$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: n7GukxWl/IkDMh/adXxs25cXJdh+jQZg8QONGX8h7Ao= Subject key identifier: F1:F7:B2:51:D6:BC:6B:A6:38:91:A3:41:99:93:D6:88:77:9B:1E:88 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A18 Signing time: Sun 22 Jun 2025 19:27:53 +0000 Manifest this update: Sun 22 Jun 2025 19:27:53 +0000 Manifest next update: Sun 29 Jun 2025 19:27:53 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: csUqvRs9HqrB0r5ZDJQ1CqMmt3fkxBf7uUelHetMukY=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 18:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Jun 22 19:27:53 2025 GMT Not After : Jun 29 19:27:53 2025 GMT Subject: CN=68585939-e3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:d5:5f:09:74:9a:da:dc:00:b3:7b:02:51: 1c:67:03:08:02:71:d3:e0:af:23:cc:fc:bb:9a:34: ef:11:49:1c:dd:a8:be:ec:a2:63:67:32:24:8c:9b: d9:f7:a1:03:c2:67:bc:70:51:16:21:fb:07:50:72: c6:0e:36:90:33:d7:6c:09:65:84:5a:8c:be:e2:d0: 57:1d:5e:52:aa:7b:ea:91:7d:be:d7:05:c0:f0:75: f3:69:d9:cd:9a:45:c1:3d:57:9e:ab:ad:08:6a:48: 32:83:37:88:cc:c7:42:ca:d4:d0:ea:d5:3f:1f:0c: 45:c5:0a:fc:2b:5d:5f:91:29:04:a0:b5:29:ea:d2: f7:98:ec:f9:95:1e:5d:ff:7a:98:ed:15:ca:30:e6: 4c:10:fa:43:99:3d:78:5e:f7:63:c9:00:9e:9b:0d: ff:4a:4f:42:d2:62:3b:56:f2:03:fd:b8:a1:70:22: 03:21:d9:f1:2a:68:51:8f:c4:34:aa:3f:78:68:1d: da:9d:75:36:50:60:a6:88:94:18:28:c7:45:03:6c: f1:af:81:47:82:cb:4a:5a:fd:58:5c:97:56:3e:9c: 6a:f6:89:fa:97:d0:8f:9f:fc:5c:95:d4:cb:2b:7e: 4e:7c:81:64:2a:83:5f:73:42:dd:0a:bd:9a:45:3f: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F7:B2:51:D6:BC:6B:A6:38:91:A3:41:99:93:D6:88:77:9B:1E:88 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a7:ce:3c:8e:25:9e:63:a4:00:88:68:2f:f4:81:5e:84:75: 44:9d:6d:58:1c:2c:dd:89:bc:72:92:f2:88:ac:40:ab:fc:85: 27:c7:d5:96:4e:6b:4b:ff:bd:b1:b0:89:a3:0b:72:f2:1a:48: 10:a3:4a:0e:89:d7:c5:0c:74:f9:b6:8e:21:15:7e:7b:af:e0: 32:d1:44:e3:ca:a6:65:5e:57:d6:57:32:88:bc:04:e0:ad:db: b5:f4:3a:ed:0a:e2:36:97:a2:48:f1:45:5f:09:c3:53:06:68: 7e:f1:d8:de:2b:8e:4b:e5:49:2a:e2:e1:65:bc:31:79:fe:8a: 1c:c6:ee:87:fb:6a:c6:f7:9f:bd:a6:09:17:d9:0b:91:80:fd: 12:7b:53:68:ea:18:84:99:3f:c8:0c:91:32:85:6a:57:04:b3: ac:d2:e7:97:c4:00:05:0f:9a:b4:c1:61:d4:d1:77:f7:8b:90: d0:0d:49:44:75:58:19:0f:74:02:74:e3:97:5f:8a:9d:d5:de: cc:e0:78:b0:46:6d:45:39:61:49:f6:0b:0b:9f:20:3f:ab:f3: 10:bf:84:b5:f5:49:90:58:66:7b:84:02:37:81:19:c7:2f:c2: 4f:30:5d:99:94:e7:40:59:4d:a5:c1:f6:8c:01:b5:19:8b:92: 3b:8e:6f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUwNjIyMTkyNzUzWhcNMjUwNjI5MTkyNzUzWjAYMRYwFAYD VQQDEw02ODU4NTkzOS1lM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyevVXwl0mtrcALN7AlEcZwMIAnHT4K8jzPy7mjTvEUkc3ai+7KJjZzIkjJvZ 96EDwme8cFEWIfsHUHLGDjaQM9dsCWWEWoy+4tBXHV5SqnvqkX2+1wXA8HXzadnN mkXBPVeeq60IakgygzeIzMdCytTQ6tU/HwxFxQr8K11fkSkEoLUp6tL3mOz5lR5d /3qY7RXKMOZMEPpDmT14XvdjyQCemw3/Sk9C0mI7VvID/bihcCIDIdnxKmhRj8Q0 qj94aB3anXU2UGCmiJQYKMdFA2zxr4FHgstKWv1YXJdWPpxq9on6l9CPn/xcldTL K35OfIFkKoNfc0LdCr2aRT+EQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH3slHW vGumOJGjQZmT1oh3mx6IMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8p848jiWeY6QAiGgv9IFehHVEnW1YHCzdibxykvKIrECr/IUnx9WW TmtL/72xsImjC3LyGkgQo0oOidfFDHT5to4hFX57r+Ay0UTjyqZlXlfWVzKIvATg rdu19DrtCuI2l6JI8UVfCcNTBmh+8djeK45L5Ukq4uFlvDF5/oocxu6H+2rG95+9 pgkX2QuRgP0Se1No6hiEmT/IDJEyhWpXBLOs0ueXxAAFD5q0wWHU0Xf3i5DQDUlE dVgZD3QCdOOXX4qd1d7M4HiwRm1FOWFJ9gsLnyA/q/MQv4S19UmQWGZ7hAI3gRnH L8JPMF2ZlOdAWU2lwfaMAbUZi5I7jm9z -----END CERTIFICATE-----Generated at Sun Jun 22 22:08:06 2025 by rpki-client