$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: kQrYlvaRZ3TmcVmvWU4Aij6vPe6fyxQ2rTB9jDGS2d4= Subject key identifier: F2:C7:5B:9B:60:42:FD:7E:5E:53:5B:1C:76:00:62:BA:87:97:0C:A8 Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 0437 Signing time: Tue 17 Jun 2025 00:07:48 +0000 Manifest this update: Tue 17 Jun 2025 00:07:48 +0000 Manifest next update: Tue 24 Jun 2025 00:07:48 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: GqNcaCybJ+Ce4xThAs5hFdXUYwjuAWsFffG/Eji5Tck=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Jun 17 00:07:48 2025 GMT Not After : Jun 24 00:07:48 2025 GMT Subject: CN=6850b1d4-6950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:4e:5f:cc:8c:a5:95:d0:41:60:bb:a3:92: 42:26:d4:96:27:d3:11:95:38:de:b0:64:75:da:dc: 0a:5e:c2:9f:43:a1:91:34:a9:da:fb:ef:42:c2:93: 50:be:08:90:35:64:0e:b7:98:ed:ed:64:6a:d0:39: 7b:f5:66:d9:0a:eb:08:2b:e8:b0:bc:d0:05:06:57: 11:95:06:48:ce:de:48:05:0f:c6:7e:c8:8e:fa:7b: 3f:94:65:6f:60:9f:11:e2:38:b3:2d:ef:09:3e:b9: f2:2e:f7:ee:93:13:d7:3d:e8:2f:92:8d:06:44:d5: 27:c0:fb:ed:4a:c2:83:7c:02:54:44:99:33:4c:d7: 15:76:3a:dc:f8:ab:75:76:74:b4:06:85:cf:a6:c0: 6f:eb:9e:92:90:e5:2d:d0:23:b5:91:8d:83:d9:91: b4:f5:1b:7a:19:3d:57:2d:7a:3f:57:ef:d4:30:dd: 05:f1:6d:5d:9b:f8:5a:41:8d:23:bf:3d:83:eb:d7: 6d:e5:33:e7:34:3d:4c:b1:43:a0:b8:b9:48:fb:fc: ea:1f:29:e1:15:68:92:7a:c9:7d:cf:a4:88:e7:44: ae:d1:51:31:38:e6:8a:6f:71:ca:83:68:e3:56:e4: b5:9b:2a:57:6d:bb:b2:91:29:e8:ff:b2:58:25:bc: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:5B:9B:60:42:FD:7E:5E:53:5B:1C:76:00:62:BA:87:97:0C:A8 X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5a:92:51:97:17:93:e4:40:94:25:20:2d:9b:1a:94:c5:3f: b3:22:6c:5e:38:97:b6:52:80:f1:f8:95:15:17:53:98:00:17: 18:c2:e5:d7:40:25:fe:a0:b5:37:74:73:ac:ea:d2:d4:a0:fb: fc:ed:71:22:a2:67:eb:88:67:c8:a5:ef:72:4c:f3:8f:73:be: 1f:9e:7d:d8:f6:f4:19:8a:6c:ab:41:57:99:db:8c:5f:db:63: d2:1c:d5:84:c1:9b:34:9b:4a:fd:f6:6d:b2:e6:78:8b:51:28: 76:e6:0c:b6:36:dd:b0:c7:14:1f:13:24:a8:3b:0b:ac:77:15: 8f:5f:ce:b0:e7:d6:72:9c:f0:23:33:9e:7d:34:6e:e0:85:43: a9:e2:3a:27:5b:34:4b:4c:31:f2:a4:55:bd:44:2c:72:51:4e: c9:8a:19:a3:9c:8a:5e:b6:71:91:d7:de:88:f4:d6:19:ca:f8: 5e:e5:0f:e2:31:58:b3:b0:cf:42:d5:0a:76:e2:aa:1b:26:3a: 60:52:7d:d7:90:a3:b6:3f:eb:b6:aa:47:ac:a7:2b:9b:f9:c8: 11:dd:ba:e0:79:40:55:44:0c:f6:ec:9f:ee:86:b0:3c:2f:a9: 01:0f:2c:9f:6e:b4:af:7c:a1:83:a7:ca:5f:14:34:58:89:27: 44:34:de:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUwNjE3MDAwNzQ4WhcNMjUwNjI0MDAwNzQ4WjAYMRYwFAYD VQQDEw02ODUwYjFkNC02OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdxOX8yMpZXQQWC7o5JCJtSWJ9MRlTjesGR12twKXsKfQ6GRNKna++9CwpNQ vgiQNWQOt5jt7WRq0Dl79WbZCusIK+iwvNAFBlcRlQZIzt5IBQ/GfsiO+ns/lGVv YJ8R4jizLe8JPrnyLvfukxPXPegvko0GRNUnwPvtSsKDfAJURJkzTNcVdjrc+Kt1 dnS0BoXPpsBv656SkOUt0CO1kY2D2ZG09Rt6GT1XLXo/V+/UMN0F8W1dm/haQY0j vz2D69dt5TPnND1MsUOguLlI+/zqHynhFWiSesl9z6SI50Su0VExOOaKb3HKg2jj VuS1mypXbbuykSno/7JYJbxbDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLHW5tg Qv1+XlNbHHYAYrqHlwyoMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6WpJRlxeT5ECUJSAtmxqUxT+zImxeOJe2UoDx+JUVF1OYABcYwuXX QCX+oLU3dHOs6tLUoPv87XEiomfriGfIpe9yTPOPc74fnn3Y9vQZimyrQVeZ24xf 22PSHNWEwZs0m0r99m2y5niLUSh25gy2Nt2wxxQfEySoOwusdxWPX86w59ZynPAj M559NG7ghUOp4jonWzRLTDHypFW9RCxyUU7JihmjnIpetnGR196I9NYZyvhe5Q/i MVizsM9C1Qp24qobJjpgUn3XkKO2P+u2qkespyub+cgR3brgeUBVRAz27J/uhrA8 L6kBDyyfbrSvfKGDp8pfFDRYiSdENN5F -----END CERTIFICATE-----Generated at Wed Jun 18 06:45:51 2025 by rpki-client