$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: I4W8vZ2HQSEI9v5REsHPasEvb4JtcoiTr+F7yidYv1M= Subject key identifier: 54:B8:8C:77:15:21:A2:26:8C:05:1A:25:D1:20:ED:10:82:32:7B:B6 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: AD Signing time: Thu 19 Jun 2025 05:24:53 +0000 Manifest this update: Thu 19 Jun 2025 05:24:53 +0000 Manifest next update: Thu 26 Jun 2025 05:24:53 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: ShkpItVdiM1X6PEuD6EvM4YKYDgxmpQ7F23AdzaRb4E=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: 3HXgfR2xDybCR9JbXAm4K9BmBrTeyB6NLob5uNWXRyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Jun 19 05:24:53 2025 GMT Not After : Jun 26 05:24:53 2025 GMT Subject: CN=68539f25-2cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:40:f1:8a:75:81:e7:04:6d:b8:95:5d:82: 0e:54:cc:51:15:d2:d0:c9:f9:05:9e:f3:20:e9:16: c7:4d:73:3a:98:12:88:b5:6a:19:5b:5a:28:8d:72: 08:98:e7:8d:cc:9a:6c:3d:68:24:28:83:b8:3b:d4: 5a:cb:f3:e6:74:24:69:91:b3:e1:9c:41:bb:02:1c: 74:d7:cf:b9:d6:39:37:c8:74:4f:5a:f3:86:c6:88: d7:a6:62:3f:64:63:86:f7:32:ba:22:29:e0:21:ce: 78:eb:96:61:05:4c:51:2f:1c:b5:34:c3:f6:9e:a4: 17:da:4e:5a:e1:fa:8b:61:b5:31:78:3d:12:6f:ca: 14:c7:8a:ae:2f:bb:fc:5d:07:e4:a0:5b:9d:8d:77: 6c:0f:6f:ef:4c:bb:aa:fd:91:17:03:8b:b0:f2:17: 58:2d:3d:12:df:09:80:88:f1:70:34:1d:e2:16:bc: 9c:da:b6:de:97:97:da:96:50:68:6a:03:ce:c7:48: 36:18:a0:5e:3f:a2:1f:5b:c8:b1:b6:48:39:05:24: 7d:d5:47:7d:64:2e:f1:9d:c4:69:d2:74:d3:ad:bc: c8:1a:c6:41:7d:65:e4:48:0a:e9:e4:35:5d:33:c1: 1d:18:cd:0a:28:88:c3:64:ed:60:ae:42:cf:3e:01: 77:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B8:8C:77:15:21:A2:26:8C:05:1A:25:D1:20:ED:10:82:32:7B:B6 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:84:c6:ae:82:d4:59:37:a1:93:00:38:a5:70:4a:27:96:ae: c5:06:2b:c9:dc:c5:d4:11:fd:9e:9a:32:ee:4c:e6:56:75:e1: d7:b5:2b:f2:e0:80:38:8a:7b:07:e4:90:ce:e0:78:ae:b3:ad: 65:e7:3c:36:73:cd:a0:1f:14:7d:d1:16:32:cd:68:d0:bb:67: a6:bc:c9:70:82:5e:09:02:c7:fc:e4:28:40:d6:92:84:78:5b: e7:ad:a4:80:74:86:c8:c8:e0:3c:ed:25:df:82:70:18:f9:89: 02:24:2a:ce:56:e0:37:a4:34:f3:66:d9:d6:42:7f:6f:57:52: 96:ab:e6:8e:b6:90:22:be:8e:49:85:6b:f2:fb:c5:64:da:8a: 25:3a:ca:dd:b2:ce:d7:99:72:31:69:67:c4:d9:39:d8:61:13: 97:87:01:c6:1f:15:82:ee:5f:bc:82:4f:12:e0:4d:79:f7:c5: 3d:de:9b:77:e4:97:c8:f1:df:fa:5e:41:5c:3e:71:1f:2b:03: 50:68:f8:75:8e:7c:07:ea:64:3f:1c:83:15:f3:6a:51:3d:47: 4b:bc:00:20:ff:81:23:f6:f4:01:e6:42:aa:96:5f:c2:48:6e: 2f:26:3e:8d:2b:b9:90:1c:4e:8c:f1:2e:15:81:d0:cf:f4:2e: 77:13:11:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjUwNjE5MDUyNDUzWhcNMjUwNjI2MDUyNDUzWjAYMRYwFAYD VQQDEw02ODUzOWYyNS0yY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxFA8Yp1gecEbbiVXYIOVMxRFdLQyfkFnvMg6RbHTXM6mBKItWoZW1oojXII mOeNzJpsPWgkKIO4O9Ray/PmdCRpkbPhnEG7Ahx018+51jk3yHRPWvOGxojXpmI/ ZGOG9zK6IingIc5465ZhBUxRLxy1NMP2nqQX2k5a4fqLYbUxeD0Sb8oUx4quL7v8 XQfkoFudjXdsD2/vTLuq/ZEXA4uw8hdYLT0S3wmAiPFwNB3iFryc2rbel5fallBo agPOx0g2GKBeP6IfW8ixtkg5BSR91Ud9ZC7xncRp0nTTrbzIGsZBfWXkSArp5DVd M8EdGM0KKIjDZO1grkLPPgF3JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS4jHcV IaImjAUaJdEg7RCCMnu2MB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKhMaugtRZN6GTADilcEonlq7FBivJ3MXUEf2emjLuTOZWdeHXtSvy 4IA4insH5JDO4Hius61l5zw2c82gHxR90RYyzWjQu2emvMlwgl4JAsf85ChA1pKE eFvnraSAdIbIyOA87SXfgnAY+YkCJCrOVuA3pDTzZtnWQn9vV1KWq+aOtpAivo5J hWvy+8Vk2oolOsrdss7XmXIxaWfE2TnYYROXhwHGHxWC7l+8gk8S4E1598U93pt3 5JfI8d/6XkFcPnEfKwNQaPh1jnwH6mQ/HIMV82pRPUdLvAAg/4Ej9vQB5kKqll/C SG4vJj6NK7mQHE6M8S4VgdDP9C53ExHn -----END CERTIFICATE-----Generated at Fri Jun 20 20:54:23 2025 by rpki-client