$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: qaHv6HLbaa1cqmlVJmKMvARVkqveACBH4P4gaDDYmKg= Subject key identifier: 71:32:CA:C2:6E:2E:2F:73:8F:92:DC:D4:06:73:A9:CD:99:FA:1F:70 Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 0145 Signing time: Thu 03 Jul 2025 04:27:29 +0000 Manifest this update: Thu 03 Jul 2025 04:27:29 +0000 Manifest next update: Thu 10 Jul 2025 04:27:28 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: RgixuUfcorqbnDh8klSISNNBQnpO45AwMyOAJnjwJvQ=) 2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=) 3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: Jul 3 04:27:29 2025 GMT Not After : Jul 10 04:27:28 2025 GMT Subject: CN=686606b1-ebab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:4b:bc:7c:2f:bd:0e:1c:cd:d5:e4:a9:5d: 75:9a:67:17:05:46:d5:49:f6:24:bb:f3:5d:5a:f6: 18:fc:1d:02:0d:9d:23:1e:89:31:98:6f:f0:75:c9: 7f:2c:24:73:ee:32:37:90:13:3f:d9:fd:42:40:99: e4:45:e9:34:5d:20:9a:35:56:14:d6:50:94:fd:a8: 28:93:fa:27:28:52:6d:a1:ba:23:e7:fa:78:00:f3: 73:6a:eb:12:99:6a:33:de:da:40:be:e5:39:15:22: 22:83:8c:d8:4f:d9:ea:4f:94:df:4a:1e:12:e6:72: b6:52:81:ee:6d:2b:19:8c:37:6a:92:b4:72:96:13: 9b:6a:e2:45:83:b8:34:77:88:da:1d:9d:2e:d0:25: 43:d4:47:48:e0:f8:57:d9:ae:97:a5:e4:d2:c8:f2: cf:4b:4f:c9:f3:04:94:5c:16:44:1e:7f:81:85:17: b2:08:90:ea:1b:2d:9a:9a:86:79:62:9a:4b:1d:74: dc:7a:86:7e:13:47:b3:da:ec:52:e9:d8:f6:ed:de: e9:99:2b:8a:fc:98:a1:a4:4d:cf:01:1e:7b:20:2e: 33:47:a7:e5:c6:13:c4:34:eb:e1:33:0f:54:1f:98: 74:93:42:73:bc:af:f7:a4:42:2d:ef:66:86:d8:c6: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:32:CA:C2:6E:2E:2F:73:8F:92:DC:D4:06:73:A9:CD:99:FA:1F:70 X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:14:bf:1c:f0:92:c6:18:90:ec:dc:ee:5c:15:bf:dd:51:ad: df:50:08:d8:a2:31:85:e3:63:2e:09:a8:00:15:7b:12:36:9f: c7:93:d1:ea:69:b8:ea:86:47:4f:6c:1b:fb:84:7d:68:11:3f: 5d:66:3a:fa:39:15:49:1d:5d:52:46:27:29:eb:57:24:de:14: 38:71:20:24:ed:49:d2:25:e4:aa:ef:1a:5e:de:a6:de:f0:37: 29:c8:c3:d8:2e:3e:1f:46:b4:33:6a:4b:36:a6:8b:93:b7:a0: 77:75:04:c5:41:70:e9:5a:ee:8f:1b:e6:dd:34:99:18:b5:19: 9a:44:37:24:68:72:f8:2f:5e:7f:95:1a:0f:c5:26:ba:21:34: ce:20:cc:89:5f:75:e2:fe:10:fa:18:79:e2:31:e2:b0:2a:71: dc:10:27:83:3c:c0:6d:fd:95:8a:1f:b0:fd:b8:ae:b2:81:30: 86:53:8d:b3:dd:c5:73:73:1a:b1:e0:e1:b3:7a:34:8e:51:39: 1c:ec:53:d2:89:0f:39:2e:b2:ed:f7:2c:3b:7a:7d:fd:0f:a5: 56:46:a1:56:ee:19:56:d4:c7:b9:f7:87:3b:4f:c8:f6:27:af: 0d:7c:4e:e0:7d:7c:11:7c:ff:46:15:4c:d3:86:bc:81:07:02: 27:19:be:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUwNzAzMDQyNzI5WhcNMjUwNzEwMDQyNzI4WjAYMRYwFAYD VQQDEw02ODY2MDZiMS1lYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyNLvHwvvQ4czdXkqV11mmcXBUbVSfYku/NdWvYY/B0CDZ0jHokxmG/wdcl/ LCRz7jI3kBM/2f1CQJnkRek0XSCaNVYU1lCU/agok/onKFJtoboj5/p4APNzausS mWoz3tpAvuU5FSIig4zYT9nqT5TfSh4S5nK2UoHubSsZjDdqkrRylhObauJFg7g0 d4jaHZ0u0CVD1EdI4PhX2a6XpeTSyPLPS0/J8wSUXBZEHn+BhReyCJDqGy2amoZ5 YppLHXTceoZ+E0ez2uxS6dj27d7pmSuK/JihpE3PAR57IC4zR6flxhPENOvhMw9U H5h0k0JzvK/3pEIt72aG2MaDpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEyysJu Li9zj5Lc1AZzqc2Z+h9wMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClFL8c8JLGGJDs3O5cFb/dUa3fUAjYojGF42MuCagAFXsSNp/Hk9Hq abjqhkdPbBv7hH1oET9dZjr6ORVJHV1SRicp61ck3hQ4cSAk7UnSJeSq7xpe3qbe 8DcpyMPYLj4fRrQzaks2pouTt6B3dQTFQXDpWu6PG+bdNJkYtRmaRDckaHL4L15/ lRoPxSa6ITTOIMyJX3Xi/hD6GHniMeKwKnHcECeDPMBt/ZWKH7D9uK6ygTCGU42z 3cVzcxqx4OGzejSOUTkc7FPSiQ85LrLt9yw7en39D6VWRqFW7hlW1Me594c7T8j2 J68NfE7gfXwRfP9GFUzThryBBwInGb6S -----END CERTIFICATE-----Generated at Fri Jul 4 21:54:20 2025 by rpki-client