$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft File: TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json) Hash identifier: VTDD/XgdQO+/6af/Y6DgIAs+3+aG7h4JLMp6p8vV/iw= Subject key identifier: D9:10:00:42:1E:5B:9E:6B:07:06:FE:86:11:30:33:63:98:F7:7B:96 Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 Certificate issuer: /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft Manifest number: 74 Signing time: Tue 03 Jun 2025 06:35:17 +0000 Manifest this update: Tue 03 Jun 2025 06:35:16 +0000 Manifest next update: Tue 10 Jun 2025 06:35:16 +0000 Files and hashes: 1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: 1KYHdmOpIYL8BXlWNmv/qU3WmYvOh7WTWuO1kZuM+fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691 Validity Not Before: Jun 3 06:35:16 2025 GMT Not After : Jun 10 06:35:16 2025 GMT Subject: CN=683e97a4-afa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:cd:f2:06:f7:dc:0f:a3:09:8e:db:44:28: 56:ac:da:3f:30:6f:c1:bc:20:d3:52:69:4b:12:77: 4f:fc:d1:80:6d:73:f2:28:82:42:84:3b:a6:d9:70: e1:d7:5a:40:74:1f:94:53:2d:cb:fd:c6:de:52:51: d0:cc:06:79:df:42:a0:15:4b:1b:7e:03:0c:4f:6f: 43:db:4e:7c:5f:86:83:68:a7:5b:cf:74:c0:10:c3: fd:81:4a:07:db:b2:c6:8d:28:00:ff:ac:83:c3:80: d1:14:16:7d:a7:3e:5f:5d:10:a6:06:84:e3:fb:41: 13:75:b7:6f:9d:c6:9c:b6:72:5f:9f:1f:83:4b:0f: 39:76:3a:41:6a:29:94:ae:5b:5c:0b:1d:ac:1a:14: c5:bd:1d:17:be:83:3e:87:97:d8:20:3b:cd:39:49: 14:fa:d6:5d:90:50:44:24:b6:7a:c3:2c:d1:1d:5e: 1a:b6:b4:d6:ab:68:7a:4c:4d:b8:8b:a2:00:61:5f: dc:37:8f:8b:94:57:d0:d2:6b:12:05:99:bb:d0:46: 2f:3b:c5:aa:8d:da:1a:14:e7:c1:87:da:34:6e:40: af:fd:d2:98:c8:04:17:87:d3:71:f8:43:a7:a7:0d: a1:53:c9:f4:c4:09:fa:22:5f:3e:34:bc:90:72:bd: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:10:00:42:1E:5B:9E:6B:07:06:FE:86:11:30:33:63:98:F7:7B:96 X509v3 Authority Key Identifier: keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c0:4f:e9:12:59:72:b9:c2:e3:26:de:80:a1:45:a7:12:38: bb:87:68:f3:bb:22:81:5e:cf:bb:50:4b:5c:b5:97:c9:02:93: 70:ef:fd:e0:bc:55:e4:4c:bc:a0:0b:09:f1:c3:79:06:af:19: 23:d9:21:8d:a5:b4:f3:90:6b:d0:c0:5d:e9:af:cf:23:0e:b0: f5:11:8f:d8:10:4f:fa:4e:8f:25:d5:af:21:77:79:86:40:6c: 2a:cb:62:f3:c2:95:2c:53:63:77:fa:16:58:52:72:fc:bf:56: 7c:3a:3a:f5:3b:38:2a:57:c1:cb:e4:07:fd:e9:0e:a9:5f:b0: fa:f7:d6:ee:5a:4b:e7:b8:6a:6b:b0:02:97:6b:04:ff:0c:ad: b0:44:88:a8:b9:02:74:99:7f:e0:cd:7f:31:dd:57:75:0c:8c: 00:12:48:a4:f0:9d:73:59:61:74:6b:71:94:4b:92:3e:00:6a: be:a9:e1:b3:71:cc:cf:5d:af:8c:b7:a9:2e:10:f0:a4:67:fa: f7:c2:44:16:94:ed:58:6e:c5:ce:c8:97:61:5c:b3:04:be:87: b4:77:9f:1e:61:1e:69:e2:b0:e1:30:75:2e:f8:4c:fd:5a:f5: d4:ae:47:f2:a3:d1:d4:a4:2e:8d:97:c2:8d:d6:bf:ff:e1:75: 0e:c6:ed:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoNEYxODI3M0Q4ODU1NkUzQTFENkVEODE3OEI4MDk1MjhE OTkwQTY5MTAeFw0yNTA2MDMwNjM1MTZaFw0yNTA2MTAwNjM1MTZaMBgxFjAUBgNV BAMTDTY4M2U5N2E0LWFmYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDwM3yBvfcD6MJjttEKFas2j8wb8G8INNSaUsSd0/80YBtc/IogkKEO6bZcOHX WkB0H5RTLcv9xt5SUdDMBnnfQqAVSxt+AwxPb0PbTnxfhoNop1vPdMAQw/2BSgfb ssaNKAD/rIPDgNEUFn2nPl9dEKYGhOP7QRN1t2+dxpy2cl+fH4NLDzl2OkFqKZSu W1wLHawaFMW9HRe+gz6Hl9ggO805SRT61l2QUEQktnrDLNEdXhq2tNaraHpMTbiL ogBhX9w3j4uUV9DSaxIFmbvQRi87xaqN2hoU58GH2jRuQK/90pjIBBeH03H4Q6en DaFTyfTECfoiXz40vJByvQi7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2RAAQh5b nmsHBv6GETAzY5j3e5YwHwYDVR0jBBgwFoAUTxgnPYhVbjodbtgXi4CVKNmQppEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzE1NDc1RDg2OEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHhnblBZaFZiam9kYnRnWGk0Q1ZLTm1RcHBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzE1NDc1RDg2OEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyL1R4Z25QWWhWYmpv ZGJ0Z1hpNENWS05tUXBwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjAT+kSWXK5wuMm3oChRacSOLuHaPO7IoFez7tQS1y1l8kCk3Dv/eC8 VeRMvKALCfHDeQavGSPZIY2ltPOQa9DAXemvzyMOsPURj9gQT/pOjyXVryF3eYZA bCrLYvPClSxTY3f6FlhScvy/Vnw6OvU7OCpXwcvkB/3pDqlfsPr31u5aS+e4amuw ApdrBP8MrbBEiKi5AnSZf+DNfzHdV3UMjAASSKTwnXNZYXRrcZRLkj4Aar6p4bNx zM9dr4y3qS4Q8KRn+vfCRBaU7Vhuxc7Il2FcswS+h7R3nx5hHmnisOEwdS74TP1a 9dSuR/Kj0dSkLo2Xwo3Wv//hdQ7G7R8= -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:27 2025 by rpki-client