$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft File: TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json) Hash identifier: +KfDu7LzND8DaDNCZzqjur4DEeECIwG+pvAj+7syc4M= Subject key identifier: EC:88:40:DA:52:18:60:85:B0:D1:02:73:DA:26:3E:68:6B:B6:2C:C2 Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 Certificate issuer: /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft Manifest number: 7C Signing time: Thu 19 Jun 2025 06:02:56 +0000 Manifest this update: Thu 19 Jun 2025 06:02:55 +0000 Manifest next update: Thu 26 Jun 2025 06:02:55 +0000 Files and hashes: 1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: QsSduLCavz49lq4BJXCf93+F2PGBgGdhUJUk8O1JfOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Validity Not Before: Jun 19 06:02:55 2025 GMT Not After : Jun 26 06:02:55 2025 GMT Subject: CN=6853a80f-c0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:46:c7:fd:c2:9d:18:2a:c4:3a:cd:61:5c: ad:43:12:0b:65:4d:2c:c8:25:4b:d9:02:77:2b:6e: 64:99:77:8c:0c:99:1b:26:3b:91:69:ed:01:2b:38: 34:ca:12:5b:a7:bb:5e:08:fe:c9:e1:91:21:fc:d6: 19:2d:1d:7b:9e:98:4f:6c:d7:36:03:29:5e:c8:2b: 54:a9:84:e5:06:a0:58:4b:8b:e4:72:3c:37:34:39: d5:63:35:d2:d9:d5:f9:db:4e:9c:db:9a:d7:25:9c: a6:d9:70:bc:6c:94:d5:03:00:2c:4f:40:88:24:13: f7:41:b3:a8:5b:31:8c:75:c3:f9:de:cf:87:90:d5: 5a:2f:b6:e2:b1:51:d9:c9:9b:fb:79:29:ca:7b:00: 51:d8:3b:aa:34:6c:35:5e:ec:19:e6:49:79:85:cf: fc:22:fa:8f:51:d4:37:d1:f4:82:6e:c0:c4:0b:ed: b5:71:d9:c2:04:e0:3c:4f:9d:fa:cc:f0:20:12:f1: 61:6e:0f:07:a9:98:9f:e4:10:a3:43:20:84:27:27: e5:eb:65:7d:cb:a9:02:8d:32:84:55:88:00:04:91: 51:19:07:51:da:c6:a9:58:64:37:e4:be:bb:b3:a1: ad:25:df:26:cd:b0:8d:6e:77:e5:c9:ea:b0:19:6c: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:88:40:DA:52:18:60:85:B0:D1:02:73:DA:26:3E:68:6B:B6:2C:C2 X509v3 Authority Key Identifier: keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e5:d7:30:6b:36:45:6c:1f:76:5b:64:a0:10:50:7d:52:6f: 27:ec:d5:b6:78:1f:3b:eb:59:28:ac:b9:ef:d7:98:9a:4c:d3: fe:98:37:7f:52:c7:bc:3b:d9:ca:c3:78:b8:7b:e8:a1:c9:7e: 3f:ff:63:0f:d0:6c:a4:31:9c:9a:27:48:b2:94:6e:6d:c2:12: 46:65:46:8a:c5:0a:43:4e:84:05:db:84:85:9d:f1:1e:40:f0: 4d:bc:1c:43:f1:c5:4d:72:88:05:dd:52:1a:6d:bb:97:33:cb: 46:1b:71:f2:5e:78:2b:1d:93:44:3d:78:a7:3b:9e:a5:ef:be: c6:51:34:bd:2a:c9:6b:1a:60:22:26:ff:1e:8c:7d:3f:f4:f7: e2:4b:f7:11:3b:9e:8c:39:0a:6d:53:78:0d:62:0d:d0:4f:cf: a0:08:8e:5e:30:0f:1c:43:9d:ec:0a:25:e2:60:81:be:fa:c3: e6:af:5b:79:8f:5c:da:be:db:aa:c3:9d:91:21:eb:51:e6:ce: 84:1f:9a:6c:e3:ea:84:5b:4a:41:5a:37:44:02:a5:21:62:f5: fd:da:a6:2a:e8:3e:99:2d:29:d2:8f:af:14:4f:b4:e2:49:1e: e4:16:05:43:82:d1:4c:96:07:65:cb:2e:7a:ef:bd:fe:13:87: fd:74:96:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoNEYxODI3M0Q4ODU1NkUzQTFENkVEODE3OEI4MDk1MjhE OTkwQTY5MTAeFw0yNTA2MTkwNjAyNTVaFw0yNTA2MjYwNjAyNTVaMBgxFjAUBgNV BAMTDTY4NTNhODBmLWMwZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJgUbH/cKdGCrEOs1hXK1DEgtlTSzIJUvZAncrbmSZd4wMmRsmO5Fp7QErODTK Elunu14I/snhkSH81hktHXuemE9s1zYDKV7IK1SphOUGoFhLi+RyPDc0OdVjNdLZ 1fnbTpzbmtclnKbZcLxslNUDACxPQIgkE/dBs6hbMYx1w/nez4eQ1VovtuKxUdnJ m/t5Kcp7AFHYO6o0bDVe7BnmSXmFz/wi+o9R1DfR9IJuwMQL7bVx2cIE4DxPnfrM 8CAS8WFuDwepmJ/kEKNDIIQnJ+XrZX3LqQKNMoRViAAEkVEZB1HaxqlYZDfkvruz oa0l3ybNsI1ud+XJ6rAZbApVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7IhA2lIY YIWw0QJz2iY+aGu2LMIwHwYDVR0jBBgwFoAUTxgnPYhVbjodbtgXi4CVKNmQppEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzE1NDc1RDg2OEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHhnblBZaFZiam9kYnRnWGk0Q1ZLTm1RcHBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzE1NDc1RDg2OEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpv ZGJ0Z1hpNENWS05tUXBwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfl1zBrNkVsH3ZbZKAQUH1Sbyfs1bZ4HzvrWSisue/XmJpM0/6YN39S x7w72crDeLh76KHJfj//Yw/QbKQxnJonSLKUbm3CEkZlRorFCkNOhAXbhIWd8R5A 8E28HEPxxU1yiAXdUhptu5czy0YbcfJeeCsdk0Q9eKc7nqXvvsZRNL0qyWsaYCIm /x6MfT/09+JL9xE7now5Cm1TeA1iDdBPz6AIjl4wDxxDnewKJeJggb76w+avW3mP XNq+26rDnZEh61HmzoQfmmzj6oRbSkFaN0QCpSFi9f3apiroPpktKdKPrxRPtOJJ HuQWBUOC0UyWB2XLLnrvvf4Th/10liU= -----END CERTIFICATE-----Generated at Fri Jun 20 02:38:43 2025 by rpki-client