$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: StbU5Cz1cdldWHuGgEGdHupDOq6lzN+K8nBOQdqRmX8= Subject key identifier: 3A:99:D3:7B:82:4C:10:E2:75:81:2F:D9:51:4E:FB:FF:12:A0:71:2B Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 05F1 Signing time: Wed 02 Jul 2025 23:14:11 +0000 Manifest this update: Wed 02 Jul 2025 23:14:10 +0000 Manifest next update: Wed 09 Jul 2025 23:14:10 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: kS2yXE79jkS2/B6v651RWE8Edi+9UwfIYQ/7AiMB9Aw=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Jul 2 23:14:10 2025 GMT Not After : Jul 9 23:14:10 2025 GMT Subject: CN=6865bd42-e374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:dc:ad:66:0c:a7:f4:25:07:4e:88:f0:b8: e6:02:e0:09:8a:02:92:dd:30:b9:64:39:5a:8a:2c: 09:51:3a:41:56:eb:b0:0c:72:8a:e2:7e:32:74:98: 1d:81:88:6f:bb:19:b7:52:5c:ac:71:7e:7f:fe:6e: 00:76:e1:3e:d6:f5:62:db:87:42:81:e6:39:fa:5a: 98:aa:66:00:73:bc:af:84:29:4b:a0:4a:75:71:e8: 3e:97:04:18:b4:1a:21:0d:86:5f:cb:49:5d:2a:4f: f1:0d:41:9d:51:e7:a7:d2:83:67:90:73:af:7c:e1: f9:cb:0b:2c:c1:ae:19:3f:05:1e:cb:b0:dd:8f:d1: d1:94:a9:b8:19:81:b7:a1:b5:5f:c7:d1:c0:3d:23: ee:ff:6a:d0:b8:35:c6:5e:fd:8d:f3:09:08:fc:08: d6:b5:13:c9:78:0d:cf:82:c7:5f:76:48:6f:39:cb: 24:ce:e8:2f:09:02:6f:32:3b:78:e0:31:a6:24:87: 90:c7:57:30:ae:6b:a1:35:18:d6:8b:6b:e8:f5:b0: ed:d1:ce:d8:af:d5:6c:99:4b:c1:93:09:ef:4f:91: d6:f7:95:a5:eb:c9:0d:61:88:68:77:1a:98:9c:30: 02:6b:8f:75:19:db:5f:18:3e:40:a5:10:04:3c:a3: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:D3:7B:82:4C:10:E2:75:81:2F:D9:51:4E:FB:FF:12:A0:71:2B X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:63:34:3b:6e:6a:8d:14:81:91:37:6b:93:03:10:44:57:b9: 61:f8:78:ed:9e:09:eb:d4:d5:f8:bc:22:98:99:89:6e:56:13: b6:c2:f0:c0:8d:a9:d4:f3:3d:46:ea:70:43:0b:06:50:6e:d6: d2:ec:70:1c:15:fa:90:ef:73:e3:64:62:b1:b9:a3:59:b7:ea: b7:36:d5:e9:48:9b:bf:a7:2e:2c:16:82:26:b3:dd:bb:c6:7e: 85:29:08:5f:e5:51:1e:e5:b9:67:9f:ea:fa:d8:5b:8e:b4:4b: 2b:b8:46:0e:ec:03:9e:ed:4b:69:74:33:7a:82:3a:84:b8:b5: d5:97:18:86:18:97:96:58:e5:39:60:93:49:a7:40:cf:c0:a8: 48:09:2e:ed:c2:3d:1b:75:e1:5e:dd:e0:a5:29:d4:33:36:9b: e5:01:3a:7d:d2:02:48:0c:85:b5:37:ed:79:e6:9f:6a:f6:d7: 7d:93:dd:ed:49:db:d0:d3:c2:3e:11:3b:dc:29:0d:1b:e3:bf: bb:15:71:af:5a:cd:fc:2f:3a:32:2a:56:a4:27:33:9c:33:0d: 33:ee:d0:d5:9f:a4:ee:b6:f1:30:bd:d1:34:0f:28:ec:b5:bc: 61:87:a1:e1:56:41:35:24:b6:84:f1:3d:f3:75:15:09:c9:c3: 88:7e:1b:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwNzAyMjMxNDEwWhcNMjUwNzA5MjMxNDEwWjAYMRYwFAYD VQQDEw02ODY1YmQ0Mi1lMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvljcrWYMp/QlB06I8LjmAuAJigKS3TC5ZDlaiiwJUTpBVuuwDHKK4n4ydJgd gYhvuxm3UlyscX5//m4AduE+1vVi24dCgeY5+lqYqmYAc7yvhClLoEp1ceg+lwQY tBohDYZfy0ldKk/xDUGdUeen0oNnkHOvfOH5ywsswa4ZPwUey7Ddj9HRlKm4GYG3 obVfx9HAPSPu/2rQuDXGXv2N8wkI/AjWtRPJeA3PgsdfdkhvOcskzugvCQJvMjt4 4DGmJIeQx1cwrmuhNRjWi2vo9bDt0c7Yr9VsmUvBkwnvT5HW95Wl68kNYYhodxqY nDACa491GdtfGD5ApRAEPKOizwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqZ03uC TBDidYEv2VFO+/8SoHErMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtYzQ7bmqNFIGRN2uTAxBEV7lh+Hjtngnr1NX4vCKYmYluVhO2wvDA janU8z1G6nBDCwZQbtbS7HAcFfqQ73PjZGKxuaNZt+q3NtXpSJu/py4sFoIms927 xn6FKQhf5VEe5blnn+r62FuOtEsruEYO7AOe7UtpdDN6gjqEuLXVlxiGGJeWWOU5 YJNJp0DPwKhICS7twj0bdeFe3eClKdQzNpvlATp90gJIDIW1N+155p9q9td9k93t SdvQ08I+ETvcKQ0b47+7FXGvWs38LzoyKlakJzOcMw0z7tDVn6TutvEwvdE0Dyjs tbxhh6HhVkE1JLaE8T3zdRUJycOIfhsu -----END CERTIFICATE-----Generated at Thu Jul 3 09:39:15 2025 by rpki-client