$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: 9eSGI9tuy0CH9yX8au87LW6zzoy+JaJdR8g4n4qKtv8= Subject key identifier: CE:90:51:73:5E:75:57:DA:C7:3F:D9:5D:5A:E7:2D:D5:18:13:BE:64 Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0C8A Signing time: Wed 18 Jun 2025 18:09:28 +0000 Manifest this update: Wed 18 Jun 2025 18:09:28 +0000 Manifest next update: Wed 25 Jun 2025 18:09:28 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: Y5BLMAisi5isQQBZae95NcxBbx2sPD4S6mlB75sF95E=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Jun 18 18:09:28 2025 GMT Not After : Jun 25 18:09:28 2025 GMT Subject: CN=685300d8-0fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:59:0a:76:19:28:1e:6e:76:71:47:7b:ad: 24:05:fb:f5:86:71:09:9c:09:40:76:b2:11:c7:94: 24:8c:a7:1f:8a:6d:6d:f5:95:f1:be:35:b5:8a:56: 35:4c:68:ce:9f:4b:5f:63:26:2e:c7:6d:ed:34:af: ea:78:36:e8:90:51:43:6f:b8:96:8e:00:13:af:8b: b7:be:1e:78:65:1b:72:2c:7c:90:05:59:27:c2:24: 0f:db:8a:71:e4:17:b2:ac:d0:a3:65:61:f9:42:7f: 43:62:74:ed:0c:d2:70:7d:3f:02:eb:00:f5:2b:be: bb:f3:70:49:70:d6:ae:5b:f9:1c:44:b7:6f:fb:9b: 13:80:36:23:c8:29:95:68:fb:ac:2b:48:75:02:a8: c6:7d:c7:89:e6:a8:30:7b:58:7a:a9:15:b8:9d:17: 8a:a7:52:7c:1f:30:d5:9d:e2:1b:9c:a2:cc:ea:2f: af:0f:bf:ae:de:2f:8b:e6:f9:09:5f:33:6c:ca:f2: 07:03:8a:00:ef:bf:97:be:b7:ce:27:6b:aa:80:52: a6:c9:a1:72:f3:d6:ed:04:3e:f7:8b:6a:9a:7e:f2: b5:54:09:52:ea:5c:37:55:42:d8:0b:9e:0b:f6:8a: 01:66:ea:37:a7:e3:b9:31:ba:07:27:57:a0:50:fd: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:90:51:73:5E:75:57:DA:C7:3F:D9:5D:5A:E7:2D:D5:18:13:BE:64 X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b0:5e:c6:03:f4:5f:dd:28:f8:c3:c9:ae:be:e2:a5:68:f2: 10:f9:43:dc:19:98:0f:79:91:f5:89:3d:00:f8:f4:f9:74:3b: 0f:8d:c2:47:a2:80:7f:08:58:e1:e6:11:00:9c:78:37:2e:76: e2:0e:49:85:1d:92:07:2c:39:bf:ce:b4:48:1e:63:f6:86:f8: c4:4c:87:4a:b0:a7:89:7c:24:3a:06:4c:9e:05:ce:3a:01:a5: d4:96:c6:72:73:7c:b5:5e:b4:8d:77:12:3b:e1:73:b2:3e:1b: d3:53:32:6f:b5:77:98:85:fd:80:f6:5d:5b:e6:86:3b:cc:a3: 33:5c:f3:b4:32:c8:58:ba:02:6b:21:d0:44:4d:5d:2d:8c:8b: 01:6c:b1:dc:6e:ad:03:45:1e:ea:bb:f6:64:4f:b0:e1:e6:52: 6f:f7:49:66:cd:0b:f1:a7:0b:df:13:49:50:43:f8:55:66:83: c2:26:30:f6:d1:c4:53:d3:b1:5b:f6:79:de:0a:be:06:f6:ef: 00:85:24:3f:e0:ed:74:c2:ba:91:f3:9e:9e:dc:30:15:47:20: 15:97:d6:d0:1d:ea:56:c5:00:ee:fd:e4:5e:8c:50:b0:48:1b: 2b:14:9e:ae:4b:71:7e:6c:d6:7e:89:51:16:1e:b8:07:96:7b: 87:aa:14:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUwNjE4MTgwOTI4WhcNMjUwNjI1MTgwOTI4WjAYMRYwFAYD VQQDEw02ODUzMDBkOC0wZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPVZCnYZKB5udnFHe60kBfv1hnEJnAlAdrIRx5QkjKcfim1t9ZXxvjW1ilY1 TGjOn0tfYyYux23tNK/qeDbokFFDb7iWjgATr4u3vh54ZRtyLHyQBVknwiQP24px 5BeyrNCjZWH5Qn9DYnTtDNJwfT8C6wD1K76783BJcNauW/kcRLdv+5sTgDYjyCmV aPusK0h1AqjGfceJ5qgwe1h6qRW4nReKp1J8HzDVneIbnKLM6i+vD7+u3i+L5vkJ XzNsyvIHA4oA77+XvrfOJ2uqgFKmyaFy89btBD73i2qafvK1VAlS6lw3VULYC54L 9ooBZuo3p+O5MboHJ1egUP1VXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6QUXNe dVfaxz/ZXVrnLdUYE75kMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5sF7GA/Rf3Sj4w8muvuKlaPIQ+UPcGZgPeZH1iT0A+PT5dDsPjcJH ooB/CFjh5hEAnHg3LnbiDkmFHZIHLDm/zrRIHmP2hvjETIdKsKeJfCQ6BkyeBc46 AaXUlsZyc3y1XrSNdxI74XOyPhvTUzJvtXeYhf2A9l1b5oY7zKMzXPO0MshYugJr IdBETV0tjIsBbLHcbq0DRR7qu/ZkT7Dh5lJv90lmzQvxpwvfE0lQQ/hVZoPCJjD2 0cRT07Fb9nneCr4G9u8AhSQ/4O10wrqR856e3DAVRyAVl9bQHepWxQDu/eRejFCw SBsrFJ6uS3F+bNZ+iVEWHrgHlnuHqhT7 -----END CERTIFICATE-----Generated at Fri Jun 20 03:30:38 2025 by rpki-client