$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json) Hash identifier: 2Rui4mz2z9U4z/QQ3VDyMlQpZy9Lc45LDfallYDsKT4= Subject key identifier: 35:6C:A2:66:43:3D:53:FF:35:6F:D9:F5:CC:15:AE:0F:35:20:62:EF Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft Manifest number: 0172 Signing time: Thu 19 Jun 2025 03:13:49 +0000 Manifest this update: Thu 19 Jun 2025 03:13:49 +0000 Manifest next update: Thu 26 Jun 2025 03:13:49 +0000 Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: bz6yZlmJ2naeXrsYB3s+qS3VqpAsnG6nqIXQDZ2viWg=) 2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Validity Not Before: Jun 19 03:13:49 2025 GMT Not After : Jun 26 03:13:49 2025 GMT Subject: CN=6853806d-409e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:db:e3:3c:1b:29:6b:1f:59:bc:b3:97:cd: 8b:32:07:56:d6:bb:ec:21:38:37:6f:59:5d:97:89: cf:45:8a:77:fa:2c:ab:8f:15:4c:3f:3e:2d:7d:1b: 8b:76:18:5e:6c:bc:d4:92:70:8f:5b:e0:41:b5:91: 06:84:82:a8:f4:b9:09:61:6c:d8:b0:cb:77:b6:5b: 34:09:9e:c0:e2:24:c1:6a:16:cc:8b:83:df:78:dd: b8:cb:26:b8:46:20:8d:e2:9f:cb:96:2b:84:1d:fb: 31:b4:a3:9f:27:82:0c:cd:2e:24:96:1b:0b:f4:a9: 07:6d:fb:02:09:6b:3a:15:b9:d4:a3:46:5a:f5:7a: 2b:ea:bc:b8:ed:22:f1:7a:2c:3e:2e:4d:84:c4:af: 1a:6f:d0:17:ed:6c:7d:9c:86:82:45:14:99:7e:31: a5:96:69:e2:d4:10:38:02:3f:78:cc:5a:a7:df:89: 99:06:c1:98:81:48:d7:38:68:09:3f:0c:f4:1a:d2: ab:c1:86:cc:44:4b:d7:05:4a:16:7b:e1:2d:23:df: b5:28:66:97:4c:d6:d8:2b:44:1b:ea:2e:d4:62:5b: be:f7:62:06:be:6f:b0:a3:0e:11:cb:40:6c:1f:fe: 32:4e:8d:86:7e:89:c4:fb:3b:26:27:11:24:94:08: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6C:A2:66:43:3D:53:FF:35:6F:D9:F5:CC:15:AE:0F:35:20:62:EF X509v3 Authority Key Identifier: keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9a:05:3f:1f:0f:4c:41:4d:df:5f:1a:e1:7c:63:53:6b:6e: 5b:dc:b6:4e:f4:f1:33:78:42:76:f0:ff:1f:fc:23:83:ec:2d: 83:2b:93:9a:d7:60:07:72:52:7c:f4:81:df:ab:d0:70:39:d5: 3d:0b:55:8d:81:45:ca:e6:29:3a:d3:c5:39:91:14:f7:36:e6: 7f:fe:7c:8e:12:f8:26:8e:d5:ba:f6:48:b0:9c:c8:c2:57:74: d3:dc:06:d1:1e:d5:ee:15:4a:2d:2b:8c:39:60:b1:a0:e6:0d: c5:e1:da:cc:68:6b:36:41:b0:78:b1:42:c2:81:23:c8:89:06: 0e:cf:09:ff:ae:3f:25:cf:14:ea:c4:47:fb:03:81:ae:85:b0: 3c:c3:21:2c:0d:2d:2c:4a:86:23:0c:fa:a9:47:ae:f6:d8:3c: 62:14:b2:91:42:a5:5a:8f:02:f6:86:e9:e6:ef:e8:65:07:d2: 87:15:e0:82:d4:cf:c4:5e:2a:57:91:46:80:bd:49:e2:d0:b7: 71:20:a4:4e:d5:8a:14:dc:51:18:4d:f3:5d:35:08:c7:88:d2: 4b:10:ab:21:b8:23:29:7d:2a:eb:3b:4d:11:62:81:e1:c8:93: 7a:6b:b4:99:65:f1:65:38:fb:4e:76:9e:fb:be:4e:e9:16:28: f8:84:8e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3 MkZGRDE4NDkwHhcNMjUwNjE5MDMxMzQ5WhcNMjUwNjI2MDMxMzQ5WjAYMRYwFAYD VQQDEw02ODUzODA2ZC00MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkfb4zwbKWsfWbyzl82LMgdW1rvsITg3b1ldl4nPRYp3+iyrjxVMPz4tfRuL dhhebLzUknCPW+BBtZEGhIKo9LkJYWzYsMt3tls0CZ7A4iTBahbMi4PfeN24yya4 RiCN4p/LliuEHfsxtKOfJ4IMzS4klhsL9KkHbfsCCWs6FbnUo0Za9Xor6ry47SLx eiw+Lk2ExK8ab9AX7Wx9nIaCRRSZfjGllmni1BA4Aj94zFqn34mZBsGYgUjXOGgJ Pwz0GtKrwYbMREvXBUoWe+EtI9+1KGaXTNbYK0Qb6i7UYlu+92IGvm+wow4Ry0Bs H/4yTo2GfonE+zsmJxEklAhmDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVsomZD PVP/NW/Z9cwVrg81IGLvMB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3 REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm TWpMNDE3QzRPVnB5XzlHRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAImgU/Hw9MQU3fXxrhfGNTa25b3LZO9PEzeEJ28P8f/COD7C2DK5Oa 12AHclJ89IHfq9BwOdU9C1WNgUXK5ik608U5kRT3NuZ//nyOEvgmjtW69kiwnMjC V3TT3AbRHtXuFUotK4w5YLGg5g3F4drMaGs2QbB4sULCgSPIiQYOzwn/rj8lzxTq xEf7A4GuhbA8wyEsDS0sSoYjDPqpR6722DxiFLKRQqVajwL2hunm7+hlB9KHFeCC 1M/EXipXkUaAvUni0LdxIKRO1YoU3FEYTfNdNQjHiNJLEKshuCMpfSrrO00RYoHh yJN6a7SZZfFlOPtOdp77vk7pFij4hI7Q -----END CERTIFICATE-----Generated at Fri Jun 20 16:12:19 2025 by rpki-client