$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: 2uMcsBj9LOuEOttqgcxNkTbIb4/zuwsfmwnDdwkrM84= Subject key identifier: A9:3D:F0:EE:29:81:70:2E:40:FD:DC:A5:EE:57:16:79:5F:FA:55:1D Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 040B Signing time: Tue 01 Jul 2025 01:03:23 +0000 Manifest this update: Tue 01 Jul 2025 01:03:22 +0000 Manifest next update: Tue 08 Jul 2025 01:03:22 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: OmsWGa75NNxVT/mgC203h+ts5YleIsFTCmgatbt7Ohk=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: 1iuXJipvz24oOntaPEU1wj4mqlPSsDFfiyLqXTsQZv4=) 3: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Jul 1 01:03:22 2025 GMT Not After : Jul 8 01:03:22 2025 GMT Subject: CN=686333db-4111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:de:68:6b:b0:26:b2:36:40:64:07:f7:fd:9e: 16:07:68:32:df:9f:b9:b1:10:32:48:ac:6e:84:15: d3:ea:0e:f6:9b:57:69:0b:34:02:76:c1:ba:32:89: 3f:56:56:55:4c:59:79:c4:41:61:46:5f:0b:aa:ed: 33:e2:87:53:de:52:27:1f:3a:fd:8a:90:8e:8d:70: 41:ca:c1:52:9b:35:44:34:aa:08:6e:f5:36:00:84: 13:e0:9d:1f:e1:63:ed:f2:86:12:05:96:64:bc:1c: 16:26:aa:ab:56:71:86:62:55:95:e4:6a:6b:f5:9d: 29:32:29:d3:39:42:02:43:f8:00:8a:e2:31:c7:7f: 0e:3a:58:14:26:3a:ab:35:35:58:e2:95:d8:34:bc: 36:ab:0e:66:02:a9:f1:ca:e8:f5:ef:76:f0:a2:de: ac:0d:0a:ea:4c:08:05:a3:94:fb:50:d7:dd:30:25: 21:42:44:7b:15:6b:46:33:f4:21:74:51:9c:a0:6f: d1:4e:94:88:9d:f8:2f:3b:80:f8:a0:69:dd:b0:ed: e5:04:56:fc:6f:7a:cf:d2:70:12:70:e4:34:0d:1d: 4b:89:62:39:42:01:ab:22:08:99:6c:39:91:5b:74: da:64:22:91:20:01:99:7b:b6:7c:33:45:b5:68:e9: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3D:F0:EE:29:81:70:2E:40:FD:DC:A5:EE:57:16:79:5F:FA:55:1D X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:eb:00:eb:b6:45:6c:56:0e:aa:b8:b9:ec:e6:de:84:8d:0a: 3e:03:54:3e:39:45:d9:4d:68:50:aa:20:f8:7f:43:42:99:72: 81:86:46:04:c5:d5:ac:92:ec:bb:dc:0a:a6:38:18:4c:f2:e1: 80:da:ff:ba:83:33:33:4a:da:60:f3:dc:d3:bc:02:71:b7:89: 9d:58:8d:c2:75:58:a3:1e:59:08:53:79:af:5f:4e:d1:c7:23: e1:ba:2d:41:a0:cb:4e:a4:d5:7e:7e:9d:41:4d:be:fd:17:0b: 79:20:bd:6d:b8:d6:d7:54:7d:4d:7a:cf:c2:86:9d:99:27:a7: 1a:a8:50:66:df:55:06:82:28:5e:09:21:9f:23:c6:fc:29:c9: 32:b9:3b:3c:61:8b:49:cc:c3:c7:95:32:dd:61:4c:f1:9a:80: 99:9e:f9:88:7e:8b:0f:82:46:52:99:e6:47:cd:58:17:d0:2a: 63:c9:e6:65:4b:72:47:31:8f:f9:cb:35:4f:b8:35:74:d1:50: 8e:aa:f6:86:93:67:52:fb:95:18:bf:82:2c:e3:9a:35:ed:00: 7e:27:f7:b1:01:7c:df:e6:e6:9d:6e:40:ae:ca:bc:23:23:b7: 98:25:68:03:ca:b5:ba:90:a5:31:2e:e4:ce:0b:6f:4b:97:77: 72:f9:08:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwNzAxMDEwMzIyWhcNMjUwNzA4MDEwMzIyWjAYMRYwFAYD VQQDEw02ODYzMzNkYi00MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+N5oa7AmsjZAZAf3/Z4WB2gy35+5sRAySKxuhBXT6g72m1dpCzQCdsG6Mok/ VlZVTFl5xEFhRl8Lqu0z4odT3lInHzr9ipCOjXBBysFSmzVENKoIbvU2AIQT4J0f 4WPt8oYSBZZkvBwWJqqrVnGGYlWV5Gpr9Z0pMinTOUICQ/gAiuIxx38OOlgUJjqr NTVY4pXYNLw2qw5mAqnxyuj173bwot6sDQrqTAgFo5T7UNfdMCUhQkR7FWtGM/Qh dFGcoG/RTpSInfgvO4D4oGndsO3lBFb8b3rP0nAScOQ0DR1LiWI5QgGrIgiZbDmR W3TaZCKRIAGZe7Z8M0W1aOnEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk98O4p gXAuQP3cpe5XFnlf+lUdMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE6wDrtkVsVg6quLns5t6EjQo+A1Q+OUXZTWhQqiD4f0NCmXKBhkYE xdWskuy73AqmOBhM8uGA2v+6gzMzStpg89zTvAJxt4mdWI3CdVijHlkIU3mvX07R xyPhui1BoMtOpNV+fp1BTb79Fwt5IL1tuNbXVH1Nes/Chp2ZJ6caqFBm31UGgihe CSGfI8b8KckyuTs8YYtJzMPHlTLdYUzxmoCZnvmIfosPgkZSmeZHzVgX0CpjyeZl S3JHMY/5yzVPuDV00VCOqvaGk2dS+5UYv4Is45o17QB+J/exAXzf5uadbkCuyrwj I7eYJWgDyrW6kKUxLuTOC29Ll3dy+Qjw -----END CERTIFICATE-----Generated at Wed Jul 2 15:57:18 2025 by rpki-client