$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: zDZC8P9N2+H9YG1pfuStyUyiF109S1sE84FXdv/+mBg= Subject key identifier: FA:DC:0E:4F:A8:00:EF:48:A2:71:DB:82:B6:47:6B:16:70:68:77:2E Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 024D Signing time: Fri 13 Jun 2025 01:20:10 +0000 Manifest this update: Fri 13 Jun 2025 01:20:09 +0000 Manifest next update: Fri 20 Jun 2025 01:20:09 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: DMfqxdzRHejriDxMDvK3KZRE9aFX06HWq1y8o1BH1gg=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: Jun 13 01:20:09 2025 GMT Not After : Jun 20 01:20:09 2025 GMT Subject: CN=684b7cca-2873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:39:a3:3b:f5:32:05:3f:f9:87:81:56:55: a6:51:d6:c9:1d:18:e6:d3:ec:73:c0:0b:8a:27:08: 15:e8:56:5a:0e:c1:65:9a:ae:af:12:e4:78:9c:bb: 89:52:0a:f6:39:ae:8f:05:f3:01:66:ac:65:28:ae: 4d:34:ad:06:62:f0:55:b3:97:f7:b1:d4:fa:47:5f: ac:f2:d4:e0:9e:d5:85:9e:ce:4d:3e:7f:70:d8:bb: 0d:98:5d:4d:95:93:d3:2d:2e:7a:f7:38:cd:cf:62: 52:b7:63:3c:7b:bb:61:50:4c:78:82:10:7f:38:39: 97:39:d1:c9:dd:a6:c4:66:cb:69:98:77:5f:6c:6e: 92:7f:a0:bb:05:16:bd:4f:46:85:11:69:cb:65:8b: e5:9a:df:4e:5d:50:62:7e:9e:ab:a9:e7:57:67:fb: b8:88:d6:e5:9a:45:d8:4d:83:95:2d:17:d3:cd:ca: b4:db:9d:59:b7:01:ff:ba:c1:18:dd:25:5b:df:b0: 40:5f:b7:1a:3c:4f:84:34:bb:54:8c:09:d0:aa:d3: b6:d7:b6:70:f2:b0:d9:e1:0a:7a:17:f8:db:f4:9d: 6c:7a:c8:d6:72:5f:59:59:21:41:f5:b8:43:9d:e9: 65:5b:fd:e8:9e:e6:5e:f2:47:9a:6d:49:52:8e:4d: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DC:0E:4F:A8:00:EF:48:A2:71:DB:82:B6:47:6B:16:70:68:77:2E X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ae:4c:8d:d2:71:41:7c:ab:e3:ca:3e:f1:3d:10:e0:9e:f7: 93:09:3e:cd:2f:23:17:c3:f3:b6:27:9d:63:cc:35:94:73:a9: 32:bf:ae:66:cd:45:c6:bf:1d:70:ce:6e:1f:cc:52:20:b7:cf: a4:8a:52:f9:fd:18:76:11:16:fb:c6:46:6d:5e:a2:6e:36:75: f4:bc:bd:05:22:a0:49:83:49:1b:74:29:5c:e7:03:e6:2a:63: e9:42:99:7c:32:77:32:63:ba:dd:9e:5c:c9:ef:4c:19:3a:bb: 5c:f1:7f:81:f2:36:0f:c5:a3:3b:5e:e3:1d:2f:56:cc:81:b9: c1:d0:b7:58:12:8f:34:74:bb:d8:e4:d7:a1:24:db:fb:eb:92: 3a:8d:3c:e5:01:c3:b1:da:b5:14:c1:4a:5d:4f:31:ac:d0:2d: 88:34:d8:a6:a6:bc:44:57:84:3f:84:48:cf:df:9d:4d:6c:59: d2:27:57:37:0d:97:15:b0:89:7f:6d:81:48:ba:50:fc:cd:b5: 31:1a:cd:f2:37:14:d2:a9:e3:d6:ab:ea:1c:4d:57:3e:b6:b0: fb:82:cd:e1:8f:29:5a:00:d4:d1:5d:86:b1:47:78:3d:39:aa: 5d:d0:b4:5d:0d:d0:ed:30:c9:fe:3c:31:0b:cb:bc:49:1c:8d: 18:2f:65:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUwNjEzMDEyMDA5WhcNMjUwNjIwMDEyMDA5WjAYMRYwFAYD VQQDEw02ODRiN2NjYS0yODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08s5ozv1MgU/+YeBVlWmUdbJHRjm0+xzwAuKJwgV6FZaDsFlmq6vEuR4nLuJ Ugr2Oa6PBfMBZqxlKK5NNK0GYvBVs5f3sdT6R1+s8tTgntWFns5NPn9w2LsNmF1N lZPTLS569zjNz2JSt2M8e7thUEx4ghB/ODmXOdHJ3abEZstpmHdfbG6Sf6C7BRa9 T0aFEWnLZYvlmt9OXVBifp6rqedXZ/u4iNblmkXYTYOVLRfTzcq0251ZtwH/usEY 3SVb37BAX7caPE+ENLtUjAnQqtO217Zw8rDZ4Qp6F/jb9J1sesjWcl9ZWSFB9bhD nellW/3onuZe8keabUlSjk1rIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrcDk+o AO9IonHbgrZHaxZwaHcuMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYrkyN0nFBfKvjyj7xPRDgnveTCT7NLyMXw/O2J51jzDWUc6kyv65m zUXGvx1wzm4fzFIgt8+kilL5/Rh2ERb7xkZtXqJuNnX0vL0FIqBJg0kbdClc5wPm KmPpQpl8MncyY7rdnlzJ70wZOrtc8X+B8jYPxaM7XuMdL1bMgbnB0LdYEo80dLvY 5NehJNv765I6jTzlAcOx2rUUwUpdTzGs0C2INNimprxEV4Q/hEjP351NbFnSJ1c3 DZcVsIl/bYFIulD8zbUxGs3yNxTSqePWq+ocTVc+trD7gs3hjylaANTRXYaxR3g9 Oapd0LRdDdDtMMn+PDELy7xJHI0YL2W2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:21:58 2025 by rpki-client