$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft File: tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json) Hash identifier: UF8hntbzEO/nCN+plY531nGFTlYlrZRmvLRMB80UfSk= Subject key identifier: FE:67:1C:2C:4F:B7:3E:1B:92:71:E8:57:E4:22:31:4A:DC:AD:17:EB Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft Manifest number: 16 Signing time: Thu 19 Jun 2025 07:20:38 +0000 Manifest this update: Thu 19 Jun 2025 07:20:37 +0000 Manifest next update: Thu 26 Jun 2025 07:20:37 +0000 Files and hashes: 1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: nJXmrQ/Z+L/YQyJLTrky+4GBR+NHei+zgb4e1eVmja8=) 2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Validity Not Before: Jun 19 07:20:37 2025 GMT Not After : Jun 26 07:20:37 2025 GMT Subject: CN=6853ba45-0762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:08:7c:48:ce:5e:81:18:8f:a8:43:5f:b6: dd:72:78:a2:5e:e9:c4:9a:1d:1f:54:1a:08:b6:0c: 75:d8:aa:a0:58:65:0e:0d:40:2b:3c:95:dc:eb:65: 4e:e3:db:1f:4a:32:5e:c0:36:62:20:f6:51:c0:97: f8:e5:69:e9:5b:a3:eb:a7:0f:4d:10:f1:ab:0f:78: 63:7c:25:fe:8d:bf:8b:ac:e9:77:40:9e:d6:f8:12: bb:11:91:58:2c:64:37:79:dd:c2:ba:24:ac:8e:48: 0a:47:cb:8f:a7:eb:b2:7b:62:21:e1:1a:1b:73:f5: 2e:3c:53:80:b4:79:4d:67:8c:bd:e1:b7:9d:f0:b9: c8:3d:3f:6f:6f:5e:b9:f9:35:71:38:d6:09:52:54: 48:a6:c6:f7:68:31:27:58:27:60:81:e8:9d:62:f6: 3c:5d:ab:ca:d9:f4:81:49:c3:b1:bd:b9:0e:37:41: d6:93:fe:5c:ba:4f:74:6f:63:2c:6d:c0:94:22:fb: 6b:b5:79:83:0e:7e:50:09:55:9d:36:34:98:93:24: 74:cf:2f:dd:2c:29:31:9e:2a:9e:23:fc:41:e9:52: c8:cc:b9:26:83:f6:fd:b1:d5:1c:f0:c5:af:3f:b6: d2:65:6e:6e:64:8c:ee:4f:63:7f:65:e8:f9:47:ba: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:67:1C:2C:4F:B7:3E:1B:92:71:E8:57:E4:22:31:4A:DC:AD:17:EB X509v3 Authority Key Identifier: keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3a:d0:a6:17:a7:e1:95:f3:ca:23:e4:d4:2a:68:8f:af:7c: c9:23:c3:06:d7:22:05:48:1a:52:82:2a:b5:fe:7c:a3:69:39: ea:5b:32:41:a7:42:e5:88:64:e5:c7:39:79:54:5e:27:a0:3b: 07:c5:4c:1c:21:8e:91:1b:34:df:6f:14:14:dc:bb:3d:b8:92: 9b:52:09:9e:3c:55:e5:13:59:f9:df:db:53:e0:0f:bd:b3:ea: c1:fb:b5:65:e9:a2:e4:62:17:8e:bc:e0:55:fd:8d:6e:6c:58: ae:b8:07:1f:f8:67:85:d8:10:c6:94:3b:74:32:9a:34:9c:ad: 45:ed:d0:95:57:bc:cd:ae:14:df:fd:71:50:05:f1:84:ea:62: ae:e3:e3:2c:57:8d:d1:d3:6c:33:21:71:7e:19:ce:4e:fe:29: f0:f8:08:cb:4c:46:a0:2f:10:24:12:84:37:5d:61:08:83:13: a8:bc:6d:ce:9d:d0:25:6f:60:c4:eb:ec:83:e2:96:d6:f9:4b: 2b:ed:30:67:aa:ae:9f:ae:58:4b:55:43:ae:be:ff:0d:66:90: ca:e4:ae:c9:18:2b:40:bf:77:2f:14:dd:e3:38:69:8b:b6:9b: a2:70:c3:6a:24:ed:6b:34:c5:59:90:83:6b:01:b0:bf:1f:7f: e1:f2:97:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5 REFGNEQ0RjAeFw0yNTA2MTkwNzIwMzdaFw0yNTA2MjYwNzIwMzdaMBgxFjAUBgNV BAMTDTY4NTNiYTQ1LTA3NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ/gh8SM5egRiPqENftt1yeKJe6cSaHR9UGgi2DHXYqqBYZQ4NQCs8ldzrZU7j 2x9KMl7ANmIg9lHAl/jlaelbo+unD00Q8asPeGN8Jf6Nv4us6XdAntb4ErsRkVgs ZDd53cK6JKyOSApHy4+n67J7YiHhGhtz9S48U4C0eU1njL3ht53wucg9P29vXrn5 NXE41glSVEimxvdoMSdYJ2CB6J1i9jxdq8rZ9IFJw7G9uQ43QdaT/ly6T3RvYyxt wJQi+2u1eYMOflAJVZ02NJiTJHTPL90sKTGeKp4j/EHpUsjMuSaD9v2x1Rzwxa8/ ttJlbm5kjO5PY39l6PlHut0bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/mccLE+3 PhuScehX5CIxStytF+swHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3 UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACs60KYXp+GV88oj5NQqaI+vfMkjwwbXIgVIGlKCKrX+fKNpOepbMkGn QuWIZOXHOXlUXiegOwfFTBwhjpEbNN9vFBTcuz24kptSCZ48VeUTWfnf21PgD72z 6sH7tWXpouRiF4684FX9jW5sWK64Bx/4Z4XYEMaUO3QymjScrUXt0JVXvM2uFN/9 cVAF8YTqYq7j4yxXjdHTbDMhcX4Zzk7+KfD4CMtMRqAvECQShDddYQiDE6i8bc6d 0CVvYMTr7IPiltb5SyvtMGeqrp+uWEtVQ66+/w1mkMrkrskYK0C/dy8U3eM4aYu2 m6Jww2ok7Ws0xVmQg2sBsL8ff+Hyl3Y= -----END CERTIFICATE-----Generated at Sat Jun 21 01:27:20 2025 by rpki-client