$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft File: TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json) Hash identifier: hTRHiOGWMePpgw4mRbtPpp83zj6QZ8+x9eXrYbGs5oY= Subject key identifier: F6:93:B0:A5:58:FB:46:AB:A2:1A:6E:CD:5E:1A:37:73:4B:83:C4:26 Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 Certificate issuer: /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft Manifest number: 8C Signing time: Mon 21 Jul 2025 06:40:42 +0000 Manifest this update: Mon 21 Jul 2025 06:40:42 +0000 Manifest next update: Mon 28 Jul 2025 06:40:42 +0000 Files and hashes: 1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: OGnBDBtj7RM/8nsiqmr96tk8vg4ZVltGAIY/LOJqTq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Validity Not Before: Jul 21 06:40:42 2025 GMT Not After : Jul 28 06:40:42 2025 GMT Subject: CN=687de0ea-0aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:c3:27:ad:c6:41:0b:98:9a:1d:66:d3:10: 01:3a:f1:c0:4f:0e:c5:db:87:9c:1d:9b:99:69:0d: dd:f5:61:42:01:b1:91:96:4c:ef:fa:62:12:12:f6: 50:0d:db:a9:93:b6:f3:25:e8:b1:61:40:35:31:a7: a3:c2:94:25:b0:74:a4:33:57:03:16:e3:06:5b:b8: 90:a4:38:8c:3a:06:e3:d1:21:f5:45:bf:2b:46:0d: 9b:21:1b:0b:53:c7:6b:9d:00:b6:13:b6:ac:f1:84: 2c:94:d8:0e:ef:3f:93:1f:fb:47:d3:6f:c3:c4:18: 5f:41:46:02:3a:e0:b4:de:d2:15:a0:fa:07:a3:c7: 50:c3:68:4b:d9:2c:00:bf:22:7a:b6:fd:11:03:c7: e7:9f:3a:c7:13:9e:c0:fa:d6:31:b0:7f:bc:33:2b: b5:23:dd:93:54:53:01:44:90:a3:52:7d:6a:19:72: bb:e2:8c:5f:b0:48:70:61:b1:61:66:05:3e:b7:a0: 85:4b:73:45:3f:f4:35:49:40:8d:09:ed:bb:c1:df: da:76:d8:d8:fb:10:91:ec:61:8b:cc:bf:7b:2b:09: af:6f:d1:fd:51:50:3f:7f:7e:70:6d:3e:fa:9e:71: 21:41:ed:3f:f4:f9:48:f2:6d:3a:d2:d8:c6:ac:e6: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:B0:A5:58:FB:46:AB:A2:1A:6E:CD:5E:1A:37:73:4B:83:C4:26 X509v3 Authority Key Identifier: keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1d:13:96:23:e7:05:b6:53:1e:2c:98:4d:1a:38:49:7b:a4: f0:57:ba:07:c9:eb:2c:0b:3a:fd:26:1e:c4:cc:ce:76:a3:4f: 14:9c:46:d1:c3:60:a8:e5:34:4e:03:90:2c:12:c9:be:e1:2c: 57:f8:c3:4d:cb:a2:c5:4b:7a:dc:c0:ce:75:41:fc:72:da:2a: 18:c4:7a:28:77:36:05:c2:58:61:54:49:fd:f5:c4:d1:f3:1e: 4e:43:b6:c8:cc:fc:6d:87:c3:0a:90:51:25:c7:50:4e:58:54: 59:45:9c:f2:e2:db:f8:34:ca:c2:7d:4a:8f:df:ec:f7:01:f8: 1c:f1:af:35:07:90:7d:d1:05:0c:c7:c1:9d:14:7b:d3:84:47: 34:7e:b2:a0:da:1a:5b:0a:ec:b2:97:12:67:2f:2f:15:77:cf: a7:3b:28:70:a8:bb:72:2d:ce:92:98:9a:1e:ce:b5:ce:69:da: 37:90:73:92:7e:c5:11:09:a4:76:ea:d2:bc:44:09:5e:90:c7: 69:2a:b6:ea:57:a5:7c:de:6e:f2:2f:fa:b8:b6:c0:bd:a2:2a: fd:cf:7b:b1:72:dd:5a:06:6c:5f:ed:b3:21:6f:55:16:5a:96: 7a:20:98:fd:fd:a2:ed:5b:e5:2f:a0:46:15:6c:51:5f:50:86: e4:fc:6f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCMjQxMTAvBgNVBAUTKDRGMTgyNzNEODg1NTZFM0ExRDZFRDgxNzhCODA5NTI4 RDk5MEE2OTEwHhcNMjUwNzIxMDY0MDQyWhcNMjUwNzI4MDY0MDQyWjAYMRYwFAYD VQQDEw02ODdkZTBlYS0wYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRfDJ63GQQuYmh1m0xABOvHATw7F24ecHZuZaQ3d9WFCAbGRlkzv+mISEvZQ Ddupk7bzJeixYUA1MaejwpQlsHSkM1cDFuMGW7iQpDiMOgbj0SH1Rb8rRg2bIRsL U8drnQC2E7as8YQslNgO7z+TH/tH02/DxBhfQUYCOuC03tIVoPoHo8dQw2hL2SwA vyJ6tv0RA8fnnzrHE57A+tYxsH+8Myu1I92TVFMBRJCjUn1qGXK74oxfsEhwYbFh ZgU+t6CFS3NFP/Q1SUCNCe27wd/adtjY+xCR7GGLzL97Kwmvb9H9UVA/f35wbT76 nnEhQe0/9PlI8m060tjGrObhmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaTsKVY +0arohpuzV4aN3NLg8QmMB8GA1UdIwQYMBaAFE8YJz2IVW46HW7YF4uAlSjZkKaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xNTQ3NUQ4NjhG NzYxMUVGODRFQzc3MTVDNEY5QUUwMi9UeGduUFloVmJqb2RidGdYaTRDVktObVFw cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0IyNC8xNTQ3NUQ4NjhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi9UeGduUFloVmJq b2RidGdYaTRDVktObVFwcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7HROWI+cFtlMeLJhNGjhJe6TwV7oHyessCzr9Jh7EzM52o08UnEbR w2Co5TROA5AsEsm+4SxX+MNNy6LFS3rcwM51Qfxy2ioYxHoodzYFwlhhVEn99cTR 8x5OQ7bIzPxth8MKkFElx1BOWFRZRZzy4tv4NMrCfUqP3+z3Afgc8a81B5B90QUM x8GdFHvThEc0frKg2hpbCuyylxJnLy8Vd8+nOyhwqLtyLc6SmJoezrXOado3kHOS fsURCaR26tK8RAlekMdpKrbqV6V83m7yL/q4tsC9oir9z3uxct1aBmxf7bMhb1UW WpZ6IJj9/aLtW+UvoEYVbFFfUIbk/G/S -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:17 2025 by rpki-client