$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json) Hash identifier: zqzklt/j7NDbXUD5FhhwEEogK9dbhoAgB68PwZQhdGU= Subject key identifier: F2:57:10:40:37:7E:6A:2A:84:F0:3B:BE:46:5D:DB:22:C4:30:82:52 Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft Manifest number: 0124 Signing time: Fri 13 Jun 2025 03:46:20 +0000 Manifest this update: Fri 13 Jun 2025 03:46:19 +0000 Manifest next update: Fri 20 Jun 2025 03:46:19 +0000 Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: JJfKTZj9fO7lOr11lrkISSV3rZ1TqcsdTDQLhU7RApg=) 2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: 6vLkVoo3xeixncmkuul2aavr7vLSk2WGgm6lp66mNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Validity Not Before: Jun 13 03:46:19 2025 GMT Not After : Jun 20 03:46:19 2025 GMT Subject: CN=684b9f0b-fe00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:61:17:ec:ec:bf:1b:06:0a:a4:79:0a:15: 47:f8:41:37:73:99:f6:dd:7c:48:7d:53:bd:0d:92: 56:6c:5f:26:81:66:32:53:6d:21:6c:b6:49:a9:10: 88:05:b0:a6:54:6f:13:41:34:2f:b3:4b:cb:ea:d5: 4e:f0:79:92:7e:2b:15:45:7a:31:44:aa:8d:90:d5: 0e:e6:b4:d8:d8:69:97:01:0d:55:89:1e:31:be:d5: c3:24:63:f6:76:35:c4:d8:02:bf:ab:d3:02:39:eb: 51:95:96:35:9b:71:f9:d0:1c:f7:2e:cd:3a:e5:2b: 26:1b:e1:06:df:2b:67:f7:9e:bd:9f:38:f7:e7:c3: 3e:e1:c3:62:6e:cc:45:09:47:0c:f5:24:17:2b:37: f7:bd:8b:89:82:f4:c8:e9:ef:21:d1:2f:df:ef:4f: 47:55:6b:eb:61:74:0b:d0:79:49:30:fe:8f:6e:e2: bf:de:a0:fd:52:92:c7:02:98:cb:b4:5d:a5:a1:1e: f1:40:dc:47:4e:18:ae:87:fc:eb:95:6b:e8:0f:78: 38:08:74:fd:82:28:99:fb:08:3d:60:60:d2:17:27: 58:98:e8:7d:0b:9b:be:75:0e:a4:46:8a:b8:87:3b: 3b:55:3f:30:59:6a:4b:e9:3d:bc:9a:f1:c2:39:76: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:10:40:37:7E:6A:2A:84:F0:3B:BE:46:5D:DB:22:C4:30:82:52 X509v3 Authority Key Identifier: keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:bb:5a:4d:51:a0:1c:fd:9f:e8:4f:d3:b3:e5:a8:28:df: f7:d7:0c:8a:92:75:cc:b2:d2:1c:09:a8:12:83:97:5a:5c:ae: 35:0d:1b:b9:a7:c2:9f:d3:f5:f6:83:99:42:61:03:96:5e:28: 7b:61:6e:95:f5:c6:da:1d:de:33:6e:ea:5f:2b:a5:b8:15:05: ab:08:82:d3:4c:14:78:c1:eb:ea:29:cb:e6:7d:04:e7:51:64: 84:66:c0:70:63:a8:a7:fc:88:86:7e:08:52:52:6a:e2:fd:59: 5b:63:a4:db:fb:bb:16:6b:1d:8a:0f:c6:d9:85:73:e5:af:3f: 27:88:17:a9:f2:61:57:75:a9:54:b3:b2:b8:92:b6:26:ad:10: 67:0f:f1:78:cf:91:06:e5:27:1f:a6:27:23:94:30:98:fe:01: 82:e2:38:df:7f:87:cb:31:c8:13:ca:84:a9:e3:8f:fe:02:3c: 82:79:88:c5:98:52:56:4b:5e:11:45:35:e2:f8:e0:18:04:de: 16:96:b1:25:06:47:ff:cc:8e:23:e3:a7:41:d7:5e:06:a1:15: 87:fa:08:79:5a:19:ea:17:94:7a:04:09:69:95:25:bc:df:e6: 51:f9:48:d1:f1:d8:2f:9b:ed:be:eb:9a:17:82:54:77:37:a0: 06:80:a2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzNTExMTAvBgNVBAUTKEI1NDc2MjgxRjM1OTREMzg2NDlDQ0NGRjUyRjU4QkI0 OUI0NzVGMDkwHhcNMjUwNjEzMDM0NjE5WhcNMjUwNjIwMDM0NjE5WjAYMRYwFAYD VQQDEw02ODRiOWYwYi1mZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUthF+zsvxsGCqR5ChVH+EE3c5n23XxIfVO9DZJWbF8mgWYyU20hbLZJqRCI BbCmVG8TQTQvs0vL6tVO8HmSfisVRXoxRKqNkNUO5rTY2GmXAQ1ViR4xvtXDJGP2 djXE2AK/q9MCOetRlZY1m3H50Bz3Ls065SsmG+EG3ytn9569nzj358M+4cNibsxF CUcM9SQXKzf3vYuJgvTI6e8h0S/f709HVWvrYXQL0HlJMP6PbuK/3qD9UpLHApjL tF2loR7xQNxHThiuh/zrlWvoD3g4CHT9giiZ+wg9YGDSFydYmOh9C5u+dQ6kRoq4 hzs7VT8wWWpL6T28mvHCOXaApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJXEEA3 fmoqhPA7vkZd2yLEMIJSMB8GA1UdIwQYMBaAFLVHYoHzWU04ZJzM/1L1i7SbR18J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM1MS8zMUEwRDE4Mjk0 MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRUaGtuTXpfVXZXTHRKdEhY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM1MS8zMUEwRDE4Mjk0MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRU aGtuTXpfVXZXTHRKdEhYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3VrtaTVGgHP2f6E/Ts+WoKN/31wyKknXMstIcCagSg5daXK41DRu5 p8Kf0/X2g5lCYQOWXih7YW6V9cbaHd4zbupfK6W4FQWrCILTTBR4wevqKcvmfQTn UWSEZsBwY6in/IiGfghSUmri/VlbY6Tb+7sWax2KD8bZhXPlrz8niBep8mFXdalU s7K4krYmrRBnD/F4z5EG5ScfpicjlDCY/gGC4jjff4fLMcgTyoSp44/+AjyCeYjF mFJWS14RRTXi+OAYBN4WlrElBkf/zI4j46dB114GoRWH+gh5WhnqF5R6BAlplSW8 3+ZR+UjR8dgvm+2+65oXglR3N6AGgKL7 -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:40 2025 by rpki-client