$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: t4bNrHQlgYWycyyMIno/lBsy5gzyleErhgmq70YxrXY= Subject key identifier: EB:6A:80:C6:83:0A:CD:44:4C:8F:9A:A7:86:01:1A:C9:5E:F3:CD:2D Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0A26 Signing time: Sun 20 Jul 2025 19:51:56 +0000 Manifest this update: Sun 20 Jul 2025 19:51:55 +0000 Manifest next update: Sun 27 Jul 2025 19:51:55 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: WKxV5s2Wj5L/pVVUyU+bnAKZo1o0EjmHpKWPWZyfqL8=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Jul 20 19:51:55 2025 GMT Not After : Jul 27 19:51:55 2025 GMT Subject: CN=687d48dc-118e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:2f:9f:b7:98:e0:52:82:7e:31:c4:0d:d8: 1b:23:9b:6a:90:e3:29:2c:26:c0:a2:31:82:d1:b5: 1b:a3:d0:d1:36:ed:7b:3a:de:35:f4:db:3c:05:9b: 97:0d:fc:f9:ff:ff:81:ab:46:5d:86:4d:57:ca:d1: db:28:96:00:b2:67:28:12:a3:ef:06:b8:7e:46:82: 88:40:5f:30:53:61:13:00:30:bc:53:81:33:8e:e0: 9e:d7:41:82:ad:6f:6f:42:3e:e6:f0:57:e2:14:e2: 76:31:61:01:2b:68:26:1f:67:26:5e:6f:b1:6b:34: 48:86:9b:5a:36:33:cf:c3:fe:c3:7a:eb:53:27:83: 3d:51:99:86:27:c5:98:17:45:f8:b2:4f:32:04:54: af:8c:77:19:b1:39:7b:a3:97:f0:b3:08:9b:ca:8c: 74:7a:86:a7:a1:7e:9a:0b:e5:d9:d8:a4:ee:f8:8e: 0f:b8:95:0d:3e:f3:d2:ee:28:f5:6b:ed:79:a3:f0: 09:86:2b:6b:4b:58:6f:9a:53:8e:5b:d1:3b:13:e4: 9b:84:53:11:94:9b:d2:ae:0a:44:fa:2e:99:e9:21: 65:85:31:18:f8:01:a2:b3:ea:6a:0f:ee:f3:99:cc: fe:07:e6:49:47:30:a8:60:35:db:70:0a:f5:02:39: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6A:80:C6:83:0A:CD:44:4C:8F:9A:A7:86:01:1A:C9:5E:F3:CD:2D X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:49:de:a2:7c:0c:35:04:9c:a7:08:38:fb:b8:29:ae:60:08: e7:3d:fc:7e:5e:47:71:ec:ca:31:96:a5:65:22:4a:70:10:85: 59:3b:c3:b0:18:0a:0d:00:b9:27:b0:62:5a:53:ed:9d:11:32: e9:da:1e:61:cd:21:1c:07:01:24:e4:05:c3:33:1d:0c:41:e1: 70:19:28:51:54:7c:42:02:22:4c:63:77:d3:e4:99:7e:e4:da: 28:88:4f:aa:25:12:4a:d0:2e:13:d8:d7:d9:69:8b:f7:7b:73: cf:2b:4b:60:3e:fd:0a:de:a8:12:75:5d:8a:c6:3a:3f:23:e0: c7:f1:ec:68:e9:a9:db:12:84:69:3c:49:0d:10:5b:55:a7:78: 8b:e3:43:e1:30:4d:f4:99:04:17:51:82:21:e2:98:6b:44:57: e6:98:9a:4a:ff:35:d8:e5:21:20:75:74:7e:eb:d8:e2:b7:b4: 71:45:68:50:6f:45:25:5e:0e:a2:f9:95:42:7e:92:db:e7:0a: 85:70:03:c5:03:b1:c8:92:a0:1c:7a:89:38:9a:5c:11:1f:f6: 44:b8:4f:66:81:15:02:e5:cb:76:0f:96:d6:27:8e:13:aa:00: 7d:db:e6:40:55:21:4d:28:d3:b1:00:65:5b:b9:3d:eb:74:b6: 4e:88:4a:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjUwNzIwMTk1MTU1WhcNMjUwNzI3MTk1MTU1WjAYMRYwFAYD VQQDEw02ODdkNDhkYy0xMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmkvn7eY4FKCfjHEDdgbI5tqkOMpLCbAojGC0bUbo9DRNu17Ot419Ns8BZuX Dfz5//+Bq0Zdhk1XytHbKJYAsmcoEqPvBrh+RoKIQF8wU2ETADC8U4EzjuCe10GC rW9vQj7m8FfiFOJ2MWEBK2gmH2cmXm+xazRIhptaNjPPw/7DeutTJ4M9UZmGJ8WY F0X4sk8yBFSvjHcZsTl7o5fwswibyox0eoanoX6aC+XZ2KTu+I4PuJUNPvPS7ij1 a+15o/AJhitrS1hvmlOOW9E7E+SbhFMRlJvSrgpE+i6Z6SFlhTEY+AGis+pqD+7z mcz+B+ZJRzCoYDXbcAr1AjkgnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtqgMaD Cs1ETI+ap4YBGsle880tMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCESd6ifAw1BJynCDj7uCmuYAjnPfx+Xkdx7MoxlqVlIkpwEIVZO8Ow GAoNALknsGJaU+2dETLp2h5hzSEcBwEk5AXDMx0MQeFwGShRVHxCAiJMY3fT5Jl+ 5NooiE+qJRJK0C4T2NfZaYv3e3PPK0tgPv0K3qgSdV2Kxjo/I+DH8exo6anbEoRp PEkNEFtVp3iL40PhME30mQQXUYIh4phrRFfmmJpK/zXY5SEgdXR+69jit7RxRWhQ b0UlXg6i+ZVCfpLb5wqFcAPFA7HIkqAceok4mlwRH/ZEuE9mgRUC5ct2D5bWJ44T qgB92+ZAVSFNKNOxAGVbuT3rdLZOiEoG -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:12 2025 by rpki-client