$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: rynP1rfXZKH5/Y47Gl1hWlKQbFLgwzjlZrZpBqO6Kys= Subject key identifier: 97:79:8D:58:EA:80:39:19:63:78:20:BB:7C:4E:DD:D6:F6:B5:5D:95 Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 2D Signing time: Thu 19 Jun 2025 07:07:20 +0000 Manifest this update: Thu 19 Jun 2025 07:07:19 +0000 Manifest next update: Thu 26 Jun 2025 07:07:19 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: 6YFMHqRbCVdCN9jVSoxpmj8VlA5xSWRItmoS7RnvDV4=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Jun 19 07:07:19 2025 GMT Not After : Jun 26 07:07:19 2025 GMT Subject: CN=6853b727-dd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ad:c2:64:e1:c1:f6:60:9b:de:23:19:be:db: d5:50:1e:24:83:c9:fb:e7:22:91:a7:9d:51:03:77: 79:62:8d:f1:bf:05:89:3e:68:50:5b:47:5f:ec:02: a5:03:49:b7:fc:3e:83:f8:bb:c6:8b:23:57:09:d5: ae:f1:78:06:a1:f2:f2:12:7a:3f:ca:1c:f7:af:1e: 5e:8f:36:08:fb:d0:b0:16:7e:db:68:01:d3:40:a9: f9:57:68:8a:11:1b:c2:ff:71:28:97:7c:9c:35:9d: 1d:f0:19:bb:5c:d0:ac:40:9a:12:9a:a1:bf:b4:49: ca:72:34:0b:6a:a7:f6:cb:9b:4a:0a:fc:03:a0:fc: 49:21:46:18:41:7d:16:cd:6c:30:85:7d:7e:4b:2a: 75:f7:9b:19:11:fc:90:e6:a1:8b:6c:94:cb:69:e4: ee:8d:bc:d5:90:ee:66:8e:c1:8f:07:ac:3a:73:cd: b6:d3:9e:7e:f4:c7:dd:6f:ef:a6:ec:04:51:79:55: 19:1c:5c:8b:9d:65:51:78:29:77:37:97:ff:ce:37: f6:d7:a6:38:00:0d:70:a5:a6:2e:18:4a:06:f8:30: 77:9c:e8:6d:6b:7f:70:0e:91:24:6b:ed:f5:e7:fc: 55:d9:ca:c6:ef:c0:35:89:ba:14:cc:85:ef:30:d8: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:79:8D:58:EA:80:39:19:63:78:20:BB:7C:4E:DD:D6:F6:B5:5D:95 X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:77:d9:56:4c:1b:48:d4:c2:be:40:e3:8a:50:3a:63:9f:c8: 6d:af:4e:39:e4:9a:62:05:4e:d2:20:bb:a5:fb:78:ec:82:c1: 16:bd:61:01:db:99:c4:1e:48:63:7f:16:68:a0:d6:f4:05:0c: 78:5b:78:05:d2:b9:f4:4c:bc:b4:0c:37:1b:d8:09:3c:3a:3b: e8:bf:8e:29:df:2a:9a:32:cf:9e:c7:58:04:f3:a1:45:b6:d4: 8d:4b:dd:c9:3f:9e:d3:c4:e4:da:e3:34:8c:3a:ee:f1:d8:0d: 8c:5b:9f:ae:cd:ac:b6:fe:9e:cc:3e:a1:be:e6:59:f5:ba:ff: 53:3d:1d:2c:44:6b:1c:24:a9:c0:cb:ee:e5:0e:e2:d1:fc:80: 6d:e1:ab:e8:fe:a9:ea:f8:d4:05:47:04:ff:3b:b4:81:f4:f7: 65:a5:63:14:6d:af:13:dd:15:ba:44:b8:48:66:4c:a1:9a:cd: 69:aa:2c:18:b1:a7:6b:f7:d6:49:1e:58:cb:6c:39:cf:dc:90: d4:41:d6:2e:af:4a:5c:92:59:f2:27:b6:53:5d:01:cc:cb:b8: 75:d1:1c:2e:b5:d7:1f:1e:05:4c:72:f6:e8:5b:95:f1:8d:a8: f5:67:d5:bb:af:e8:75:60:37:f4:c4:e8:2d:28:f2:9d:b7:8b: 69:91:84:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTA2MTkwNzA3MTlaFw0yNTA2MjYwNzA3MTlaMBgxFjAUBgNV BAMTDTY4NTNiNzI3LWRkMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1rcJk4cH2YJveIxm+29VQHiSDyfvnIpGnnVEDd3lijfG/BYk+aFBbR1/sAqUD Sbf8PoP4u8aLI1cJ1a7xeAah8vISej/KHPevHl6PNgj70LAWfttoAdNAqflXaIoR G8L/cSiXfJw1nR3wGbtc0KxAmhKaob+0ScpyNAtqp/bLm0oK/AOg/EkhRhhBfRbN bDCFfX5LKnX3mxkR/JDmoYtslMtp5O6NvNWQ7maOwY8HrDpzzbbTnn70x91v76bs BFF5VRkcXIudZVF4KXc3l//ON/bXpjgADXClpi4YSgb4MHec6G1rf3AOkSRr7fXn /FXZysbvwDWJuhTMhe8w2DGHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl3mNWOqA ORljeCC7fE7d1va1XZUwHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKR32VZMG0jUwr5A44pQOmOfyG2vTjnkmmIFTtIgu6X7eOyCwRa9YQHb mcQeSGN/Fmig1vQFDHhbeAXSufRMvLQMNxvYCTw6O+i/jinfKpoyz57HWATzoUW2 1I1L3ck/ntPE5NrjNIw67vHYDYxbn67NrLb+nsw+ob7mWfW6/1M9HSxEaxwkqcDL 7uUO4tH8gG3hq+j+qer41AVHBP87tIH092WlYxRtrxPdFbpEuEhmTKGazWmqLBix p2v31kkeWMtsOc/ckNRB1i6vSlySWfIntlNdAczLuHXRHC611x8eBUxy9uhblfGN qPVn1buv6HVgN/TE6C0o8p23i2mRhNo= -----END CERTIFICATE-----Generated at Fri Jun 20 11:07:23 2025 by rpki-client