$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: HfvV6KHhIWIxwJNvu9Tl0SIPUdv2HNo1SoY+CXyd45U= Subject key identifier: FE:3C:55:B7:54:3D:81:7D:FE:EC:4C:30:C9:A8:09:F3:81:59:E2:FD Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A1D Signing time: Wed 02 Jul 2025 19:59:59 +0000 Manifest this update: Wed 02 Jul 2025 19:59:58 +0000 Manifest next update: Wed 09 Jul 2025 19:59:58 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: zVAczQjPWhRSDBCjatrVPIbdNbcncYmsyTNT+txJMrU=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2595 (0xa23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Jul 2 19:59:58 2025 GMT Not After : Jul 9 19:59:58 2025 GMT Subject: CN=68658fbe-456b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:1e:b5:04:9e:cb:60:c8:a8:c5:33:22:46: cc:de:65:dd:58:0a:90:97:b0:0a:bb:54:fa:2f:dd: a8:db:ee:2c:fc:31:87:b0:0f:bc:67:46:35:85:a2: 93:04:63:a6:20:8e:30:87:56:13:56:bd:da:1d:bb: 74:1f:fe:b0:17:66:08:e9:45:5b:8e:1f:9f:4f:c8: 7c:eb:14:22:cd:08:55:fd:c3:2f:31:ef:9d:b3:b9: 29:f9:0e:c1:45:6d:3a:78:10:a7:e5:b1:27:41:1a: b2:8c:a8:95:5d:79:8f:e6:36:b5:e9:69:9c:ff:62: 21:ac:9c:34:26:06:5d:76:e8:0d:52:37:8f:97:7f: 8f:5a:b7:41:3b:42:b1:07:55:39:34:99:4d:c0:60: 3d:e2:36:94:62:69:27:c3:6a:0a:48:7c:d1:11:e5: 70:17:d1:46:bd:8f:d5:ba:0c:ad:a0:f5:3d:2f:de: 0b:7b:66:a8:2e:f9:7f:63:90:12:85:ad:ee:d9:fc: 6c:7a:da:cb:d1:07:65:2c:0f:d3:3c:70:5c:52:b5: 5c:65:0a:7b:de:cd:bf:ee:92:d3:93:87:9c:81:1f: 0f:27:10:08:65:10:a3:2b:8a:8b:06:6a:d8:42:dc: c4:1f:a1:7a:ab:a0:5c:79:09:58:1a:ab:ce:d1:61: 60:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3C:55:B7:54:3D:81:7D:FE:EC:4C:30:C9:A8:09:F3:81:59:E2:FD X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:71:f7:b9:b8:22:12:a3:02:d4:fd:5d:8e:f7:62:c1:83:1f: ad:cd:93:d8:76:75:26:e3:a9:a3:66:da:87:b3:9f:ce:6b:59: 33:56:0f:05:88:38:a4:e0:d8:e4:99:5f:18:5b:f3:59:d4:b6: 02:f9:d7:46:68:1d:fc:24:9c:89:bd:ab:42:38:6b:d6:e3:99: f9:b6:5f:ff:ce:11:52:7c:d8:a1:44:c5:26:12:f7:53:72:0b: 5a:b7:af:29:64:20:5c:ae:f9:41:20:46:0a:7a:5f:12:34:8a: 4d:4a:79:a8:1d:46:a1:6a:50:8f:eb:ed:f6:13:db:34:cb:92: d2:d1:85:35:6f:91:20:89:ae:54:0c:07:1e:39:07:97:89:ef: f1:03:fe:9a:35:1c:f7:71:31:be:a2:82:18:39:68:c4:9d:49: 97:f6:56:86:e4:19:ca:dc:ce:a4:de:7f:f4:12:fb:07:70:6e: c1:48:04:61:6f:51:32:78:e1:9a:57:c4:77:9a:70:4e:0a:ed: 9a:20:5b:9c:e9:b4:f5:d3:33:da:58:4a:a2:f4:21:2f:86:3f: 60:4a:52:86:64:f2:0e:ea:0e:08:f5:d2:b1:cb:8d:40:17:8a: 63:a7:9e:97:a8:a7:35:36:07:5d:24:0e:ee:17:d1:ac:8e:78: cb:53:8b:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUwNzAyMTk1OTU4WhcNMjUwNzA5MTk1OTU4WjAYMRYwFAYD VQQDEw02ODY1OGZiZS00NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ8etQSey2DIqMUzIkbM3mXdWAqQl7AKu1T6L92o2+4s/DGHsA+8Z0Y1haKT BGOmII4wh1YTVr3aHbt0H/6wF2YI6UVbjh+fT8h86xQizQhV/cMvMe+ds7kp+Q7B RW06eBCn5bEnQRqyjKiVXXmP5ja16Wmc/2IhrJw0JgZddugNUjePl3+PWrdBO0Kx B1U5NJlNwGA94jaUYmknw2oKSHzREeVwF9FGvY/VugytoPU9L94Le2aoLvl/Y5AS ha3u2fxsetrL0QdlLA/TPHBcUrVcZQp73s2/7pLTk4ecgR8PJxAIZRCjK4qLBmrY QtzEH6F6q6BceQlYGqvO0WFgwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP48VbdU PYF9/uxMMMmoCfOBWeL9MB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3cfe5uCISowLU/V2O92LBgx+tzZPYdnUm46mjZtqHs5/Oa1kzVg8F iDik4NjkmV8YW/NZ1LYC+ddGaB38JJyJvatCOGvW45n5tl//zhFSfNihRMUmEvdT cgtat68pZCBcrvlBIEYKel8SNIpNSnmoHUahalCP6+32E9s0y5LS0YU1b5Egia5U DAceOQeXie/xA/6aNRz3cTG+ooIYOWjEnUmX9laG5BnK3M6k3n/0EvsHcG7BSARh b1EyeOGaV8R3mnBOCu2aIFuc6bT10zPaWEqi9CEvhj9gSlKGZPIO6g4I9dKxy41A F4pjp56XqKc1NgddJA7uF9GsjnjLU4vJ -----END CERTIFICATE-----Generated at Thu Jul 3 18:01:13 2025 by rpki-client