$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: hqbm+FRQHZSpXpB6+1rR9iw8e0tmOUEdaecOZZ1hZnU= Subject key identifier: 1B:6C:C0:04:D1:5B:0F:B0:86:45:C9:1F:DE:3A:D8:F5:F5:24:61:F9 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 0374 Signing time: Fri 25 Jul 2025 02:16:12 +0000 Manifest this update: Fri 25 Jul 2025 02:16:12 +0000 Manifest next update: Fri 01 Aug 2025 02:16:12 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: Apuec4e+DZBuYjWbXVrI/f/e+4NObyqoWGMPVpaELr4=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: SCTf0mwZLUHqFVPegVRVJr7Eh8lVpCyL1GKCV+U6N7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 02:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: Jul 25 02:16:12 2025 GMT Not After : Aug 1 02:16:12 2025 GMT Subject: CN=6882e8ec-d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:5d:01:b0:ca:1d:c7:ef:54:4f:47:48:a9: 34:38:72:a2:80:89:4c:04:b5:6b:cd:97:af:bb:e5: 45:dc:c9:6b:c0:da:be:b0:b0:7e:3d:cb:31:0d:7c: ba:b9:68:33:c7:31:bc:a1:d5:f3:ba:ba:e7:31:58: ff:cd:14:b6:1e:22:0d:e7:01:a2:f0:b2:05:26:44: f0:d3:55:c6:f9:0e:52:1b:09:1c:a8:16:0f:5d:cf: ab:2e:10:65:e9:47:5b:82:69:17:e0:83:eb:0c:22: e6:f5:c0:2b:ed:ba:37:6f:c5:25:33:a3:02:06:da: ab:35:42:be:7e:0b:2c:f2:2b:98:87:58:41:49:03: 76:47:67:b0:dc:02:9d:c8:8c:86:67:10:5d:3b:d0: c4:bc:fb:80:59:e9:65:67:aa:42:bb:bf:0b:6e:f6: 64:62:fe:f8:92:3e:a8:f2:ca:c6:f5:23:d1:30:85: 18:57:53:0d:2a:fa:db:bb:b0:b7:99:73:e1:5c:07: 55:76:72:29:dd:06:8d:66:b0:6e:ba:5d:36:31:7d: cb:ac:ab:dd:4c:4e:cf:d7:e1:b5:7e:4c:74:e2:c7: 79:91:b3:e8:e5:e6:5f:a4:89:9e:47:40:33:57:e3: 45:6e:79:78:ef:db:50:0c:f9:a2:34:c7:d1:b5:1e: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6C:C0:04:D1:5B:0F:B0:86:45:C9:1F:DE:3A:D8:F5:F5:24:61:F9 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:73:48:52:79:ff:0a:ba:f3:81:c4:1c:90:c0:92:11:19: 2c:cb:fb:1f:51:bf:00:c0:62:2d:86:2b:a3:2b:7e:88:e1:f7: 2a:e7:9d:15:ed:94:84:39:fe:8d:c7:20:e3:e3:59:ff:9a:1c: c9:19:67:db:f1:78:03:0b:51:5e:af:66:46:3c:73:d6:4f:8c: 9a:6e:7a:12:df:b9:16:20:64:a5:73:41:3c:ca:bd:f1:fb:b8: 64:7c:f5:90:ba:de:7b:2f:62:e1:93:42:37:91:cc:bb:b8:78: bb:d5:84:3e:b8:dd:ed:40:39:71:0e:15:03:ad:dc:af:56:30: ad:f5:cd:f4:3d:06:45:7f:fc:97:ea:7b:e7:d5:68:fd:71:82: 8d:da:bb:01:47:50:3c:e4:c9:c5:5d:7e:69:28:1d:e2:47:9a: 2f:7b:36:8b:00:b5:11:78:ef:56:0b:7b:84:93:47:98:ab:c8: ab:c5:2b:9e:6c:67:78:41:d2:fd:ed:d8:66:3e:fe:f3:b1:ca: f5:06:a3:f8:7a:c5:16:6f:42:a4:b3:f1:e0:d2:df:c2:2e:72: 02:42:04:25:6c:2a:47:b9:67:be:42:7a:b0:16:49:eb:0f:3c: 43:4d:c6:fa:b7:3f:04:e8:4c:e2:20:5f:e5:95:ea:25:e3:24: 0a:15:fe:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKEI0OENCMTgwODI2MkI4MDk5Qjg3MjcyQTU3NkZGRURD MTlBMzk2QkQwHhcNMjUwNzI1MDIxNjEyWhcNMjUwODAxMDIxNjEyWjAYMRYwFAYD VQQDEw02ODgyZThlYy1kNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrBdAbDKHcfvVE9HSKk0OHKigIlMBLVrzZevu+VF3MlrwNq+sLB+PcsxDXy6 uWgzxzG8odXzurrnMVj/zRS2HiIN5wGi8LIFJkTw01XG+Q5SGwkcqBYPXc+rLhBl 6UdbgmkX4IPrDCLm9cAr7bo3b8UlM6MCBtqrNUK+fgss8iuYh1hBSQN2R2ew3AKd yIyGZxBdO9DEvPuAWellZ6pCu78LbvZkYv74kj6o8srG9SPRMIUYV1MNKvrbu7C3 mXPhXAdVdnIp3QaNZrBuul02MX3LrKvdTE7P1+G1fkx04sd5kbPo5eZfpImeR0Az V+NFbnl479tQDPmiNMfRtR4wdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtswATR Ww+whkXJH9462PX1JGH5MB8GA1UdIwQYMBaAFLSMsYCCYrgJm4cnKldv/twZo5a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVBbWJoeWNxVjJfLTNCbWps cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0JtamxyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVB bWJoeWNxVjJfLTNCbWpscjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhxHNIUnn/CrrzgcQckMCSERksy/sfUb8AwGIthiujK36I4fcq550V 7ZSEOf6NxyDj41n/mhzJGWfb8XgDC1Fer2ZGPHPWT4yabnoS37kWIGSlc0E8yr3x +7hkfPWQut57L2Lhk0I3kcy7uHi71YQ+uN3tQDlxDhUDrdyvVjCt9c30PQZFf/yX 6nvn1Wj9cYKN2rsBR1A85MnFXX5pKB3iR5ovezaLALUReO9WC3uEk0eYq8irxSue bGd4QdL97dhmPv7zscr1BqP4esUWb0Kks/Hg0t/CLnICQgQlbCpHuWe+QnqwFknr DzxDTcb6tz8E6EziIF/lleol4yQKFf5R -----END CERTIFICATE-----Generated at Sat Jul 26 13:22:32 2025 by rpki-client