$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: EfEhPKg1IS5Ga1N7+7ii1jYhrlMZbTFECKgLBe25cMA= Subject key identifier: A2:31:4C:37:2D:CE:00:DB:22:83:6E:43:44:3F:1F:15:03:0D:95:DC Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A32 Signing time: Fri 18 Jul 2025 19:58:55 +0000 Manifest this update: Fri 18 Jul 2025 19:58:55 +0000 Manifest next update: Fri 25 Jul 2025 19:58:55 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: Nlp4yzRGzyjxedDLxPPPwwU4+Z39CQrT773ai7RLqPc=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2618 (0xa3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Jul 18 19:58:55 2025 GMT Not After : Jul 25 19:58:55 2025 GMT Subject: CN=687aa77f-631f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:58:82:f7:9a:de:b7:40:32:ec:9c:99:a2: 52:de:bd:45:3f:b8:00:a2:14:e3:83:cc:19:69:3d: 9b:28:61:9f:80:0e:4a:59:81:bc:f6:da:39:93:ff: 0e:0c:82:c2:06:84:fb:ff:27:66:61:51:cf:06:5a: 92:61:08:8e:58:21:59:90:90:07:bb:bd:7e:49:fe: b9:b7:28:bc:d8:d2:ac:2d:bf:bd:cd:ee:51:cc:24: cb:5f:d4:55:e7:a6:32:0a:0c:cb:11:96:84:83:81: 48:4f:64:95:14:04:2b:10:09:cd:24:10:da:29:d4: 43:5d:cf:dd:d3:90:c8:ba:d7:be:16:ad:b2:9d:c7: 13:2c:36:6c:77:9e:e3:47:0d:be:ab:6d:f4:3f:0c: 17:34:b7:70:47:83:91:ce:11:46:29:cc:c6:9b:ff: 96:60:f8:18:eb:8a:e9:ee:30:6c:59:47:63:b5:26: 5f:f0:68:25:4b:54:62:01:6d:72:e1:c4:93:df:0d: e6:98:c5:01:56:8d:bf:8f:21:3d:1b:38:c6:c9:00: f9:e9:4c:44:ad:86:57:67:bc:45:92:9c:cf:35:af: 13:40:4f:3c:1a:d5:02:b3:82:a1:37:ec:1c:a0:89: 8b:ba:e7:5c:72:0c:1e:79:a3:0c:6f:14:74:e5:22: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:4C:37:2D:CE:00:DB:22:83:6E:43:44:3F:1F:15:03:0D:95:DC X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2e:2d:df:59:4e:e5:bf:7f:81:0a:8b:a0:59:4b:2c:81:7a: 44:37:29:14:13:fb:cb:d1:88:6c:0a:5f:3f:9b:8c:86:21:01: c8:44:ae:da:01:d5:9f:90:f3:43:ef:87:d0:e5:6d:cf:4d:c5: ee:d1:c6:02:e5:e5:dd:97:00:88:45:07:17:1e:ab:4a:4b:1f: df:97:6e:76:a4:d2:1c:35:01:d7:9b:77:58:fa:4c:20:c6:a8: f2:73:f2:e9:5c:5b:18:d7:4a:5c:46:86:c7:a4:22:c3:28:9b: fb:cf:b8:ca:d6:1f:51:09:b6:92:35:7a:2d:26:34:51:3f:60: 90:c6:f8:3b:47:a0:7c:8b:69:4a:6b:26:e0:5a:29:a3:1b:4a: 16:a4:6c:15:6f:ff:05:5c:24:9a:17:8e:29:1e:0e:4e:76:1f: 88:b5:61:16:7f:17:19:63:90:d7:56:68:cc:57:73:48:1b:c6: df:a3:ba:c9:1a:5c:68:88:9c:2b:b9:c8:df:95:63:9f:2d:5a: 62:ff:1e:a2:8c:cf:2e:2e:3a:04:3a:c4:dd:b0:d2:95:e7:7d: bb:70:57:5d:ae:c1:08:ca:72:d5:89:0c:9e:4b:e1:97:bf:13: a9:f3:43:e8:ae:a6:76:b2:99:12:42:11:d3:6b:09:1c:37:3b: 49:89:0f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwNzE4MTk1ODU1WhcNMjUwNzI1MTk1ODU1WjAYMRYwFAYD VQQDEw02ODdhYTc3Zi02MzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e1Ygvea3rdAMuycmaJS3r1FP7gAohTjg8wZaT2bKGGfgA5KWYG89to5k/8O DILCBoT7/ydmYVHPBlqSYQiOWCFZkJAHu71+Sf65tyi82NKsLb+9ze5RzCTLX9RV 56YyCgzLEZaEg4FIT2SVFAQrEAnNJBDaKdRDXc/d05DIute+Fq2ynccTLDZsd57j Rw2+q230PwwXNLdwR4ORzhFGKczGm/+WYPgY64rp7jBsWUdjtSZf8GglS1RiAW1y 4cST3w3mmMUBVo2/jyE9GzjGyQD56UxErYZXZ7xFkpzPNa8TQE88GtUCs4KhN+wc oImLuudccgweeaMMbxR05SKnsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIxTDct zgDbIoNuQ0Q/HxUDDZXcMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeLi3fWU7lv3+BCougWUssgXpENykUE/vL0YhsCl8/m4yGIQHIRK7a AdWfkPND74fQ5W3PTcXu0cYC5eXdlwCIRQcXHqtKSx/fl252pNIcNQHXm3dY+kwg xqjyc/LpXFsY10pcRobHpCLDKJv7z7jK1h9RCbaSNXotJjRRP2CQxvg7R6B8i2lK aybgWimjG0oWpGwVb/8FXCSaF44pHg5Odh+ItWEWfxcZY5DXVmjMV3NIG8bfo7rJ GlxoiJwrucjflWOfLVpi/x6ijM8uLjoEOsTdsNKV5327cFddrsEIynLViQyeS+GX vxOp80PorqZ2spkSQhHTawkcNztJiQ+R -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:12 2025 by rpki-client