$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: Q99bgaCqFD4vQ2/zmBEm2CA6C1KL+OrwkP3YbVAujNk= Subject key identifier: 22:B6:8F:15:CC:B0:91:7D:93:30:6C:9F:42:97:8C:28:40:E5:F0:03 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 193A Signing time: Sat 14 Jun 2025 17:31:53 +0000 Manifest this update: Sat 14 Jun 2025 17:31:53 +0000 Manifest next update: Sat 21 Jun 2025 17:31:53 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: 7SQBvIxbvDswJMfczfokN/bVx1hJ8Yet6eqM+3RQW/E=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Jun 14 17:31:53 2025 GMT Not After : Jun 21 17:31:53 2025 GMT Subject: CN=684db209-6ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:ea:fe:09:6f:58:01:a2:23:f0:aa:56:c5: 6f:7a:a0:2b:dd:bb:34:dc:cb:a0:3c:3a:18:2a:f8: 50:78:85:fe:1b:6d:51:16:85:ee:92:52:8d:28:23: 54:84:bf:be:3a:43:c0:d9:cf:ce:88:99:a0:5d:df: bc:d5:66:9c:ee:65:c5:61:0d:73:6c:47:38:d5:18: 31:53:9c:65:58:d8:55:7d:ba:dc:b9:3e:de:ea:89: 3c:59:b6:50:83:da:a1:1f:6d:f1:de:48:bf:cf:b9: 5c:f2:59:d6:7b:dc:a4:1b:a9:2e:6f:dc:e7:92:da: ed:c1:d2:3b:8a:d1:80:c2:a2:ce:7f:0f:42:0a:17: 4f:2c:f0:f4:de:2e:c6:6e:42:d1:f0:db:4e:5c:20: 1b:a5:c3:6f:1d:13:70:38:8f:ce:09:1c:7b:28:ea: 65:9d:ef:66:0f:7b:72:ae:18:a3:c4:43:a5:8e:75: 14:15:09:ff:36:78:f3:af:88:13:fc:da:7a:9b:d1: c2:51:2b:45:be:78:0c:19:c8:82:a0:84:d0:53:7c: d4:be:19:e4:2d:36:60:ba:e8:f8:6e:b2:c3:3a:1c: 20:45:1e:3f:ec:d2:cd:df:73:aa:37:bc:f2:16:be: 5a:9b:8c:0a:34:ee:ae:f9:3e:34:1d:26:8a:26:74: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:8F:15:CC:B0:91:7D:93:30:6C:9F:42:97:8C:28:40:E5:F0:03 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cd:86:41:60:98:90:d4:5c:be:97:29:f7:34:a8:ba:c0:01: 37:4e:a1:0a:5f:dc:85:5a:6a:e4:12:f5:14:ef:b5:1b:b5:86: 61:22:7c:bd:4c:f2:58:2f:d6:6a:67:df:de:82:49:99:c7:af: 26:68:ca:56:8f:9f:12:6e:d0:24:8c:6c:1e:56:06:65:98:40: 14:23:1c:77:5c:6d:56:a8:82:e8:33:7b:7c:02:51:84:1e:ca: 68:92:2b:23:fd:1d:c3:09:c0:24:00:30:5f:db:a2:88:23:69: 49:d1:4b:18:dc:af:de:a9:15:8b:2a:a6:25:fc:9c:b2:72:cb: 44:fe:e8:56:16:49:f7:d5:39:6f:2d:1e:3c:40:51:35:94:64: 12:47:7e:8b:13:b9:10:be:3c:a1:38:67:8c:de:0a:14:d3:4f: db:74:1d:34:74:5d:ce:0c:4f:6c:74:78:23:0d:5e:76:94:12: 79:d0:5e:27:a4:06:da:7a:8a:58:f5:d0:8f:5e:6d:0f:9e:f8: 48:09:55:a6:2d:82:0e:41:d2:06:27:62:ee:49:cd:97:a7:d9: 33:11:d7:45:19:ad:89:6e:87:65:40:59:13:04:68:b9:c7:40: 57:68:00:c6:87:4c:94:a8:3f:c4:00:29:98:99:56:b3:d2:63: 74:a3:76:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwNjE0MTczMTUzWhcNMjUwNjIxMTczMTUzWjAYMRYwFAYD VQQDEw02ODRkYjIwOS02ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTLq/glvWAGiI/CqVsVveqAr3bs03MugPDoYKvhQeIX+G21RFoXuklKNKCNU hL++OkPA2c/OiJmgXd+81Wac7mXFYQ1zbEc41RgxU5xlWNhVfbrcuT7e6ok8WbZQ g9qhH23x3ki/z7lc8lnWe9ykG6kub9znktrtwdI7itGAwqLOfw9CChdPLPD03i7G bkLR8NtOXCAbpcNvHRNwOI/OCRx7KOplne9mD3tyrhijxEOljnUUFQn/Nnjzr4gT /Np6m9HCUStFvngMGciCoITQU3zUvhnkLTZguuj4brLDOhwgRR4/7NLN33OqN7zy Fr5am4wKNO6u+T40HSaKJnTSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCK2jxXM sJF9kzBsn0KXjChA5fADMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADzYZBYJiQ1Fy+lyn3NKi6wAE3TqEKX9yFWmrkEvUU77UbtYZhIny9 TPJYL9ZqZ9/egkmZx68maMpWj58SbtAkjGweVgZlmEAUIxx3XG1WqILoM3t8AlGE Hspokisj/R3DCcAkADBf26KII2lJ0UsY3K/eqRWLKqYl/JyycstE/uhWFkn31Tlv LR48QFE1lGQSR36LE7kQvjyhOGeM3goU00/bdB00dF3ODE9sdHgjDV52lBJ50F4n pAbaeopY9dCPXm0PnvhICVWmLYIOQdIGJ2LuSc2Xp9kzEddFGa2JbodlQFkTBGi5 x0BXaADGh0yUqD/EACmYmVaz0mN0o3YL -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:22 2025 by rpki-client