$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: YjB7gBXUsx1F/ywTb21C75nK1XnGEXLjkHzSi1lX/E8= Subject key identifier: 72:C1:65:9B:97:20:E9:81:06:19:1F:E6:98:04:FF:45:80:96:72:6D Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 0155 Signing time: Thu 19 Jun 2025 03:31:57 +0000 Manifest this update: Thu 19 Jun 2025 03:31:56 +0000 Manifest next update: Thu 26 Jun 2025 03:31:56 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: xAy4UHFxpsv7yxothzHGrZ1GTuiDA5g8VQ9l0Uc+KQc=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: RP6wVW/OcAubd0XMOITxdOYRXk34RJNOj+5wyZuhGYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: Jun 19 03:31:56 2025 GMT Not After : Jun 26 03:31:56 2025 GMT Subject: CN=685384ac-d39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:2d:2f:bf:d0:df:75:93:38:fc:a4:75:55: 02:eb:63:82:0e:51:b7:0f:6a:be:8e:d9:79:d3:3d: d7:95:73:75:56:26:6a:5d:c6:ea:34:f2:27:f2:35: 93:be:95:91:48:4c:ce:da:11:cf:f0:aa:cf:27:d1: 3a:d4:9c:82:16:43:3c:b3:da:ef:9c:82:68:5d:97: 35:0a:63:1b:fe:04:34:00:ee:f1:a8:6a:da:d8:0c: 5c:ba:b1:7b:bb:67:39:ea:3d:21:ba:d9:cd:35:d0: 64:a0:1f:fe:52:ce:17:3e:66:76:16:f5:9c:a4:6b: 4f:80:91:c1:4d:83:12:79:38:0f:83:09:b3:17:6e: 96:58:e4:fb:68:b3:67:de:11:40:2a:31:1d:ca:65: fd:22:e1:5c:42:79:5e:95:d4:c8:f5:e1:29:4a:68: 7d:8b:06:15:03:b5:1e:c4:ee:d9:2c:1b:46:07:ff: 92:45:c3:72:9b:a1:36:a6:9f:95:bd:31:a0:cc:74: 59:67:c5:37:f9:cb:87:bf:d0:7d:ab:d1:4c:99:85: 81:8b:cf:8b:5e:e6:e0:86:0b:7a:6c:d9:63:a4:1c: c2:a3:dc:d9:1b:04:76:14:c3:c1:ff:45:6f:b9:cd: a5:b3:59:86:57:61:ca:23:55:25:24:f1:f4:f7:ce: 93:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C1:65:9B:97:20:E9:81:06:19:1F:E6:98:04:FF:45:80:96:72:6D X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:0e:79:01:58:80:e5:cf:c0:8f:7d:4f:ad:36:b4:95:e4:c4: 3b:25:28:88:09:97:c0:ae:d3:e0:6b:b9:42:d9:50:8e:2f:28: bf:a3:3b:47:12:f1:dc:b4:f8:da:ad:3d:a7:ff:86:bd:db:4a: d3:cb:f8:63:8d:2b:b2:95:ea:5f:08:48:ab:d5:de:7d:50:36: bc:e0:1f:d3:6c:9e:1b:d9:00:f8:40:f2:a7:d3:7c:49:1b:08: 8d:40:9c:a7:58:d2:a3:64:87:6a:04:bd:00:03:24:96:3e:a7: 9d:70:1c:d5:23:7a:23:5c:a8:6f:72:dc:c4:0a:99:89:b2:21: f5:db:ba:12:1f:ce:4a:79:c7:29:fc:ce:ff:ce:9c:d5:b9:16: 45:db:15:7d:47:90:55:78:91:8d:4e:ac:9b:22:a6:cd:78:41: fb:46:a1:71:07:1e:4b:6f:b3:8c:94:4d:ab:f6:af:b3:47:ba: f5:58:0a:8c:69:64:57:70:2b:49:af:61:30:4e:1c:f7:00:73: 11:a6:04:b8:64:63:47:f8:a7:98:05:50:60:f3:37:79:ec:bc: 3c:23:24:45:86:fe:b3:d5:3d:bd:3f:f9:0c:e0:1a:c5:02:01: 5c:89:ef:78:c8:b9:22:be:b1:69:7e:26:02:e5:b8:64:66:7b: 1e:88:83:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUwNjE5MDMzMTU2WhcNMjUwNjI2MDMzMTU2WjAYMRYwFAYD VQQDEw02ODUzODRhYy1kMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuegtL7/Q33WTOPykdVUC62OCDlG3D2q+jtl50z3XlXN1ViZqXcbqNPIn8jWT vpWRSEzO2hHP8KrPJ9E61JyCFkM8s9rvnIJoXZc1CmMb/gQ0AO7xqGra2AxcurF7 u2c56j0hutnNNdBkoB/+Us4XPmZ2FvWcpGtPgJHBTYMSeTgPgwmzF26WWOT7aLNn 3hFAKjEdymX9IuFcQnleldTI9eEpSmh9iwYVA7UexO7ZLBtGB/+SRcNym6E2pp+V vTGgzHRZZ8U3+cuHv9B9q9FMmYWBi8+LXubghgt6bNljpBzCo9zZGwR2FMPB/0Vv uc2ls1mGV2HKI1UlJPH0986TYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLBZZuX IOmBBhkf5pgE/0WAlnJtMB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKDnkBWIDlz8CPfU+tNrSV5MQ7JSiICZfArtPga7lC2VCOLyi/oztH EvHctPjarT2n/4a920rTy/hjjSuylepfCEir1d59UDa84B/TbJ4b2QD4QPKn03xJ GwiNQJynWNKjZIdqBL0AAySWPqedcBzVI3ojXKhvctzECpmJsiH127oSH85Keccp /M7/zpzVuRZF2xV9R5BVeJGNTqybIqbNeEH7RqFxBx5Lb7OMlE2r9q+zR7r1WAqM aWRXcCtJr2EwThz3AHMRpgS4ZGNH+KeYBVBg8zd57Lw8IyRFhv6z1T29P/kM4BrF AgFcie94yLkivrFpfiYC5bhkZnseiIPI -----END CERTIFICATE-----Generated at Thu Jun 19 15:02:25 2025 by rpki-client