$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: Z/1E0jpmsyN4CfsXzijG444FrL2GVFnznBfybf5/1XI= Subject key identifier: 0F:B4:0A:80:05:63:DB:E6:C1:17:36:84:01:5C:A9:F6:94:BF:8E:4B Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 25 Signing time: Tue 03 Jun 2025 07:43:12 +0000 Manifest this update: Tue 03 Jun 2025 07:43:12 +0000 Manifest next update: Tue 10 Jun 2025 07:43:12 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: SAxk6HPURGZP+fzOYVatH237hpDkzkdEGS9i0ScNgfM=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Jun 3 07:43:12 2025 GMT Not After : Jun 10 07:43:12 2025 GMT Subject: CN=683ea790-2598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:9b:fa:b0:f2:d2:63:48:ad:5c:13:a7:4b: 05:4e:2f:19:09:e7:10:1f:a1:39:1c:e5:c0:ad:d9: 28:48:88:29:ff:c8:c0:02:cc:1c:2f:a3:c2:b0:ff: 14:de:48:3e:b0:23:ee:75:7f:05:7a:6d:2e:56:25: 24:79:24:7d:c9:b9:1d:45:3d:f4:1e:8c:4c:a8:9c: 6a:4d:e3:16:c9:75:fe:ff:99:1b:54:70:e4:35:e3: 69:14:17:ce:bf:30:82:ff:e5:9f:73:78:28:42:5a: 8c:e6:ff:41:f8:69:36:6f:48:ba:d7:e0:2c:c5:a0: 75:15:24:08:27:97:30:55:d3:3c:19:9e:29:aa:ad: 54:2a:c9:b1:72:4f:93:1c:79:7f:23:17:b5:18:79: a7:2a:0c:ad:48:0b:94:87:bf:bd:f3:79:df:e7:ca: f6:97:c2:68:f0:17:1c:f9:14:61:f0:7b:ee:7e:90: 00:57:91:bc:d9:c7:7d:d2:92:90:3b:c9:e9:8c:0a: b5:37:77:a9:93:0f:a2:1c:ff:b0:76:af:ba:fe:f6: 20:e2:12:27:9e:5c:91:46:57:46:d3:f3:0c:db:3f: f6:f9:0e:fd:68:65:e0:50:28:84:bb:1e:6f:c8:c1: 13:02:88:5c:37:af:bc:c1:32:4b:4d:3d:01:0f:df: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:0A:80:05:63:DB:E6:C1:17:36:84:01:5C:A9:F6:94:BF:8E:4B X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:df:ff:be:1e:52:96:c3:38:9e:35:9d:41:08:2c:15:8f:7e: 1e:7e:bf:dc:a3:e7:b2:ed:35:2f:2c:8a:31:70:0e:81:cb:ed: 3a:5f:75:0f:08:28:c2:4c:72:de:58:89:ad:54:9c:79:9c:49: f9:36:2e:d1:7d:23:dc:30:95:8f:b4:80:c8:47:d5:e4:41:43: 1e:ae:1b:c0:e5:65:e6:38:1c:0e:26:45:49:2a:63:18:6d:51: a3:b4:18:b1:b7:be:f5:fd:97:80:5c:ba:e2:35:0f:3f:e4:ab: e2:ca:a8:07:55:0d:e1:18:fa:80:0b:47:55:3d:e4:e3:fc:f0: 1c:86:c0:3a:83:0b:d1:e2:84:e0:9f:28:af:22:d2:80:f5:5f: 2e:37:ff:c6:a6:63:19:c9:c8:a1:40:15:0d:db:42:f8:9b:f8: 8e:2f:3c:3d:8c:b0:c7:13:1d:a3:7a:8d:c1:cd:81:67:35:f1: cf:a9:52:44:c2:dc:cf:10:da:74:1a:4c:ac:f5:d7:c5:91:61: ea:43:dc:da:c5:11:95:08:fd:e8:81:05:eb:e2:64:9a:c2:d5: a4:ab:45:b4:89:a2:d0:c1:70:8c:b4:60:c9:ec:10:2b:09:1a: 28:3a:ed:2d:18:4c:d4:9f:26:9d:82:48:d1:46:80:3a:e6:49: 4c:55:80:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTA2MDMwNzQzMTJaFw0yNTA2MTAwNzQzMTJaMBgxFjAUBgNV BAMTDTY4M2VhNzkwLTI1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTf5v6sPLSY0itXBOnSwVOLxkJ5xAfoTkc5cCt2ShIiCn/yMACzBwvo8Kw/xTe SD6wI+51fwV6bS5WJSR5JH3JuR1FPfQejEyonGpN4xbJdf7/mRtUcOQ142kUF86/ MIL/5Z9zeChCWozm/0H4aTZvSLrX4CzFoHUVJAgnlzBV0zwZnimqrVQqybFyT5Mc eX8jF7UYeacqDK1IC5SHv73zed/nyvaXwmjwFxz5FGHwe+5+kABXkbzZx33SkpA7 yemMCrU3d6mTD6Ic/7B2r7r+9iDiEieeXJFGV0bT8wzbP/b5Dv1oZeBQKIS7Hm/I wRMCiFw3r7zBMktNPQEP39FZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD7QKgAVj 2+bBFzaEAVyp9pS/jkswHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnf/74eUpbDOJ41nUEILBWPfh5+v9yj57LtNS8sijFwDoHL7TpfdQ8I KMJMct5Yia1UnHmcSfk2LtF9I9wwlY+0gMhH1eRBQx6uG8DlZeY4HA4mRUkqYxht UaO0GLG3vvX9l4BcuuI1Dz/kq+LKqAdVDeEY+oALR1U95OP88ByGwDqDC9HihOCf KK8i0oD1Xy43/8amYxnJyKFAFQ3bQvib+I4vPD2MsMcTHaN6jcHNgWc18c+pUkTC 3M8Q2nQaTKz118WRYepD3NrFEZUI/eiBBeviZJrC1aSrRbSJotDBcIy0YMnsECsJ Gig67S0YTNSfJp2CSNFGgDrmSUxVgH0= -----END CERTIFICATE-----Generated at Wed Jun 4 00:13:34 2025 by rpki-client