$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: rXUAo77rQq/fYFTpcRWWZpRwfjgrw4klOloOeMEs8KI= Subject key identifier: 27:57:0A:FC:32:DE:D9:71:52:8E:7D:82:B3:35:32:F6:6B:C6:97:BE Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 0950 Signing time: Sat 14 Jun 2025 20:02:41 +0000 Manifest this update: Sat 14 Jun 2025 20:02:41 +0000 Manifest next update: Sat 21 Jun 2025 20:02:41 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: XE4249zbnFJ7Irj267zpKxPnitAZGVAYuvKM1nDhAlQ=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: tZaPoTXH9PYuZmi5WQPi/UkCOHiXWsrwkIuE69EcCaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Jun 14 20:02:41 2025 GMT Not After : Jun 21 20:02:41 2025 GMT Subject: CN=684dd561-3de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:8b:55:c9:78:b0:08:96:93:16:72:df:d7: e7:21:94:08:e1:53:1b:49:db:e6:e9:85:25:bb:00: a3:62:61:5d:c5:bf:11:f6:fe:b8:8b:f9:ec:82:b1: 6b:be:f6:86:15:1a:e9:b9:f0:8a:48:cb:30:a4:95: af:fc:32:82:63:b5:a8:c5:3f:10:86:dd:5d:a4:e7: ea:df:70:97:6e:6e:6c:cf:1f:27:04:a6:3f:a0:1c: e7:b5:60:10:da:b2:4e:ab:3d:87:a8:56:60:de:41: 81:b3:bd:7a:a6:d0:64:32:f7:b9:0d:12:9c:92:5a: 6f:ea:f6:ed:20:c1:a7:8f:ca:c8:c0:a2:95:78:be: f7:37:0f:2e:34:85:16:43:b5:58:f5:14:10:41:e7: 1e:22:21:89:45:41:3a:f0:d3:11:98:49:11:b3:23: e0:c3:a8:8f:01:c4:c3:d8:65:24:04:a2:a5:70:f9: 96:ac:51:17:6c:d9:e6:f8:c7:56:8f:94:0d:35:ec: c9:c8:e3:b1:fd:ad:7c:2a:f7:59:44:c4:6e:1d:85: 9a:93:22:dc:0f:ca:df:a9:43:d6:c9:78:04:f0:ef: c3:cb:af:54:b8:88:23:a1:b9:f1:4e:d1:6f:ec:57: 61:f3:e4:54:a3:d1:31:5a:17:38:3c:9c:b1:a6:f8: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:57:0A:FC:32:DE:D9:71:52:8E:7D:82:B3:35:32:F6:6B:C6:97:BE X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0e:4b:98:20:73:11:da:73:ce:45:a9:03:ff:a5:03:4a:53: b2:3d:ef:2f:39:34:28:31:5f:06:67:f1:03:52:6b:3b:e7:d9: b0:85:f9:e7:4b:53:25:bb:f1:0b:cb:04:e0:c7:d7:7b:83:d4: 54:05:99:35:29:b4:39:cf:2e:1e:e2:03:bc:29:3d:85:93:e6: 1d:4f:c3:43:4f:db:ae:5d:66:c1:c1:fb:43:6b:76:45:52:f2: 65:20:b5:d1:7d:ca:e0:71:6a:3d:fc:71:36:77:d7:e2:1b:a6: 78:75:0e:c1:81:82:0f:df:a2:a7:41:d1:cc:4b:6b:16:a5:25: bf:56:0a:b5:30:6e:e6:c7:6e:62:4d:1c:5f:8c:c1:8a:20:f4: 84:0f:85:e4:cc:cf:90:3c:ba:60:60:ac:15:5a:2e:f0:b8:57: cc:18:e8:7e:ae:9a:86:6f:ce:70:f9:4c:77:17:45:7a:5f:7c: 66:53:d1:0f:53:e4:cb:d6:7c:57:bd:da:88:c3:b9:d6:cb:2a: e0:97:67:bc:83:e8:03:29:f0:e5:24:a6:6c:56:eb:bf:8f:c3: c7:77:fe:31:73:97:ea:94:0b:18:69:91:14:e4:5a:05:27:d9: 31:55:61:a5:ed:94:d3:ae:2d:3b:90:f8:29:be:d1:2b:8e:56: 25:c6:8e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjUwNjE0MjAwMjQxWhcNMjUwNjIxMjAwMjQxWjAYMRYwFAYD VQQDEw02ODRkZDU2MS0zZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwm+LVcl4sAiWkxZy39fnIZQI4VMbSdvm6YUluwCjYmFdxb8R9v64i/nsgrFr vvaGFRrpufCKSMswpJWv/DKCY7WoxT8Qht1dpOfq33CXbm5szx8nBKY/oBzntWAQ 2rJOqz2HqFZg3kGBs716ptBkMve5DRKcklpv6vbtIMGnj8rIwKKVeL73Nw8uNIUW Q7VY9RQQQeceIiGJRUE68NMRmEkRsyPgw6iPAcTD2GUkBKKlcPmWrFEXbNnm+MdW j5QNNezJyOOx/a18KvdZRMRuHYWakyLcD8rfqUPWyXgE8O/Dy69UuIgjobnxTtFv 7Fdh8+RUo9ExWhc4PJyxpvimdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdXCvwy 3tlxUo59grM1MvZrxpe+MB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeDkuYIHMR2nPORakD/6UDSlOyPe8vOTQoMV8GZ/EDUms759mwhfnn S1Mlu/ELywTgx9d7g9RUBZk1KbQ5zy4e4gO8KT2Fk+YdT8NDT9uuXWbBwftDa3ZF UvJlILXRfcrgcWo9/HE2d9fiG6Z4dQ7BgYIP36KnQdHMS2sWpSW/Vgq1MG7mx25i TRxfjMGKIPSED4XkzM+QPLpgYKwVWi7wuFfMGOh+rpqGb85w+Ux3F0V6X3xmU9EP U+TL1nxXvdqIw7nWyyrgl2e8g+gDKfDlJKZsVuu/j8PHd/4xc5fqlAsYaZEU5FoF J9kxVWGl7ZTTri07kPgpvtErjlYlxo4M -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:49 2025 by rpki-client