$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: HHr4pFTg86snxPzpl7TPyWGDWZX1XcRgekc5LLXJ84g= Subject key identifier: DB:59:8A:91:24:B4:31:E7:D0:14:3C:76:BD:3A:55:7F:88:4D:3F:53 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 05C4 Signing time: Wed 18 Jun 2025 22:55:48 +0000 Manifest this update: Wed 18 Jun 2025 22:55:48 +0000 Manifest next update: Wed 25 Jun 2025 22:55:48 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: Ozj5CLyO5QDWBjNwduSc7UKIp6ObpfEEMwtf6LcFSJw=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Jun 18 22:55:48 2025 GMT Not After : Jun 25 22:55:48 2025 GMT Subject: CN=685343f4-5e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:76:d0:45:3d:65:9d:8c:eb:d4:c2:e8:73: 0c:31:2d:00:82:e9:0d:a3:f6:ef:5f:15:b4:da:94: 01:61:da:63:9f:aa:03:0a:ad:81:b7:be:91:4c:df: 9c:d2:34:3a:e7:f1:9d:e0:cc:b4:ee:ea:c3:c1:6f: 09:ca:b1:ab:0a:d2:33:a8:4a:b3:b1:4d:3d:07:4b: cb:a0:c8:32:34:20:59:fa:05:3c:78:b7:b2:f1:e6: 4e:f1:44:b3:c1:58:62:6f:ce:93:67:78:24:99:2f: c3:94:48:36:3a:6f:12:c7:9c:78:3b:8a:8f:c8:b5: fd:c8:8a:52:4d:f6:5d:fe:f3:d3:b5:fe:e0:7f:49: d2:3d:8a:cf:2a:78:c0:0b:a8:e7:55:2d:84:8c:69: 9d:e2:34:8e:62:14:96:b4:2e:28:33:4d:38:13:ba: 12:95:c3:bc:32:04:c2:27:02:81:a3:a3:83:2c:55: 8d:45:17:39:28:99:ec:ec:6b:ae:64:ea:f8:a2:b1: 6c:6c:8f:89:ac:e1:c9:af:50:71:46:3c:7c:42:82: 6f:9f:9c:1b:8b:7f:39:96:08:c8:a4:78:37:64:5e: 8d:e0:84:d9:ce:21:db:28:f1:b1:f6:e0:4f:af:98: f2:c7:7f:94:0e:08:d9:48:a5:58:a5:b0:81:a9:da: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:8A:91:24:B4:31:E7:D0:14:3C:76:BD:3A:55:7F:88:4D:3F:53 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:25:25:a3:bf:60:76:1d:4f:ff:b8:9c:46:98:4e:fb:fa:c0: 80:6e:a8:1d:1f:b5:df:c8:05:86:6b:5c:56:87:79:ad:b7:9e: 97:bd:34:a7:76:db:f3:3d:e3:b3:a8:27:b6:6a:63:5d:cd:0f: 60:a0:22:f6:03:19:39:61:69:3b:0a:63:01:53:00:b4:7e:8d: 24:81:64:d8:85:30:70:c0:b5:96:66:33:4d:46:cb:0e:f7:d0: 18:f9:c2:7d:27:71:87:77:d4:30:51:6a:3e:01:26:da:c4:1e: 17:51:0e:df:cd:01:38:c9:7c:07:0a:53:be:c2:fe:08:30:f3: eb:9a:a9:ce:da:11:10:65:a9:d7:6d:98:af:08:ea:e5:b6:73: fa:6e:db:9b:55:eb:b1:e6:99:4b:f1:8a:f2:2d:dc:b8:64:e9: fe:7d:0f:d5:cd:2c:33:f2:0c:66:29:8a:1f:6a:4a:a5:aa:84: 76:36:85:05:91:fb:bf:74:78:b1:5a:ee:50:19:6a:cb:1d:61: 61:75:f7:9e:b1:09:d0:5b:e3:1b:61:87:7a:41:28:89:35:74: e7:fd:d7:d4:b3:c7:32:d5:87:83:2a:f7:06:8b:2f:fc:9f:10: f9:2c:7d:88:0a:be:9d:f9:97:01:aa:b6:ea:44:87:d5:f1:28: f8:0d:73:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUwNjE4MjI1NTQ4WhcNMjUwNjI1MjI1NTQ4WjAYMRYwFAYD VQQDEw02ODUzNDNmNC01ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs520EU9ZZ2M69TC6HMMMS0AgukNo/bvXxW02pQBYdpjn6oDCq2Bt76RTN+c 0jQ65/Gd4My07urDwW8JyrGrCtIzqEqzsU09B0vLoMgyNCBZ+gU8eLey8eZO8USz wVhib86TZ3gkmS/DlEg2Om8Sx5x4O4qPyLX9yIpSTfZd/vPTtf7gf0nSPYrPKnjA C6jnVS2EjGmd4jSOYhSWtC4oM004E7oSlcO8MgTCJwKBo6ODLFWNRRc5KJns7Guu ZOr4orFsbI+JrOHJr1BxRjx8QoJvn5wbi385lgjIpHg3ZF6N4ITZziHbKPGx9uBP r5jyx3+UDgjZSKVYpbCBqdpXgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtZipEk tDHn0BQ8dr06VX+ITT9TMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JSWjv2B2HU//uJxGmE77+sCAbqgdH7XfyAWGa1xWh3mtt56XvTSn dtvzPeOzqCe2amNdzQ9goCL2Axk5YWk7CmMBUwC0fo0kgWTYhTBwwLWWZjNNRssO 99AY+cJ9J3GHd9QwUWo+ASbaxB4XUQ7fzQE4yXwHClO+wv4IMPPrmqnO2hEQZanX bZivCOrltnP6btubVeux5plL8YryLdy4ZOn+fQ/VzSwz8gxmKYofakqlqoR2NoUF kfu/dHixWu5QGWrLHWFhdfeesQnQW+MbYYd6QSiJNXTn/dfUs8cy1YeDKvcGiy/8 nxD5LH2ICr6d+ZcBqrbqRIfV8Sj4DXM8 -----END CERTIFICATE-----Generated at Fri Jun 20 16:42:28 2025 by rpki-client