$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft File: tMuMrEr2jfxZVs5gy7DYDTECkYw.mft (raw, json) Hash identifier: 1ZPZioQ8xEu3GH8Ps9JwVK+pHHLb/JCZGk5x5DeLPpw= Subject key identifier: CA:8C:90:AC:07:45:2A:06:93:49:6A:20:C8:1A:3B:FD:20:CE:C5:9F Authority key identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C Certificate issuer: /CN=A9110477/serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft Manifest number: 52 Signing time: Mon 21 Jul 2025 07:26:18 +0000 Manifest this update: Mon 21 Jul 2025 07:26:17 +0000 Manifest next update: Mon 28 Jul 2025 07:26:17 +0000 Files and hashes: 1: tMuMrEr2jfxZVs5gy7DYDTECkYw.crl (hash: 7WNw2UB0OC0mNEC9aVUVj31CTjMZQk/XCcbbK9micm4=) 2: 1918AF02596311F0BCB5E17AC4F9AE02.roa (hash: z369BR/Dwugu+7jfNK71QygpAHG3VyTTETfZorB0aM4=) 3: 189FDE6A596311F0BCB5E17AC4F9AE02.roa (hash: JJTSBt9FTC60hwlhpneg7m7U6lRpzKJDwR8dK/QViww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110477, serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C Validity Not Before: Jul 21 07:26:17 2025 GMT Not After : Jul 28 07:26:17 2025 GMT Subject: CN=687deb9a-76df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:fc:18:60:37:d3:ba:a2:be:ca:c2:70:ce: 81:49:49:55:d0:4d:16:e5:f2:ad:be:0b:c9:8e:83: 98:8d:a7:61:ae:cb:23:e3:aa:d2:1e:b9:ba:e8:1d: 6d:67:28:22:f3:33:9d:55:23:05:03:80:b7:ca:4c: 00:1d:0e:ef:52:b3:cf:4f:c9:d0:80:5f:fa:04:62: 66:07:da:a8:9c:37:05:f0:9d:65:51:84:a7:0b:21: 1c:b4:14:bb:66:08:ae:ea:88:a1:6d:e6:48:74:73: cb:ac:d7:89:62:1d:df:89:08:a4:8c:e7:42:e5:9f: f0:ed:06:db:43:61:0b:02:98:4b:c0:b6:dd:e0:44: a9:59:f3:a0:be:c1:41:b2:bf:1c:95:d1:14:ee:d7: 17:ea:6c:41:c3:eb:0a:95:13:84:88:96:99:cf:a1: 6d:ae:bb:89:ab:42:0c:23:e5:37:cc:c7:1d:51:70: fe:2f:75:88:57:08:5e:0f:63:fe:eb:28:00:15:dc: 74:b4:8e:ac:f0:8e:c7:92:61:65:11:ce:c3:f6:9d: 55:c8:80:5f:9d:00:80:39:bb:3d:e1:76:7c:a7:f1: f3:58:24:e5:4c:5b:59:fb:0d:78:4e:bc:7a:da:6a: b7:4c:ad:71:d0:36:11:c6:9e:90:01:6b:12:d6:52: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8C:90:AC:07:45:2A:06:93:49:6A:20:C8:1A:3B:FD:20:CE:C5:9F X509v3 Authority Key Identifier: keyid:B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0a:a8:4a:3a:f2:56:a3:29:83:d4:78:e9:aa:1c:51:50:7b: b1:68:f9:75:fb:c3:db:4e:a1:b2:79:98:3b:ea:27:1b:0d:8c: 7e:c1:74:e4:a3:71:c2:18:ba:b9:9d:c0:45:ec:ac:06:b4:f6: e0:c2:3e:bc:ea:6e:62:17:3c:ac:79:d5:9b:2e:ed:b3:e6:47: 8d:c0:c0:d7:2b:70:24:94:ca:42:1d:ab:71:9f:21:79:c3:e5: c9:8e:b8:d4:4d:c2:41:c9:ae:2a:de:e1:32:37:b6:d5:82:ef: 7f:c0:6d:8d:bd:87:04:06:8e:2a:51:20:d1:38:e6:bb:17:5e: c5:ee:09:62:aa:0d:f7:a2:d6:f0:5c:1b:bd:2b:8c:81:af:41: cf:0a:f7:69:ad:b7:60:1d:26:34:a1:2a:4c:51:7b:d2:85:6e: a0:a7:9b:8f:6e:8a:94:5e:07:bc:d0:f1:0f:33:da:b3:4c:9f: 4b:36:96:5f:c7:5e:2b:ea:a1:db:e1:0f:f5:a2:c1:13:ee:a5: 20:c5:24:f2:0a:a4:72:a9:7c:fa:98:24:d0:1d:58:98:14:0f: d0:8f:7f:26:f9:a6:17:97:96:24:5a:f1:91:b9:54:ce:b2:0d: 0f:e8:8c:7d:32:55:08:1f:b2:4f:48:e5:23:de:5d:8e:ef:09: 9a:da:59:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ3NzExMC8GA1UEBRMoQjRDQjhDQUM0QUY2OERGQzU5NTZDRTYwQ0JCMEQ4MEQz MTAyOTE4QzAeFw0yNTA3MjEwNzI2MTdaFw0yNTA3MjgwNzI2MTdaMBgxFjAUBgNV BAMTDTY4N2RlYjlhLTc2ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0jPwYYDfTuqK+ysJwzoFJSVXQTRbl8q2+C8mOg5iNp2GuyyPjqtIeubroHW1n KCLzM51VIwUDgLfKTAAdDu9Ss89PydCAX/oEYmYH2qicNwXwnWVRhKcLIRy0FLtm CK7qiKFt5kh0c8us14liHd+JCKSM50Lln/DtBttDYQsCmEvAtt3gRKlZ86C+wUGy vxyV0RTu1xfqbEHD6wqVE4SIlpnPoW2uu4mrQgwj5TfMxx1RcP4vdYhXCF4PY/7r KAAV3HS0jqzwjseSYWURzsP2nVXIgF+dAIA5uz3hdnyn8fNYJOVMW1n7DXhOvHra ardMrXHQNhHGnpABaxLWUqELAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyoyQrAdF KgaTSWogyBo7/SDOxZ8wHwYDVR0jBBgwFoAUtMuMrEr2jfxZVs5gy7DYDTECkYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDc3LzU3NTBFMEIyRTlF OTExRUZCNTAyQTU1RkM0RjlBRTAyL3RNdU1yRXIyamZ4WlZzNWd5N0RZRFRFQ2tZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE11TXJFcjJqZnhaVnM1Z3k3RFlEVEVDa1l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDc3LzU3NTBFMEIyRTlFOTExRUZCNTAyQTU1RkM0RjlBRTAyL3RNdU1yRXIyamZ4 WlZzNWd5N0RZRFRFQ2tZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKoKqEo68lajKYPUeOmqHFFQe7Fo+XX7w9tOobJ5mDvqJxsNjH7BdOSj ccIYurmdwEXsrAa09uDCPrzqbmIXPKx51Zsu7bPmR43AwNcrcCSUykIdq3GfIXnD 5cmOuNRNwkHJrire4TI3ttWC73/AbY29hwQGjipRINE45rsXXsXuCWKqDfei1vBc G70rjIGvQc8K92mtt2AdJjShKkxRe9KFbqCnm49uipReB7zQ8Q8z2rNMn0s2ll/H XivqodvhD/WiwRPupSDFJPIKpHKpfPqYJNAdWJgUD9CPfyb5pheXliRa8ZG5VM6y DQ/ojH0yVQgfsk9I5SPeXY7vCZraWSQ= -----END CERTIFICATE-----Generated at Tue Jul 22 12:20:15 2025 by rpki-client