69:09:1C:63:4E:A4:80:52:55:92:44:BE:69:FA:33:DF:B7:34:84 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c0:9a:a2:e5:9a:3e:df:c6:2a:95:3b:1b:57:a6:ee:34:b6: aa:a0:d7:15:2a:aa:1f:c6:56:8f:7a:86:7b:87:a7:d6:4a:4f: bf:25:44:f7:a2:7d:02:8c:cc:16:b8:19:d8:bb:53:4b:01:5e: 73:46:d0:d0:41:64:7c:ab:aa:f0:4e:88:42:00:0c:26:9a:03: 91:45:6d:84:98:1d:ae:17:d1:dc:8c:a0:70:2b:a0:11:66:41: fb:34:ac:2d:6a:eb:e5:ea:61:78:8d:f1:7b:35:0c:65:e1:7d: 65:95:c8:52:54:86:72:d0:25:91:fe:de:c4:19:12:a8:31:d6: 90:07:5a:81:19:3d:d6:8a:76:87:3c:82:13:49:c7:a8:67:c4: bf:96:b6:45:65:2c:75:8f:17:bb:14:30:6b:c7:9c:6c:6e:47: 06:2c:4f:d7:e5:95:6a:80:38:b7:84:65:76:27:10:9f:6f:d7: ed:d1:de:fe:22:70:3d:d2:27:be:f9:d2:9a:3f:59:dd:52:95: 99:a0:f3:b8:34:a2:b6:b2:71:79:6d:e1:51:39:aa:eb:2f:2c: 2a:e9:e9:c5:ca:00:b8:4a:bc:9d:80:6b:29:d0:42:9a:a6:a8: a0:52:b2:a5:17:09:3a:2b:3a:5f:7a:a3:d1:e1:ec:1c:5a:27: f1:4a:17:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwNjMwMjAzOTQxWhcNMjUwNzA3MjAzOTQxWjAYMRYwFAYD VQQDEw02ODYyZjYwZC05OTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfrgK05oJ1HCR1GVqUig497cFOmOsDlCc0rr1y4GxC0tOsECQWFiTANePcr8 HwmFTJ4I6Ha4CTmt9DUMtXouuAIiH+Q+QONExm7DtjbMWyYn2d/77g9cP1hPyqYm 1nH9X90LMDOZQANx25al+wqkNcI/C6U62bg0WQQu7LgshnpY7KAw8e1DXVeThb42 Wdv1Qpw2HHnywI7ZqvKDXs5MDaoIl9B27X0HSJ2LxAN275/GaLPQ0eyK13hmZo4+ x9+GXJrjUf1OYMLqhR/mTCXjWnbwZjKj8xVO/oIPSoZmXJaF/4D2cZHioxx6+9cc /pz2s54Ug2sX0X/3E/pFwaVNmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhpCRxj TqSAUlWSRL5p+jPftzSEMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLwJqi5Zo+38YqlTsbV6buNLaqoNcVKqofxlaPeoZ7h6fWSk+/JUT3 on0CjMwWuBnYu1NLAV5zRtDQQWR8q6rwTohCAAwmmgORRW2EmB2uF9HcjKBwK6AR ZkH7NKwtauvl6mF4jfF7NQxl4X1llchSVIZy0CWR/t7EGRKoMdaQB1qBGT3WinaH PIITSceoZ8S/lrZFZSx1jxe7FDBrx5xsbkcGLE/X5ZVqgDi3hGV2JxCfb9ft0d7+ InA90ie++dKaP1ndUpWZoPO4NKK2snF5beFROarrLywq6enFygC4SrydgGsp0EKa pqigUrKlFwk6KzpfeqPR4ewcWifxShfU -----END CERTIFICATE-----Generated at Wed Jul 2 19:36:39 2025 by rpki-client