$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: djFmmDREDf3sWio20UGQRrg7H+inwUuUlP9dqLvoJC4= Subject key identifier: DC:70:C5:34:6C:36:3C:90:2B:05:94:B6:22:26:CB:48:27:BF:C0:D3 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 05EA Signing time: Wed 18 Jun 2025 22:47:51 +0000 Manifest this update: Wed 18 Jun 2025 22:47:50 +0000 Manifest next update: Wed 25 Jun 2025 22:47:50 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: +6BpWHUEnXx76/adJC6N44HGCyrPeFBUEK5JqI/nd7k=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Jun 18 22:47:50 2025 GMT Not After : Jun 25 22:47:50 2025 GMT Subject: CN=68534217-d9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:63:db:cc:6e:29:95:74:08:bd:b0:c9:0f: 1a:bf:d9:c9:e9:ff:74:2a:8b:8e:cd:af:69:9a:8d: a3:17:23:26:e7:22:3e:06:34:a6:cb:3b:e5:58:a0: 24:ce:eb:b6:90:15:3a:83:e6:fb:72:b8:8c:7d:ec: a2:8f:6f:18:98:ab:60:86:d0:4b:bf:47:dc:2d:83: ac:95:0f:1d:15:75:77:0a:a3:c7:34:13:9e:0c:e7: 51:80:c1:44:c7:12:fe:5c:35:7e:ed:03:ba:35:1d: c7:d8:b8:18:f9:1a:76:8e:53:62:cd:83:7b:51:69: 28:c9:b2:0f:ee:82:7a:08:a5:8d:a4:02:c8:3b:e9: 2b:9e:a2:60:35:07:56:05:a5:12:5e:7d:91:7c:bb: b2:04:4f:59:9d:00:08:ef:10:0f:1d:42:a9:7c:32: a8:0d:7e:47:c5:ee:94:8b:cc:5e:55:f0:14:4f:c4: bc:2c:56:fa:4e:64:73:81:64:aa:44:16:f8:3c:b9: 1e:b6:1b:78:45:50:f6:1b:39:88:42:83:0e:f5:19: b1:42:cc:a1:77:39:80:96:57:c6:1e:65:c1:fc:31: 52:56:e8:f0:57:2c:89:57:a0:59:6e:46:98:a3:80: b6:e1:a6:5b:9d:48:cc:86:49:bd:2e:a2:65:7c:c9: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:70:C5:34:6C:36:3C:90:2B:05:94:B6:22:26:CB:48:27:BF:C0:D3 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:13:2e:7c:fc:fa:7a:26:2c:d2:d9:0c:c7:bb:ea:51:cf:a7: 99:1a:e2:67:81:14:de:b7:fb:88:ad:85:71:5a:34:44:a4:a7: d5:98:50:b2:19:66:53:1f:72:18:4b:2a:ec:49:02:aa:4f:a5: 4a:3b:2b:5f:48:bb:eb:0c:eb:00:2f:e1:67:72:ca:d4:71:f1: 07:a5:a0:94:62:62:17:b5:3a:cb:4a:c5:8f:40:46:d7:9f:39: 31:ac:56:19:99:79:03:bc:1c:24:13:82:41:e7:96:b5:ac:a2: 0c:38:ba:92:04:02:59:db:76:cf:d9:4e:4a:52:6f:b3:7b:ac: 68:42:94:73:58:ed:b1:d9:70:65:f6:32:b9:0c:4b:d5:91:f7: 5b:e5:af:b7:f2:dc:5d:f4:e2:01:f0:69:bb:b1:e1:57:b8:ca: 8a:3f:1e:a0:08:a9:86:cb:8b:17:ee:5a:c1:99:c8:2d:4a:8e: 8a:28:34:94:e9:f7:f4:30:1b:eb:58:80:c3:07:26:91:b5:48: c6:4d:33:3b:7b:c8:fc:b6:af:8c:2f:2e:1e:32:7e:86:f0:a9: d5:0f:4a:2a:b8:3c:d5:1b:63:0f:22:81:01:70:f7:34:f6:b3: 88:ba:41:88:ed:a4:94:57:9a:23:1e:1d:c5:e4:93:51:be:c4: 33:f6:7e:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwNjE4MjI0NzUwWhcNMjUwNjI1MjI0NzUwWjAYMRYwFAYD VQQDEw02ODUzNDIxNy1kOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHxj28xuKZV0CL2wyQ8av9nJ6f90KouOza9pmo2jFyMm5yI+BjSmyzvlWKAk zuu2kBU6g+b7criMfeyij28YmKtghtBLv0fcLYOslQ8dFXV3CqPHNBOeDOdRgMFE xxL+XDV+7QO6NR3H2LgY+Rp2jlNizYN7UWkoybIP7oJ6CKWNpALIO+krnqJgNQdW BaUSXn2RfLuyBE9ZnQAI7xAPHUKpfDKoDX5Hxe6Ui8xeVfAUT8S8LFb6TmRzgWSq RBb4PLketht4RVD2GzmIQoMO9RmxQsyhdzmAllfGHmXB/DFSVujwVyyJV6BZbkaY o4C24aZbnUjMhkm9LqJlfMkuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxwxTRs NjyQKwWUtiImy0gnv8DTMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQEy58/Pp6JizS2QzHu+pRz6eZGuJngRTet/uIrYVxWjREpKfVmFCy GWZTH3IYSyrsSQKqT6VKOytfSLvrDOsAL+FncsrUcfEHpaCUYmIXtTrLSsWPQEbX nzkxrFYZmXkDvBwkE4JB55a1rKIMOLqSBAJZ23bP2U5KUm+ze6xoQpRzWO2x2XBl 9jK5DEvVkfdb5a+38txd9OIB8Gm7seFXuMqKPx6gCKmGy4sX7lrBmcgtSo6KKDSU 6ff0MBvrWIDDByaRtUjGTTM7e8j8tq+MLy4eMn6G8KnVD0oquDzVG2MPIoEBcPc0 9rOIukGI7aSUV5ojHh3F5JNRvsQz9n4E -----END CERTIFICATE-----Generated at Fri Jun 20 19:11:30 2025 by rpki-client