$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: LrR+upzuPvCgT2aFdMTVuCdJXSTGSswz65eezCrGdIM= Subject key identifier: D0:7C:51:34:E2:EF:5A:9D:F4:AA:DF:B6:39:99:BF:E0:66:AB:3C:BF Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0D86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D51 Signing time: Fri 18 Jul 2025 18:14:47 +0000 Manifest this update: Fri 18 Jul 2025 18:14:47 +0000 Manifest next update: Fri 25 Jul 2025 18:14:46 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: FeNcZx8AOaGBovZHGZSIv4ZP/bioKOvuadxlOviMjaw=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: EfyBsaHY8sXfh+FtDY0lWUNRe0HDOeGbUlITqUD7/qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Jul 18 18:14:47 2025 GMT Not After : Jul 25 18:14:46 2025 GMT Subject: CN=687a8f17-44dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:fc:13:c0:e1:ad:66:42:55:23:db:2e:d2:54: 80:da:f1:27:50:06:9f:82:da:1f:7e:ba:e5:0a:72: 83:5b:2f:81:32:1c:84:b4:4f:16:90:fb:6c:6c:2a: 76:33:1a:13:59:64:a9:3a:9e:e4:2f:10:e2:d9:6d: 45:e0:3b:43:44:c2:b4:dc:6e:cb:59:95:54:f8:9a: 7d:a1:af:86:0e:68:0b:65:6b:4e:16:8c:f6:be:6b: c0:0a:db:79:ad:92:02:55:54:84:bb:c0:e4:cf:7f: 84:a7:15:ee:2e:e5:df:65:13:c2:25:29:56:59:45: da:6a:fc:97:97:0a:0d:0b:14:fe:52:70:95:29:8f: 3a:45:be:6e:f2:51:42:c3:64:0a:8f:f2:34:c2:b3: a7:3f:dc:f8:4a:5f:0b:e1:a5:dd:dd:73:f9:ea:ed: 5c:9a:e2:2d:63:a4:50:b8:0f:02:f7:42:80:6e:b8: d3:b0:8c:fe:9d:1e:c5:e6:b2:4a:4b:b6:55:49:08: bb:c1:a6:a3:6f:1f:7c:7d:f3:64:ec:9d:f8:c7:72: 13:4a:16:c5:4d:f0:ed:14:5c:80:15:78:7a:f6:3d: 03:46:47:b1:2d:60:48:5c:e7:45:42:9f:14:80:b2: f5:67:8b:ec:2c:79:31:2e:52:79:69:fc:f0:c7:fb: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7C:51:34:E2:EF:5A:9D:F4:AA:DF:B6:39:99:BF:E0:66:AB:3C:BF X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:31:91:9e:0f:5d:63:8f:65:e3:36:6d:d6:0b:fe:bb:d3:53: 45:59:f0:55:09:78:55:29:20:9e:44:1b:fb:77:7e:d9:18:e4: 7b:7a:9b:bc:f2:5b:04:d5:e8:81:00:7f:c8:d8:29:34:67:48: 26:7b:64:8a:fd:6e:7f:8e:2c:dc:c5:56:2d:fd:d1:47:e4:41: e4:56:9d:ca:d9:cc:f2:46:b8:f0:f2:91:e2:bb:68:2c:f8:0c: a8:bb:2c:38:ac:d3:13:76:6c:62:e3:19:b6:c4:5a:3b:88:9e: 9a:7f:f8:c6:9e:cb:4b:c2:74:43:0d:c1:8c:df:2b:d3:be:fa: 2c:fa:88:af:d2:01:7f:c2:0e:6f:73:2c:f6:a3:08:59:13:01: b9:ab:61:c4:35:9c:b3:6c:25:1d:29:41:f5:ad:fc:36:2b:c2: c9:25:3e:83:ae:d4:18:d5:8d:49:1d:fa:13:7c:84:c4:48:7a: 38:36:1b:04:b3:1c:05:f1:eb:06:16:42:26:da:a7:85:4a:fa: c0:e8:d2:76:85:05:09:90:01:d1:f0:c9:06:d5:98:9a:52:56: a4:a9:13:04:b5:ae:9a:1f:d7:38:23:94:e9:fe:9b:f9:18:30: 7a:d6:6e:b3:fb:43:aa:30:ea:7e:e1:c5:cf:37:f3:0e:92:96: 00:e6:08:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUwNzE4MTgxNDQ3WhcNMjUwNzI1MTgxNDQ2WjAYMRYwFAYD VQQDEw02ODdhOGYxNy00NGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/vwTwOGtZkJVI9su0lSA2vEnUAafgtoffrrlCnKDWy+BMhyEtE8WkPtsbCp2 MxoTWWSpOp7kLxDi2W1F4DtDRMK03G7LWZVU+Jp9oa+GDmgLZWtOFoz2vmvACtt5 rZICVVSEu8Dkz3+EpxXuLuXfZRPCJSlWWUXaavyXlwoNCxT+UnCVKY86Rb5u8lFC w2QKj/I0wrOnP9z4Sl8L4aXd3XP56u1cmuItY6RQuA8C90KAbrjTsIz+nR7F5rJK S7ZVSQi7waajbx98ffNk7J34x3ITShbFTfDtFFyAFXh69j0DRkexLWBIXOdFQp8U gLL1Z4vsLHkxLlJ5afzwx/stIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB8UTTi 71qd9KrftjmZv+Bmqzy/MB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaMZGeD11jj2XjNm3WC/6701NFWfBVCXhVKSCeRBv7d37ZGOR7epu8 8lsE1eiBAH/I2Ck0Z0gme2SK/W5/jizcxVYt/dFH5EHkVp3K2czyRrjw8pHiu2gs +Ayouyw4rNMTdmxi4xm2xFo7iJ6af/jGnstLwnRDDcGM3yvTvvos+oiv0gF/wg5v cyz2owhZEwG5q2HENZyzbCUdKUH1rfw2K8LJJT6DrtQY1Y1JHfoTfITESHo4NhsE sxwF8esGFkIm2qeFSvrA6NJ2hQUJkAHR8MkG1ZiaUlakqRMEta6aH9c4I5Tp/pv5 GDB61m6z+0OqMOp+4cXPN/MOkpYA5ghw -----END CERTIFICATE-----Generated at Sun Jul 20 12:13:32 2025 by rpki-client