$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: WaJ0J+tL0eTO0c3tSCQNukKQ8OBYp5zmcRLxMZe7zTk= Subject key identifier: BD:8C:61:91:16:FA:C6:C2:DA:DF:50:46:DE:8C:65:58:FC:3B:C0:EB Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 07D3 Signing time: Sun 08 Jun 2025 20:41:56 +0000 Manifest this update: Sun 08 Jun 2025 20:41:55 +0000 Manifest next update: Sun 15 Jun 2025 20:41:55 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: SKEwDkRV7/pfB7eFzEmHVtLMXEIlUo3hGgrKU+9Pfas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Jun 8 20:41:55 2025 GMT Not After : Jun 15 20:41:55 2025 GMT Subject: CN=6845f593-e9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:11:07:6b:3c:d0:33:34:41:1b:60:f4:5b: 64:80:27:18:5c:f0:d6:60:95:a6:b3:20:72:35:ae: e4:07:9c:14:b4:9c:03:c9:41:7f:fa:de:56:9c:5d: 5e:eb:28:80:bc:a8:02:15:f4:61:e5:76:30:43:f3: c7:9d:52:02:a9:a4:ab:02:1d:df:27:a6:a9:79:a6: 23:9d:46:5d:c2:b5:7b:1c:be:ee:0a:ab:bf:8d:86: c8:c4:70:7e:0a:4b:aa:08:32:fe:b9:dd:9d:d0:cd: 0c:01:f9:7a:f9:5e:45:49:61:93:2a:b4:86:e7:08: dc:22:28:5c:1d:e0:b8:a3:1b:f3:5f:91:02:ce:fb: 7f:4c:f3:60:a4:56:66:6c:5b:57:8b:fd:e5:7e:19: 75:bb:71:f8:d2:23:2c:67:26:26:5e:25:56:c1:97: 78:d9:61:18:76:aa:b1:bd:89:51:19:1c:e3:36:ec: 2a:aa:a5:08:87:78:77:04:f5:3f:b2:28:be:5b:05: 55:08:57:2f:b9:e1:31:d7:58:ba:03:db:3c:d7:e8: 1a:19:fc:8f:6f:9f:ca:cc:9e:7f:52:35:32:95:aa: ef:bd:29:52:51:80:90:3d:87:73:88:aa:e2:f4:46: 68:e4:7f:4f:7e:67:e9:66:1f:5a:2b:6e:aa:46:77: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8C:61:91:16:FA:C6:C2:DA:DF:50:46:DE:8C:65:58:FC:3B:C0:EB X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:bc:8a:ff:4d:db:f2:d9:1e:93:44:9a:76:76:53:05:1f: 23:50:02:22:b9:7d:f2:1d:b5:e7:cc:9f:56:81:7e:0e:f4:a9: 50:31:df:d1:bd:bf:e9:22:94:07:5b:28:16:e3:16:69:29:99: 62:23:b7:8a:79:a3:41:9b:52:0a:72:96:56:58:9a:40:55:1b: 03:83:a2:ab:d1:ad:f1:4b:58:20:3b:3d:8c:d2:91:5f:45:cd: 90:a3:4d:f2:0c:23:33:69:57:b0:a3:99:6d:9e:13:c2:ef:d3: b0:a0:d2:1b:79:69:4f:3b:5f:b8:3d:41:49:ec:41:e0:d0:58: 97:c6:83:14:cf:92:e8:ee:18:87:00:cf:06:bc:9c:6b:39:4c: 7c:e1:18:56:6c:b3:43:74:f9:04:f9:f0:a4:d0:f2:b6:b0:08: 37:82:41:9d:8b:86:6b:d9:e9:44:3b:96:b0:8f:41:0b:34:d2: f5:33:15:71:bc:68:e4:0a:4b:75:5f:98:b2:4d:b1:7e:30:bd: de:5e:5f:e5:12:60:a2:68:00:ef:6f:94:7a:09:21:31:cb:ce: 93:72:6a:d8:ab:06:12:b7:95:b3:3d:19:80:bf:a6:cf:a7:6d: 79:2a:12:d0:d9:85:8b:fc:c0:b9:18:0a:ea:44:e6:aa:11:75: fa:56:11:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUwNjA4MjA0MTU1WhcNMjUwNjE1MjA0MTU1WjAYMRYwFAYD VQQDEw02ODQ1ZjU5My1lOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLwRB2s80DM0QRtg9FtkgCcYXPDWYJWmsyByNa7kB5wUtJwDyUF/+t5WnF1e 6yiAvKgCFfRh5XYwQ/PHnVICqaSrAh3fJ6apeaYjnUZdwrV7HL7uCqu/jYbIxHB+ CkuqCDL+ud2d0M0MAfl6+V5FSWGTKrSG5wjcIihcHeC4oxvzX5ECzvt/TPNgpFZm bFtXi/3lfhl1u3H40iMsZyYmXiVWwZd42WEYdqqxvYlRGRzjNuwqqqUIh3h3BPU/ sii+WwVVCFcvueEx11i6A9s81+gaGfyPb5/KzJ5/UjUylarvvSlSUYCQPYdziKri 9EZo5H9PfmfpZh9aK26qRnd9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2MYZEW +sbC2t9QRt6MZVj8O8DrMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1uryK/03b8tkek0SadnZTBR8jUAIiuX3yHbXnzJ9WgX4O9KlQMd/R vb/pIpQHWygW4xZpKZliI7eKeaNBm1IKcpZWWJpAVRsDg6Kr0a3xS1ggOz2M0pFf Rc2Qo03yDCMzaVewo5ltnhPC79OwoNIbeWlPO1+4PUFJ7EHg0FiXxoMUz5Lo7hiH AM8GvJxrOUx84RhWbLNDdPkE+fCk0PK2sAg3gkGdi4Zr2elEO5awj0ELNNL1MxVx vGjkCkt1X5iyTbF+ML3eXl/lEmCiaADvb5R6CSExy86TcmrYqwYSt5WzPRmAv6bP p215KhLQ2YWL/MC5GArqROaqEXX6VhGZ -----END CERTIFICATE-----Generated at Mon Jun 9 01:30:40 2025 by rpki-client