$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: ORbPRMYgA5jVTwEbkMyhpjd/C4a5Vp8pOIt1+nBqksw= Subject key identifier: 20:1F:44:42:AB:95:7B:8A:10:46:F3:04:45:AB:8C:F8:46:36:FB:81 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 07D8 Signing time: Mon 16 Jun 2025 20:46:30 +0000 Manifest this update: Mon 16 Jun 2025 20:46:29 +0000 Manifest next update: Mon 23 Jun 2025 20:46:29 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: g8Ds4vzKDCjXpo23uEuTJo5/3/mNOxsnUwVfTHcrlCo=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: r2HES/7CUo40HGeXhmTY61PHC2lO/T7eeHbuuq9LOdc=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: rEOJzqlAnVBPeZC3MOxbXAE7DFN8lpEBOlDK4eG1ZzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Jun 16 20:46:29 2025 GMT Not After : Jun 23 20:46:29 2025 GMT Subject: CN=685082a6-a5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9b:20:dc:93:9a:22:36:8e:67:ea:d3:20:f1: c9:7f:5d:1f:5a:46:d6:b9:11:13:18:5f:e2:78:d0: a8:a5:70:16:a2:26:3b:2c:19:e7:58:c3:af:d8:8f: cd:a7:86:07:d7:3f:79:64:05:05:12:e6:e0:76:16: a3:4a:53:0c:7d:5e:36:48:de:35:28:cb:b2:12:c8: 19:07:a8:6f:94:8e:eb:b3:70:fe:8e:bd:09:0c:ea: 17:d9:68:23:91:5a:f9:da:60:a4:99:dc:8f:76:82: f8:86:99:a8:90:a6:60:37:bd:9b:54:53:4a:3a:a1: 51:19:b4:40:ac:9f:66:87:c8:d8:4f:a1:91:c0:1b: 1a:2f:ff:f8:74:df:d9:47:15:09:e7:62:7f:70:04: 49:eb:33:46:30:3e:10:1f:d9:8a:f7:3b:0a:0d:85: 3d:c3:58:80:97:db:ca:cf:2e:12:98:b4:18:2c:31: b1:44:06:f8:fb:6c:67:01:79:d3:1b:0e:55:52:a6: 39:42:f2:38:34:30:9b:cc:8d:ae:6f:df:10:4c:94: 81:dd:ff:9b:a4:52:a0:e0:d4:c0:a9:65:60:a6:d1: 8e:e9:ee:74:a6:6c:16:80:9c:5a:8b:62:17:c1:12: 57:e6:04:74:ff:5b:c7:cd:68:e1:84:fa:f6:72:7b: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:44:42:AB:95:7B:8A:10:46:F3:04:45:AB:8C:F8:46:36:FB:81 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9b:78:ca:fc:20:d4:bb:c6:82:c6:2f:70:00:e9:d5:fb:7f: e9:77:31:a2:b3:b0:f0:e7:39:a2:e5:42:2b:1f:3d:81:9b:7c: 03:0d:cf:8c:91:46:84:a7:86:23:73:9b:4c:8b:cc:f9:6d:32: 07:f5:92:c7:07:f9:6c:7d:a4:5d:3e:87:4b:82:c0:23:ab:a7: f0:ee:5a:0c:d0:fb:2d:d2:f4:24:13:80:22:36:59:91:5f:77: 76:a8:a9:19:e4:f3:b5:38:48:ae:38:73:93:c0:75:10:6d:00: 5e:59:c6:29:00:16:76:3f:70:75:9b:a2:95:4a:9f:0d:14:a7: 6c:1d:bf:c2:d3:24:d4:72:7d:19:a6:20:aa:75:1e:58:65:e4: 47:ae:b0:16:5b:98:db:84:37:88:e5:ce:c8:3e:81:1c:da:7a: 7d:97:51:4d:a9:64:9d:a8:df:d7:a2:c0:fb:f1:00:37:75:43: 35:59:59:1e:e5:f5:b4:5d:b5:d9:49:9d:c5:0f:5b:c1:29:f9: 8d:e0:16:ea:1c:15:fe:7d:97:52:6a:79:cc:7b:81:87:b6:4a: 60:a0:09:75:1e:45:56:98:09:db:30:37:d2:fc:79:ed:3f:09: 8e:33:c6:e5:c0:2c:9c:74:7d:68:ea:de:23:97:4f:70:60:92: 34:09:a8:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUwNjE2MjA0NjI5WhcNMjUwNjIzMjA0NjI5WjAYMRYwFAYD VQQDEw02ODUwODJhNi1hNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8psg3JOaIjaOZ+rTIPHJf10fWkbWuRETGF/ieNCopXAWoiY7LBnnWMOv2I/N p4YH1z95ZAUFEubgdhajSlMMfV42SN41KMuyEsgZB6hvlI7rs3D+jr0JDOoX2Wgj kVr52mCkmdyPdoL4hpmokKZgN72bVFNKOqFRGbRArJ9mh8jYT6GRwBsaL//4dN/Z RxUJ52J/cARJ6zNGMD4QH9mK9zsKDYU9w1iAl9vKzy4SmLQYLDGxRAb4+2xnAXnT Gw5VUqY5QvI4NDCbzI2ub98QTJSB3f+bpFKg4NTAqWVgptGO6e50pmwWgJxai2IX wRJX5gR0/1vHzWjhhPr2cntuIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAfREKr lXuKEEbzBEWrjPhGNvuBMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOm3jK/CDUu8aCxi9wAOnV+3/pdzGis7Dw5zmi5UIrHz2Bm3wDDc+M kUaEp4Yjc5tMi8z5bTIH9ZLHB/lsfaRdPodLgsAjq6fw7loM0Pst0vQkE4AiNlmR X3d2qKkZ5PO1OEiuOHOTwHUQbQBeWcYpABZ2P3B1m6KVSp8NFKdsHb/C0yTUcn0Z piCqdR5YZeRHrrAWW5jbhDeI5c7IPoEc2np9l1FNqWSdqN/XosD78QA3dUM1WVke 5fW0XbXZSZ3FD1vBKfmN4BbqHBX+fZdSannMe4GHtkpgoAl1HkVWmAnbMDfS/Hnt PwmOM8blwCycdH1o6t4jl09wYJI0Cai/ -----END CERTIFICATE-----Generated at Wed Jun 18 06:41:45 2025 by rpki-client