$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: jJS8dDao96iqYpNpZR7frcbQ0oQsAEaEYJSdOUJ9mGw= Subject key identifier: 21:07:C9:A5:3B:78:23:0A:DE:13:90:9E:61:73:44:40:2D:4F:7F:18 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 0470 Signing time: Sat 09 Aug 2025 00:37:46 +0000 Manifest this update: Sat 09 Aug 2025 00:37:45 +0000 Manifest next update: Sat 16 Aug 2025 00:37:45 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: VeSSKqRK0GrGabVedVd0KjWgshX1VMu36/8dZB6pUJg=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Aug 9 00:37:45 2025 GMT Not After : Aug 16 00:37:45 2025 GMT Subject: CN=68969859-1b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:75:24:cc:4e:0b:b7:ce:e7:ac:95:32:2f: 37:5f:2a:a7:09:94:0c:0f:1d:5b:9c:00:8b:99:44: 2c:fa:c6:6e:5d:1f:1b:ea:8a:26:6b:83:7b:a8:d8: 0c:ff:7f:7c:41:66:90:ad:c5:06:05:ba:69:d5:db: 1c:90:6c:d4:c3:56:8c:44:32:14:68:a2:ce:9e:e9: cf:7f:2a:67:26:17:66:57:c9:34:48:0e:81:07:58: a5:3b:7d:ad:72:a0:d5:e0:96:61:0d:33:8e:24:bb: ae:43:6d:8f:af:27:e6:31:98:03:e9:7b:3a:c6:52: a8:f5:4c:6f:39:b9:55:57:64:33:e4:09:9d:a4:e8: 51:17:2f:c1:6f:08:dc:8b:6f:a3:a6:d3:9b:1b:87: ad:d6:c0:b3:4f:4f:92:dc:a5:f6:e3:26:12:bb:e2: a0:57:9e:4d:df:c9:a4:f6:95:d4:02:5c:08:b5:66: 35:56:2e:05:b5:da:6f:51:3d:6a:5e:15:be:79:a7: 48:fa:38:aa:fc:e4:e0:08:c4:95:36:22:e8:1a:6e: 2e:0b:67:9a:4d:2d:56:13:5f:3b:27:73:0d:0b:ee: fe:85:50:a5:73:e9:5d:30:4f:78:d9:99:36:a0:36: 2f:52:d2:9a:10:dd:92:c4:5c:04:aa:06:1a:d2:b9: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:C9:A5:3B:78:23:0A:DE:13:90:9E:61:73:44:40:2D:4F:7F:18 X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4d:aa:c2:ff:85:f2:19:a1:a3:f1:08:13:3b:2c:6d:b9:f9: 3f:23:bf:83:27:ad:44:70:a4:91:29:2f:96:e8:bd:0d:ac:de: a3:b7:33:cc:74:26:9e:59:75:95:da:f7:18:d2:65:8f:b1:dd: 93:bc:c2:38:3b:09:f8:33:61:b2:6e:ae:a5:2b:dc:8d:5b:a0: 0e:20:4d:41:f4:cd:53:2f:ed:3d:9d:87:aa:a2:50:0e:cf:ee: 16:c6:77:ea:c2:bd:25:9b:38:80:94:91:bb:4b:3d:ef:9a:03: 41:d4:56:13:0d:fe:c4:f7:20:87:fb:cf:36:af:3c:bc:63:71: 7e:08:05:10:65:d9:d5:3f:80:ea:05:50:31:ee:e9:d5:19:8d: 85:42:1e:11:ea:d9:a8:19:fb:e9:ac:e8:25:79:79:6d:99:22: 3e:f9:d4:d4:fc:3e:fb:85:81:d1:3c:fc:40:4c:08:94:8f:9c: 23:76:a7:94:f5:be:30:dc:d1:f2:1c:90:1b:8b:82:50:1d:f2: db:28:d5:67:8d:08:85:95:e8:78:e1:0d:41:c2:90:26:79:2a: a9:6b:7a:94:75:d9:16:2e:57:22:17:66:18:ae:13:9a:c6:12: f7:c0:5c:07:59:7f:9c:82:ec:2b:d7:4b:8c:17:71:cc:a4:41: 92:83:96:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUwODA5MDAzNzQ1WhcNMjUwODE2MDAzNzQ1WjAYMRYwFAYD VQQDEw02ODk2OTg1OS0xYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2l1JMxOC7fO56yVMi83XyqnCZQMDx1bnACLmUQs+sZuXR8b6ooma4N7qNgM /398QWaQrcUGBbpp1dsckGzUw1aMRDIUaKLOnunPfypnJhdmV8k0SA6BB1ilO32t cqDV4JZhDTOOJLuuQ22PryfmMZgD6Xs6xlKo9UxvOblVV2Qz5AmdpOhRFy/Bbwjc i2+jptObG4et1sCzT0+S3KX24yYSu+KgV55N38mk9pXUAlwItWY1Vi4FtdpvUT1q XhW+eadI+jiq/OTgCMSVNiLoGm4uC2eaTS1WE187J3MNC+7+hVClc+ldME942Zk2 oDYvUtKaEN2SxFwEqgYa0rmb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEHyaU7 eCMK3hOQnmFzREAtT38YMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByTarC/4XyGaGj8QgTOyxtufk/I7+DJ61EcKSRKS+W6L0NrN6jtzPM dCaeWXWV2vcY0mWPsd2TvMI4Own4M2Gybq6lK9yNW6AOIE1B9M1TL+09nYeqolAO z+4Wxnfqwr0lmziAlJG7Sz3vmgNB1FYTDf7E9yCH+882rzy8Y3F+CAUQZdnVP4Dq BVAx7unVGY2FQh4R6tmoGfvprOgleXltmSI++dTU/D77hYHRPPxATAiUj5wjdqeU 9b4w3NHyHJAbi4JQHfLbKNVnjQiFleh44Q1BwpAmeSqpa3qUddkWLlciF2YYrhOa xhL3wFwHWX+cguwr10uMF3HMpEGSg5bw -----END CERTIFICATE-----Generated at Sun Aug 10 19:57:11 2025 by rpki-client