$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: LFPpyKnNHpA1H9AyICpdt/+YeiDH/BwXi09TbtsJ/wc= Subject key identifier: 6D:8A:AA:C0:29:1C:D0:56:E1:E4:74:3D:57:48:DD:CA:BB:07:EF:33 Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 0104 Signing time: Thu 03 Jul 2025 05:19:26 +0000 Manifest this update: Thu 03 Jul 2025 05:19:26 +0000 Manifest next update: Thu 10 Jul 2025 05:19:26 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: QVAoqU9n8AyKT4qK9t1WLOMzMrNESktzSyuziRCgp/4=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Jul 3 05:19:26 2025 GMT Not After : Jul 10 05:19:26 2025 GMT Subject: CN=686612de-8c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:db:35:19:c8:d3:83:3f:be:bf:94:fa:b6: 53:ac:68:0a:3d:f1:f5:97:a3:e7:34:d5:b6:18:eb: 36:6d:b7:ce:f2:64:79:5d:ba:9c:30:9c:2e:5a:38: 2e:f7:5a:48:6c:05:1a:67:89:39:ea:57:6a:51:b6: 31:9e:f4:94:cc:58:18:0a:ad:1b:10:b3:04:0e:f1: c4:39:d2:69:fc:3d:3e:1d:18:6d:b0:30:31:3d:b6: 44:88:c3:f4:c4:19:7d:0f:6c:b6:35:0b:a9:3b:3f: 7f:d1:a9:f6:6e:04:70:cf:45:bb:be:18:d9:4d:0e: ef:d3:11:b1:d8:10:4a:81:bb:9a:10:83:0c:db:de: 19:3f:7b:53:de:bc:06:94:3e:79:8a:62:8f:1a:4e: 63:75:89:b3:2d:e4:f4:4b:96:cf:2e:ae:89:93:dc: 0a:f2:5b:4a:7d:ca:34:6b:b1:d8:95:95:9c:a7:0c: 5d:b3:2f:9f:c4:3a:b7:42:a5:20:a3:1f:41:c3:01: 17:d2:9c:1a:54:52:5b:a8:43:5d:6f:21:e7:bd:9d: 2b:24:59:64:43:7f:3f:f1:c2:51:eb:78:22:29:41: 52:57:c1:21:b5:9d:e4:65:f9:a8:25:21:c0:34:bd: ca:a8:ec:02:c8:07:ba:2f:b9:b8:53:c4:c4:42:5c: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8A:AA:C0:29:1C:D0:56:E1:E4:74:3D:57:48:DD:CA:BB:07:EF:33 X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5d:cc:ee:b6:03:4f:58:fc:71:44:8c:13:2e:71:af:82:10: 95:d3:62:c5:fe:0c:69:de:a7:01:05:c3:05:f4:17:61:d5:2a: a3:d9:5b:4c:82:49:44:dc:72:17:31:66:a6:9f:6c:65:a4:cd: 00:23:a7:66:c9:9b:96:fb:1f:f1:9b:0a:cb:49:8c:3e:f7:7a: 44:54:b1:ca:e7:f3:1d:53:ae:ef:c8:ac:ae:ca:37:fc:1a:37: 19:cb:36:dd:d2:90:ae:5b:0e:dd:a9:08:b2:df:49:e4:ee:9c: 4d:9d:1e:28:4e:19:46:3f:2b:ba:da:98:99:79:fa:66:4c:d8: 1a:57:16:fd:e5:0f:4c:31:70:7d:94:63:70:77:d2:c2:eb:3a: 66:cf:94:0f:26:bd:da:a4:61:83:e0:a3:16:bc:c6:61:ad:c2: 76:08:47:fa:17:ee:f0:c1:0f:d4:d3:f8:3c:bd:a1:6a:d5:a8: 0a:75:95:0c:bb:a0:ad:e7:69:f1:d8:88:72:99:9c:8a:df:18: 31:21:64:e1:26:93:85:a8:c8:09:7f:ec:c6:86:91:6b:c6:87: 26:08:01:0c:e0:50:c0:19:af:60:7b:55:60:e9:c0:9d:0b:d9: 35:97:a4:04:d5:e6:88:1d:95:b2:77:3c:5d:a5:bc:fb:f1:50: b8:88:50:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjUwNzAzMDUxOTI2WhcNMjUwNzEwMDUxOTI2WjAYMRYwFAYD VQQDEw02ODY2MTJkZS04YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IjbNRnI04M/vr+U+rZTrGgKPfH1l6PnNNW2GOs2bbfO8mR5XbqcMJwuWjgu 91pIbAUaZ4k56ldqUbYxnvSUzFgYCq0bELMEDvHEOdJp/D0+HRhtsDAxPbZEiMP0 xBl9D2y2NQupOz9/0an2bgRwz0W7vhjZTQ7v0xGx2BBKgbuaEIMM294ZP3tT3rwG lD55imKPGk5jdYmzLeT0S5bPLq6Jk9wK8ltKfco0a7HYlZWcpwxdsy+fxDq3QqUg ox9BwwEX0pwaVFJbqENdbyHnvZ0rJFlkQ38/8cJR63giKUFSV8EhtZ3kZfmoJSHA NL3KqOwCyAe6L7m4U8TEQlznWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2KqsAp HNBW4eR0PVdI3cq7B+8zMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsXczutgNPWPxxRIwTLnGvghCV02LF/gxp3qcBBcMF9Bdh1Sqj2VtM gklE3HIXMWamn2xlpM0AI6dmyZuW+x/xmwrLSYw+93pEVLHK5/MdU67vyKyuyjf8 GjcZyzbd0pCuWw7dqQiy30nk7pxNnR4oThlGPyu62piZefpmTNgaVxb95Q9MMXB9 lGNwd9LC6zpmz5QPJr3apGGD4KMWvMZhrcJ2CEf6F+7wwQ/U0/g8vaFq1agKdZUM u6Ct52nx2IhymZyK3xgxIWThJpOFqMgJf+zGhpFrxocmCAEM4FDAGa9ge1Vg6cCd C9k1l6QE1eaIHZWydzxdpbz78VC4iFB5 -----END CERTIFICATE-----Generated at Thu Jul 3 19:59:23 2025 by rpki-client