$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: 1xjspZt2Wzbh2Jd0zCjAj8XKxgK4lY5BSBchot4WfKo= Subject key identifier: 15:15:BB:04:2B:6C:4B:2E:EB:6A:FB:27:C0:68:DA:70:82:3F:77:39 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02D5 Signing time: Tue 17 Jun 2025 00:57:25 +0000 Manifest this update: Tue 17 Jun 2025 00:57:24 +0000 Manifest next update: Tue 24 Jun 2025 00:57:24 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: cbujGIaT/LiYIKbNhmMpzfaCGVqFSRdBqpJr+ebfFeE=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Jun 17 00:57:24 2025 GMT Not After : Jun 24 00:57:24 2025 GMT Subject: CN=6850bd75-48f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:6f:f1:26:7e:d3:69:65:f6:02:7c:ff:db: 62:3c:a6:f8:24:5d:2f:ae:f8:6b:90:9b:40:e0:cc: 00:32:a3:32:b5:04:03:a7:d7:d1:d0:a2:b6:0c:ee: e8:37:11:25:55:09:3e:09:5a:f5:59:40:75:df:25: 47:cf:0a:42:05:34:18:4d:bf:1f:52:73:74:15:0c: 35:34:48:40:29:29:1e:6c:6f:28:80:0c:53:2c:42: fb:5a:5d:21:a0:d1:1c:b8:74:b7:97:e0:31:9b:09: e0:07:36:bf:bd:fe:b2:e9:c2:c6:59:e6:76:c9:aa: fb:e7:fb:05:e8:e9:40:7e:39:07:2a:5a:37:fd:e8: cd:06:8e:36:ae:b3:53:0a:09:e2:5b:a2:8b:b6:75: 2a:f9:67:4c:82:66:6c:c4:28:33:d8:0f:54:d7:3b: bc:6a:6c:d7:62:88:e7:b7:9c:65:b1:59:82:b8:bc: 75:38:17:c4:c9:83:ff:4f:13:ce:57:f1:00:f1:98: 0c:43:ab:09:e1:8f:ea:c9:a8:0e:e5:be:83:ef:00: 93:f3:52:d4:f6:86:7d:0f:24:e4:4a:b6:dc:87:70: 0d:5b:01:31:73:80:95:a4:75:1a:23:89:7c:5b:b0: c7:47:c3:ec:9e:80:71:b7:e3:15:3a:cf:9a:db:56: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:15:BB:04:2B:6C:4B:2E:EB:6A:FB:27:C0:68:DA:70:82:3F:77:39 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5b:5b:8e:d9:56:4e:c0:d4:1d:c6:cd:b5:cf:ba:ff:87:39: 5f:97:ea:7d:1e:b5:23:9d:ba:4b:18:ec:6c:d0:9e:1c:2a:db: 00:bb:a6:67:f6:a6:53:98:d7:57:cb:cc:36:c1:b2:57:e1:d4: 34:ab:1c:58:fb:45:2e:44:51:cb:35:8d:15:8e:28:d9:b2:38: c0:43:c2:16:43:d5:62:21:5f:75:77:f6:51:78:66:19:de:a2: 2f:a2:a1:4f:59:22:b0:ea:76:48:89:66:99:05:b3:7e:ae:fa: 2c:d4:c8:76:45:71:20:be:5e:60:58:73:70:cf:8c:ec:4c:70: 6d:50:b9:a1:d7:9c:17:29:ae:92:46:02:83:72:c4:dd:0e:dd: 85:4e:b4:df:4f:fc:49:02:26:23:16:66:be:48:fa:28:6b:d7: 84:19:f2:ea:06:b3:36:ec:a7:97:b4:65:f3:87:9c:89:4b:73: 96:d0:71:2e:dd:20:65:e3:54:71:85:1a:ff:35:6f:09:f5:40: 3c:71:39:be:5b:24:36:de:47:13:c5:cf:42:c5:04:b8:72:14: c9:48:a0:9f:e7:3f:e9:a9:ce:09:f8:ec:d0:0c:c9:7b:b2:90: 0b:77:a9:1a:d0:cd:24:d6:32:a3:80:b0:4d:95:d1:0d:1f:12: a0:0b:96:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwNjE3MDA1NzI0WhcNMjUwNjI0MDA1NzI0WjAYMRYwFAYD VQQDEw02ODUwYmQ3NS00OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHtv8SZ+02ll9gJ8/9tiPKb4JF0vrvhrkJtA4MwAMqMytQQDp9fR0KK2DO7o NxElVQk+CVr1WUB13yVHzwpCBTQYTb8fUnN0FQw1NEhAKSkebG8ogAxTLEL7Wl0h oNEcuHS3l+AxmwngBza/vf6y6cLGWeZ2yar75/sF6OlAfjkHKlo3/ejNBo42rrNT CgniW6KLtnUq+WdMgmZsxCgz2A9U1zu8amzXYojnt5xlsVmCuLx1OBfEyYP/TxPO V/EA8ZgMQ6sJ4Y/qyagO5b6D7wCT81LU9oZ9DyTkSrbch3ANWwExc4CVpHUaI4l8 W7DHR8PsnoBxt+MVOs+a21bejQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUVuwQr bEsu62r7J8Bo2nCCP3c5MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQW1uO2VZOwNQdxs21z7r/hzlfl+p9HrUjnbpLGOxs0J4cKtsAu6Zn 9qZTmNdXy8w2wbJX4dQ0qxxY+0UuRFHLNY0VjijZsjjAQ8IWQ9ViIV91d/ZReGYZ 3qIvoqFPWSKw6nZIiWaZBbN+rvos1Mh2RXEgvl5gWHNwz4zsTHBtULmh15wXKa6S RgKDcsTdDt2FTrTfT/xJAiYjFma+SPooa9eEGfLqBrM27KeXtGXzh5yJS3OW0HEu 3SBl41RxhRr/NW8J9UA8cTm+WyQ23kcTxc9CxQS4chTJSKCf5z/pqc4J+OzQDMl7 spALd6ka0M0k1jKjgLBNldENHxKgC5Yt -----END CERTIFICATE-----Generated at Tue Jun 17 17:00:26 2025 by rpki-client