$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: biOiqhwsSIQY58r/cHp1K6WntSRMp63TqIX+B5FFrvQ= Subject key identifier: 51:2C:06:6E:78:44:A1:5C:7F:83:89:F1:4C:FF:ED:F8:9F:7C:21:7B Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: 64 Signing time: Fri 13 Jun 2025 05:57:21 +0000 Manifest this update: Fri 13 Jun 2025 05:57:21 +0000 Manifest next update: Fri 20 Jun 2025 05:57:21 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: Y9lx2GrQq6tHDXnoLD5XK40y9HNy7GR8KZrvMt/NVdY=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: pawwhpt8xl4Jm5tUlNLFvNNRwT1g8ks5JKIz2Wod4KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Jun 13 05:57:21 2025 GMT Not After : Jun 20 05:57:21 2025 GMT Subject: CN=684bbdc1-8017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:5e:3a:c8:0a:98:c1:f5:56:66:82:2e:b4: bc:e1:51:b5:31:7a:cc:12:0a:60:fa:35:6f:4a:c0: 74:f9:aa:bb:5f:2e:a0:36:96:d3:15:96:7f:64:40: 15:4f:fb:65:37:65:1b:d6:b7:2e:28:c2:f0:0b:81: 0a:1d:13:d3:a8:9a:13:5a:73:3d:e4:4b:ad:45:6d: 25:13:fa:28:04:e9:78:d0:b0:b6:57:30:c7:b2:73: d3:6f:52:14:45:31:c6:dc:71:41:03:80:ef:7f:09: 4f:bc:56:ea:98:30:1a:2e:f4:f5:70:34:2c:eb:f5: 19:f2:d6:82:13:9e:77:80:2b:73:ef:0c:c8:d3:ce: 95:4a:88:f3:ab:27:87:95:c7:72:d3:e7:72:67:e5: 40:2e:b7:b8:ca:62:55:0e:87:c4:cf:a5:53:09:c2: b4:78:cc:61:30:db:1a:02:3d:82:9f:26:c6:3d:96: 78:20:e3:e6:ed:15:64:66:ff:a2:15:40:a5:a9:ad: 75:2f:ee:af:c6:c7:95:42:0f:8f:b6:c2:d1:e7:c6: 10:39:f4:6d:53:85:ae:bb:f5:b7:a9:0d:22:08:b7: ff:15:57:84:34:ba:57:b0:b3:f2:e8:3e:33:c5:b7: c6:c0:ba:25:9d:72:c9:35:0d:f4:d4:09:96:b7:8f: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:06:6E:78:44:A1:5C:7F:83:89:F1:4C:FF:ED:F8:9F:7C:21:7B X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:72:77:f4:f8:af:5c:4f:f8:55:53:bb:33:cc:88:92:40:b4: ec:84:f5:3e:77:f1:99:66:78:d5:02:bf:07:8d:9b:fd:11:7d: fa:4f:4e:f8:f2:02:65:05:76:71:0f:a9:57:c4:71:cf:7b:a3: 9a:be:e8:61:b9:91:d8:26:81:6a:66:f0:fd:35:cd:2b:ef:c4: 78:31:f2:c1:a5:87:ff:84:1b:a8:c1:52:d6:1c:76:69:92:11: 16:ed:c5:e6:68:cf:3a:8c:54:d7:0f:a8:0c:c2:0c:3f:09:da: 31:59:b3:1f:ce:9c:80:df:3c:0c:2c:1f:20:8b:33:0a:7a:e7: 64:d0:b5:68:c3:7d:b9:82:d2:65:c8:9a:f2:88:16:b9:bd:c2: da:4e:ed:32:35:c0:c7:b8:72:10:e7:3a:33:51:6c:48:5c:e2: c5:e2:e3:ff:15:ca:dd:7a:8c:88:fe:5c:a5:d1:d8:ff:04:9f: 85:d6:ed:81:58:1b:6a:54:36:94:08:e7:ac:d5:27:e5:2a:37: 56:c8:cd:78:1a:69:de:b4:6f:3b:a7:6c:84:64:80:7c:8c:f5: 9a:b4:0c:a7:ab:a4:5d:c7:be:cc:f9:48:e0:ad:ec:78:4c:4f: 2c:fe:e8:fa:e0:79:5c:f4:0f:fa:8f:3a:bb:7e:c2:c3:4d:f7: ff:97:a7:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoQjREMjE3OTM5QTI3NTE5MzhFMDc2NTlBNzk0ODg1QTlD ODg0MTkxOTAeFw0yNTA2MTMwNTU3MjFaFw0yNTA2MjAwNTU3MjFaMBgxFjAUBgNV BAMTDTY4NGJiZGMxLTgwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/v146yAqYwfVWZoIutLzhUbUxeswSCmD6NW9KwHT5qrtfLqA2ltMVln9kQBVP +2U3ZRvWty4owvALgQodE9OomhNacz3kS61FbSUT+igE6XjQsLZXMMeyc9NvUhRF McbccUEDgO9/CU+8VuqYMBou9PVwNCzr9Rny1oITnneAK3PvDMjTzpVKiPOrJ4eV x3LT53Jn5UAut7jKYlUOh8TPpVMJwrR4zGEw2xoCPYKfJsY9lngg4+btFWRm/6IV QKWprXUv7q/Gx5VCD4+2wtHnxhA59G1Tha679bepDSIIt/8VV4Q0ulews/LoPjPF t8bAuiWdcsk1DfTUCZa3j7h9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUSwGbnhE oVx/g4nxTP/t+J98IXswHwYDVR0jBBgwFoAUtNIXk5onUZOOB2WaeUiFqciEGRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzUwQkQyMzBFQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdS ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE5JWGs1b25VWk9PQjJXYWVVaUZxY2lFR1JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzUwQkQyMzBFQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyL3ROSVhrNW9uVVpP T0IyV2FlVWlGcWNpRUdSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5yd/T4r1xP+FVTuzPMiJJAtOyE9T538ZlmeNUCvweNm/0RffpPTvjy AmUFdnEPqVfEcc97o5q+6GG5kdgmgWpm8P01zSvvxHgx8sGlh/+EG6jBUtYcdmmS ERbtxeZozzqMVNcPqAzCDD8J2jFZsx/OnIDfPAwsHyCLMwp652TQtWjDfbmC0mXI mvKIFrm9wtpO7TI1wMe4chDnOjNRbEhc4sXi4/8Vyt16jIj+XKXR2P8En4XW7YFY G2pUNpQI56zVJ+UqN1bIzXgaad60bzunbIRkgHyM9Zq0DKerpF3Hvsz5SOCt7HhM Tyz+6PrgeVz0D/qPOrt+wsNN9/+Xp5w= -----END CERTIFICATE-----Generated at Sat Jun 14 18:02:38 2025 by rpki-client