$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: 9zYfDM0uZ0XBaRDb4oiClescUkgiTqbrl4ndMEhSuvo= Subject key identifier: 26:8F:88:F3:A8:7D:E1:EE:9C:96:66:75:B2:DD:17:B5:81:EB:EB:7A Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 01F9 Signing time: Tue 17 Jun 2025 01:35:55 +0000 Manifest this update: Tue 17 Jun 2025 01:35:55 +0000 Manifest next update: Tue 24 Jun 2025 01:35:55 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: Vr0PR5mlgNIbOnmg8MYHkfvh7cjDQoQFGLTR6nQzksE=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Jun 17 01:35:55 2025 GMT Not After : Jun 24 01:35:55 2025 GMT Subject: CN=6850c67b-7565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:64:5e:ee:58:d7:ac:50:06:9c:88:f3:4c: 83:42:98:5d:0a:b7:fa:be:5f:d7:09:6d:ee:5d:c9: 1d:07:ac:04:d6:48:1b:70:0a:bf:8b:e7:85:52:4e: 7a:c0:0e:83:78:55:19:70:aa:bf:92:41:fc:b2:76: 24:74:65:d3:c6:42:dd:c8:d9:0a:1f:af:b8:54:be: b0:48:97:d0:bc:8e:c6:2d:a9:b9:71:4a:75:23:98: 47:c1:38:6b:d1:6d:d6:34:e2:02:b0:05:db:95:1f: 8e:ed:9f:1f:5e:b4:67:4b:dd:ba:5a:56:18:dc:b8: 4e:33:a2:f9:06:b6:f8:ab:10:8b:8c:4a:88:09:1c: 97:d8:bd:17:39:be:41:94:03:d1:b6:c3:12:4f:e9: 98:d2:27:00:69:24:e5:cd:d9:b6:e4:30:0c:80:8a: 7d:ca:d2:42:48:98:f4:85:7d:c8:e1:2c:cf:7e:5e: 45:f9:b2:10:77:9c:36:a6:ec:15:39:c9:bb:bf:42: 1e:04:51:05:03:7d:39:24:9a:b5:96:57:65:17:ee: 1f:96:06:0a:dc:81:9e:91:c8:4c:d5:bb:df:58:ec: c0:90:68:8a:45:aa:28:30:89:fa:09:61:47:42:18: 40:c0:f6:d1:9f:3b:92:79:20:6f:8f:7b:de:26:2c: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8F:88:F3:A8:7D:E1:EE:9C:96:66:75:B2:DD:17:B5:81:EB:EB:7A X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:83:6c:d8:37:1e:10:2a:38:f4:23:a2:ef:01:91:c3:5c:85: 6a:c3:7e:42:00:86:ed:1f:7e:79:42:7a:25:09:82:f5:65:bf: 7a:df:79:e5:8f:8a:b7:54:08:11:d3:88:44:75:a7:67:15:0b: 2a:00:e1:8b:df:b2:b2:ea:34:ee:51:7c:d5:41:8e:bc:e1:7f: f9:f7:75:e5:ac:43:f1:73:ad:ea:c5:c2:be:36:6b:e7:bf:2f: 00:6b:9a:2c:3f:fe:a9:1d:fc:34:e7:20:6b:ef:8a:70:43:20: e1:f8:59:0d:7f:ca:48:11:78:59:9b:69:41:94:7b:b8:f6:a3: 84:9a:5a:9c:48:9f:03:8a:12:30:12:0b:cf:a3:4f:e6:11:cc: 9a:82:9c:fa:1f:75:21:6c:b2:e3:fb:85:41:c0:89:83:a1:bb: f3:f8:c3:09:88:8f:2b:81:93:87:02:75:ba:8d:d2:ef:8c:1c: 50:67:e9:58:bc:0d:75:79:dc:ca:ba:9d:5a:11:4c:1e:5f:f0: e2:f9:56:d3:56:7d:a2:a7:63:65:9a:48:8a:fb:a2:b7:31:bb: 03:fd:fb:06:95:b6:59:25:b8:9b:36:1d:2f:8a:33:d7:81:24: e4:f3:56:cd:7b:ac:9b:78:8d:40:01:4c:82:c3:96:7a:b5:6c: 9b:aa:34:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwNjE3MDEzNTU1WhcNMjUwNjI0MDEzNTU1WjAYMRYwFAYD VQQDEw02ODUwYzY3Yi03NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9lkXu5Y16xQBpyI80yDQphdCrf6vl/XCW3uXckdB6wE1kgbcAq/i+eFUk56 wA6DeFUZcKq/kkH8snYkdGXTxkLdyNkKH6+4VL6wSJfQvI7GLam5cUp1I5hHwThr 0W3WNOICsAXblR+O7Z8fXrRnS926WlYY3LhOM6L5Brb4qxCLjEqICRyX2L0XOb5B lAPRtsMST+mY0icAaSTlzdm25DAMgIp9ytJCSJj0hX3I4SzPfl5F+bIQd5w2puwV Ocm7v0IeBFEFA305JJq1lldlF+4flgYK3IGekchM1bvfWOzAkGiKRaooMIn6CWFH QhhAwPbRnzuSeSBvj3veJizctwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaPiPOo feHunJZmdbLdF7WB6+t6MB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtg2zYNx4QKjj0I6LvAZHDXIVqw35CAIbtH355QnolCYL1Zb9633nl j4q3VAgR04hEdadnFQsqAOGL37Ky6jTuUXzVQY684X/593XlrEPxc63qxcK+Nmvn vy8Aa5osP/6pHfw05yBr74pwQyDh+FkNf8pIEXhZm2lBlHu49qOEmlqcSJ8DihIw EgvPo0/mEcyagpz6H3UhbLLj+4VBwImDobvz+MMJiI8rgZOHAnW6jdLvjBxQZ+lY vA11edzKup1aEUweX/Di+VbTVn2ip2NlmkiK+6K3MbsD/fsGlbZZJbibNh0vijPX gSTk81bNe6ybeI1AAUyCw5Z6tWybqjST -----END CERTIFICATE-----Generated at Wed Jun 18 08:22:15 2025 by rpki-client