$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: 5uo1SYggZhYcYTo77m+xJmXVBXhuFi0N3QmHx9Xj9L0= Subject key identifier: 16:CF:EC:F3:DB:25:E9:09:18:18:90:0D:37:E9:81:4E:41:D5:9F:C1 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D5C Signing time: Fri 08 Aug 2025 18:16:58 +0000 Manifest this update: Fri 08 Aug 2025 18:16:57 +0000 Manifest next update: Fri 15 Aug 2025 18:16:57 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: UJSl2Cpz9IVT6jE+gIv7FBytw/PbE7mP5jlNUGGUNW4=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: EfyBsaHY8sXfh+FtDY0lWUNRe0HDOeGbUlITqUD7/qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Aug 8 18:16:57 2025 GMT Not After : Aug 15 18:16:57 2025 GMT Subject: CN=68963f19-5b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:28:dd:8d:65:ae:a3:e0:b5:a2:be:f5:56: 7f:dc:48:c8:0f:60:ff:22:ea:33:c5:ab:74:10:7b: f3:af:9a:7d:1e:7f:c2:09:09:cf:87:83:0e:18:6e: 11:71:59:17:98:4f:f3:ae:8e:bd:12:9f:72:7c:71: ed:f0:52:f3:f9:9f:9d:91:2f:79:57:cf:af:b9:8b: 07:f9:3f:a6:5c:61:70:5a:8d:69:ee:c4:33:ae:7e: ce:5e:e6:5d:25:f2:9e:06:71:8a:6a:20:dc:c0:b9: b6:a9:f5:cc:3c:46:cb:e5:86:8f:8a:3e:c3:e1:13: 85:30:8e:34:a5:7f:ce:ab:96:c9:e4:fe:83:d3:09: 13:1b:cd:e8:d6:8f:8d:90:f8:d6:02:b0:2d:fa:d0: 9d:04:f4:5f:6e:9c:a8:df:f5:57:b4:39:09:00:90: eb:a7:9f:99:9f:a5:91:f1:1d:8d:1c:84:8d:57:ce: 3e:64:85:54:88:e9:5d:14:9a:50:8e:27:9b:43:d5: 12:33:c9:e7:fa:a7:a1:b1:d0:da:e9:19:32:4e:98: 89:0d:88:8e:52:9a:54:29:17:1a:7c:7d:33:a0:b2: c0:c3:c5:9f:98:c2:de:c5:de:8e:c6:9b:e5:7a:13: 0a:73:93:ca:41:2b:74:28:89:d3:2a:a2:8a:e7:fe: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:EC:F3:DB:25:E9:09:18:18:90:0D:37:E9:81:4E:41:D5:9F:C1 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:74:ae:d0:7e:d5:4b:4c:64:61:e1:0d:ee:1f:27:99:4e:3d: 30:f6:d1:aa:ad:81:40:b7:f9:4c:eb:18:e4:ca:96:1d:f4:d3: fe:19:67:aa:5b:3b:54:80:17:ef:b9:d7:1d:a7:6d:2a:c5:c3: fe:e2:d2:e2:4e:de:dc:36:a8:ab:8b:23:53:4f:8a:70:cc:31: 51:ad:43:cf:2f:f5:24:d0:8d:34:bd:45:b5:d1:b0:5d:3b:3d: df:91:93:74:82:d7:3c:33:9d:66:ef:5f:46:a5:31:a7:4d:fe: 0f:a8:7c:14:23:a9:b0:fe:c7:98:1d:2c:c7:7d:31:8f:3f:04: 45:b7:5c:97:54:2b:a6:63:d0:01:2d:9a:25:27:86:ff:35:0b: 41:5c:2c:88:06:00:e3:5e:88:49:d0:2d:96:5a:dc:a4:ad:2d: cb:67:2f:4d:7e:ef:41:67:b1:23:c7:66:bb:78:50:5f:5b:56: a0:bd:00:17:3d:3a:81:5d:7d:04:ae:83:e7:55:27:8d:7b:b8: f4:b3:b2:c1:87:64:66:c9:54:8f:b2:46:85:ee:ee:9b:17:df: 80:53:4c:79:63:cd:59:fe:71:ca:95:36:2e:82:50:63:54:12: 2a:c1:e1:21:d5:e2:6d:d1:ba:34:26:0e:36:98:30:0b:69:1f: 2b:89:c5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUwODA4MTgxNjU3WhcNMjUwODE1MTgxNjU3WjAYMRYwFAYD VQQDEw02ODk2M2YxOS01YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ogo3Y1lrqPgtaK+9VZ/3EjID2D/Iuozxat0EHvzr5p9Hn/CCQnPh4MOGG4R cVkXmE/zro69Ep9yfHHt8FLz+Z+dkS95V8+vuYsH+T+mXGFwWo1p7sQzrn7OXuZd JfKeBnGKaiDcwLm2qfXMPEbL5YaPij7D4ROFMI40pX/Oq5bJ5P6D0wkTG83o1o+N kPjWArAt+tCdBPRfbpyo3/VXtDkJAJDrp5+Zn6WR8R2NHISNV84+ZIVUiOldFJpQ jiebQ9USM8nn+qehsdDa6RkyTpiJDYiOUppUKRcafH0zoLLAw8WfmMLexd6Oxpvl ehMKc5PKQSt0KInTKqKK5/4QUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbP7PPb JekJGBiQDTfpgU5B1Z/BMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0dK7QftVLTGRh4Q3uHyeZTj0w9tGqrYFAt/lM6xjkypYd9NP+GWeq WztUgBfvudcdp20qxcP+4tLiTt7cNqiriyNTT4pwzDFRrUPPL/Uk0I00vUW10bBd Oz3fkZN0gtc8M51m719GpTGnTf4PqHwUI6mw/seYHSzHfTGPPwRFt1yXVCumY9AB LZolJ4b/NQtBXCyIBgDjXohJ0C2WWtykrS3LZy9Nfu9BZ7Ejx2a7eFBfW1agvQAX PTqBXX0EroPnVSeNe7j0s7LBh2RmyVSPskaF7u6bF9+AU0x5Y81Z/nHKlTYuglBj VBIqweEh1eJt0bo0Jg42mDALaR8ricWr -----END CERTIFICATE-----Generated at Sun Aug 10 18:54:04 2025 by rpki-client