$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: KGV9ao9ppGLVocODrwAfMOb4XwCDMS5yNyPkKuX+6mY= Subject key identifier: 76:53:9A:3E:C5:56:91:6A:0E:BD:46:7C:31:7F:4A:D4:54:85:1D:E9 Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 018D Signing time: Mon 16 Jun 2025 18:49:31 +0000 Manifest this update: Mon 16 Jun 2025 18:49:31 +0000 Manifest next update: Mon 23 Jun 2025 18:49:30 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: Aw5fyaiA/yQQ3zzqU/seCqOztDSIQeWv/7cDPHV1etc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Jun 16 18:49:31 2025 GMT Not After : Jun 23 18:49:30 2025 GMT Subject: CN=6850673b-752a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:c2:21:3a:9d:c0:9e:d4:f9:a8:fd:82:15: fd:87:78:32:b2:e0:c8:17:1a:73:7d:db:0e:ea:b0: 2a:f1:2c:e1:41:9f:40:e6:df:38:47:9a:12:8b:0f: 4a:c8:45:c6:0a:7e:65:24:9d:96:58:08:cb:4c:9e: 4e:d6:57:d8:4d:87:c4:7d:27:8d:e3:64:d8:b0:fd: 52:b9:ae:87:e8:f0:12:a8:32:7b:29:97:b7:89:3f: f5:70:b6:41:0f:5f:e4:b8:06:42:bb:15:53:00:41: 95:be:bb:8a:a7:f6:d3:90:78:6e:5a:50:12:b5:c3: 4f:f7:03:30:ed:d4:51:59:ba:b4:5e:a5:a8:f6:0c: af:28:3a:cd:2a:77:49:a7:94:9c:1e:7f:8f:a3:d3: a8:9e:2b:c1:38:3f:5e:4a:4d:b4:66:70:7a:f4:fa: 47:42:00:c5:5f:cc:a1:b4:6c:4e:29:57:6d:f4:5c: 63:d1:76:1c:3d:16:93:e9:6a:74:75:d6:38:c3:6e: 54:14:13:4b:7c:01:ca:1e:e5:a1:cb:73:e3:2f:3e: a4:5a:17:3c:40:7a:66:1f:0c:36:18:e1:d8:54:3a: 72:ef:3f:65:0d:89:a1:f8:d7:01:40:b7:95:75:72: 6e:cb:c7:51:34:34:85:e1:15:fc:48:a6:bb:18:39: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:9A:3E:C5:56:91:6A:0E:BD:46:7C:31:7F:4A:D4:54:85:1D:E9 X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a9:d4:95:0b:42:2d:55:9c:45:6a:4e:3c:80:58:a2:52:86: 46:c2:27:2d:8f:a8:e3:3d:60:01:e3:fe:ac:46:a6:ce:d9:cb: 89:78:6f:43:79:8b:68:b2:58:2c:3f:f0:a3:7c:3c:e5:7d:85: d1:64:0b:f9:f7:ed:b9:b3:7d:5d:b5:cc:57:ab:79:8e:be:3a: bc:51:18:fb:83:d2:41:9d:41:8f:11:1d:94:d3:79:3a:66:13: a6:cd:ce:f5:af:61:f1:93:05:df:dc:97:63:23:b0:9e:26:01: cb:02:1b:56:7b:87:d5:95:21:de:1d:fb:d7:ec:f0:6c:31:15: 8e:0d:22:fa:86:2f:35:41:48:8b:96:19:dc:90:79:c8:a5:f8: 90:5e:ec:e1:16:93:aa:7c:f9:fd:12:f3:1f:2e:81:71:64:b7: 6d:7d:bb:a8:f1:5d:2d:d6:55:69:43:92:03:66:5b:8a:08:20: 3d:6f:96:92:e7:8d:24:96:c2:7d:4b:5c:53:f0:d5:90:cd:d5: db:df:fe:49:e7:e4:50:b6:ea:e9:28:71:c5:fc:86:11:dd:74: 0c:4b:13:95:7e:ab:53:36:4b:0b:45:ee:66:74:a3:ae:f3:0b: 27:35:0a:c0:d4:54:81:48:75:58:c5:dd:dd:21:d4:f7:53:b8: 0c:c5:e0:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjUwNjE2MTg0OTMxWhcNMjUwNjIzMTg0OTMwWjAYMRYwFAYD VQQDEw02ODUwNjczYi03NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2zCITqdwJ7U+aj9ghX9h3gysuDIFxpzfdsO6rAq8SzhQZ9A5t84R5oSiw9K yEXGCn5lJJ2WWAjLTJ5O1lfYTYfEfSeN42TYsP1Sua6H6PASqDJ7KZe3iT/1cLZB D1/kuAZCuxVTAEGVvruKp/bTkHhuWlAStcNP9wMw7dRRWbq0XqWo9gyvKDrNKndJ p5ScHn+Po9OonivBOD9eSk20ZnB69PpHQgDFX8yhtGxOKVdt9Fxj0XYcPRaT6Wp0 ddY4w25UFBNLfAHKHuWhy3PjLz6kWhc8QHpmHww2GOHYVDpy7z9lDYmh+NcBQLeV dXJuy8dRNDSF4RX8SKa7GDnVeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZTmj7F VpFqDr1GfDF/StRUhR3pMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqdSVC0ItVZxFak48gFiiUoZGwictj6jjPWAB4/6sRqbO2cuJeG9D eYtoslgsP/CjfDzlfYXRZAv59+25s31dtcxXq3mOvjq8URj7g9JBnUGPER2U03k6 ZhOmzc71r2HxkwXf3JdjI7CeJgHLAhtWe4fVlSHeHfvX7PBsMRWODSL6hi81QUiL lhnckHnIpfiQXuzhFpOqfPn9EvMfLoFxZLdtfbuo8V0t1lVpQ5IDZluKCCA9b5aS 540klsJ9S1xT8NWQzdXb3/5J5+RQturpKHHF/IYR3XQMSxOVfqtTNksLRe5mdKOu 8wsnNQrA1FSBSHVYxd3dIdT3U7gMxeCt -----END CERTIFICATE-----Generated at Wed Jun 18 15:26:28 2025 by rpki-client