$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: AFZ9Liucg8WBR6WQjUMwIdlOeHt+UuyCivaZEqp4ivw= Subject key identifier: 7D:1D:5D:90:AC:A2:13:B6:14:3A:2A:C0:AB:86:EB:C4:EC:A3:8C:4B Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D3C Signing time: Sat 14 Jun 2025 17:59:22 +0000 Manifest this update: Sat 14 Jun 2025 17:59:22 +0000 Manifest next update: Sat 21 Jun 2025 17:59:22 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: 54GqzLV469ta9ToRSkg4IOgmumR7vhKWa5viP5/1lMk=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: mbRWJoPHGdi7rUDWkohZGzZ4lnUAM9zm1ycoOa7I9iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Jun 14 17:59:22 2025 GMT Not After : Jun 21 17:59:22 2025 GMT Subject: CN=684db87a-575b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:67:9a:92:07:e8:57:c9:fa:0c:2c:07:85: cf:ed:bb:d8:52:d0:32:c8:05:e4:ab:0c:8b:07:70: 1d:13:02:f9:6d:b7:99:70:93:7c:63:b5:cf:d8:b6: a4:8c:3a:e0:8b:44:0c:f0:76:09:79:b4:18:43:82: 43:4a:70:65:81:bd:c8:90:1b:21:60:7c:95:13:1c: 83:3e:82:47:ac:34:c1:55:12:0d:ef:86:31:f3:d2: 7b:10:0e:be:a2:0a:9f:ef:c7:cf:f0:04:79:9f:37: da:b2:eb:01:4f:45:3d:ee:62:fe:45:d4:f4:5a:21: 29:4b:d5:9b:9a:da:74:98:05:08:d7:9e:db:40:b3: 51:31:d9:b0:e6:ad:e6:a6:58:d2:c7:87:c9:63:57: 81:e2:17:ab:6c:41:90:34:05:d8:55:45:54:67:aa: e0:5f:3c:56:60:54:38:35:f8:67:d7:57:b6:29:97: 3b:1c:f4:4d:d9:24:65:25:3e:2b:e1:6f:30:39:42: 91:12:41:7e:94:d7:7e:c8:8f:f6:81:1a:1d:cd:e5: 3f:7f:41:28:ff:c1:77:c0:ff:1f:9a:d3:93:18:52: e5:2a:50:9a:e9:b7:8c:3d:c3:52:92:86:68:82:49: f2:ef:f6:d8:88:85:e3:63:e1:d5:1f:96:05:78:0d: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:5D:90:AC:A2:13:B6:14:3A:2A:C0:AB:86:EB:C4:EC:A3:8C:4B X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d5:8c:22:e8:4f:bc:cc:d3:00:16:bb:d9:12:0f:f8:e1:8f: 90:ae:b0:84:a3:af:d6:f8:fe:53:83:c8:4e:4c:6a:ac:7f:34: 89:1a:a4:95:c4:70:35:69:41:62:6a:2c:fa:30:b7:68:de:b7: 6b:b9:e1:bb:9f:c1:af:5a:7c:0d:d6:7f:a1:b6:6e:cc:5c:60: e5:e4:a7:cb:98:35:b7:3c:bc:4e:89:5f:0a:ea:8c:ae:4b:f0: 92:e2:43:78:92:f1:bf:33:06:25:9e:75:83:6b:04:27:72:47: 02:a3:ff:b1:c4:28:be:7a:d2:33:46:89:30:b9:a4:76:e8:77: b4:d4:7b:e6:2e:29:ea:f3:20:1c:0d:f1:0a:77:99:b0:02:64: f2:57:ca:20:8e:ed:d4:54:61:f0:0b:cd:9e:d9:a7:8b:e3:2e: ff:60:15:66:f9:2b:e0:3a:06:1f:8e:63:7d:dd:c3:9a:1b:b6: a3:15:f1:a5:dd:12:05:f4:18:91:be:82:89:a3:ea:fa:f5:09: c3:bc:0f:86:c1:90:36:e2:bd:e3:69:9f:62:bf:a2:d3:87:00: bc:9a:4b:ec:93:b5:20:c6:d8:6c:ae:7b:44:5a:c0:e7:cb:1d: fe:67:3d:7f:9a:9c:8f:a0:e4:e8:29:e3:6e:5d:80:1a:60:5a: 94:79:fc:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUwNjE0MTc1OTIyWhcNMjUwNjIxMTc1OTIyWjAYMRYwFAYD VQQDEw02ODRkYjg3YS01NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwBnmpIH6FfJ+gwsB4XP7bvYUtAyyAXkqwyLB3AdEwL5bbeZcJN8Y7XP2Lak jDrgi0QM8HYJebQYQ4JDSnBlgb3IkBshYHyVExyDPoJHrDTBVRIN74Yx89J7EA6+ ogqf78fP8AR5nzfasusBT0U97mL+RdT0WiEpS9Wbmtp0mAUI157bQLNRMdmw5q3m pljSx4fJY1eB4herbEGQNAXYVUVUZ6rgXzxWYFQ4Nfhn11e2KZc7HPRN2SRlJT4r 4W8wOUKREkF+lNd+yI/2gRodzeU/f0Eo/8F3wP8fmtOTGFLlKlCa6beMPcNSkoZo gkny7/bYiIXjY+HVH5YFeA3ARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0dXZCs ohO2FDoqwKuG68Tso4xLMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK1Ywi6E+8zNMAFrvZEg/44Y+QrrCEo6/W+P5Tg8hOTGqsfzSJGqSV xHA1aUFiaiz6MLdo3rdrueG7n8GvWnwN1n+htm7MXGDl5KfLmDW3PLxOiV8K6oyu S/CS4kN4kvG/MwYlnnWDawQnckcCo/+xxCi+etIzRokwuaR26He01HvmLinq8yAc DfEKd5mwAmTyV8ogju3UVGHwC82e2aeL4y7/YBVm+SvgOgYfjmN93cOaG7ajFfGl 3RIF9BiRvoKJo+r69QnDvA+GwZA24r3jaZ9iv6LThwC8mkvsk7UgxthsrntEWsDn yx3+Zz1/mpyPoOToKeNuXYAaYFqUefy4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:32 2025 by rpki-client