$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: 0JzUHkk9XBxm8GOb5CHXQkF3C0RmLw30UYcv8rK4eEM= Subject key identifier: 22:F5:41:5C:A4:31:42:F9:18:6E:09:63:21:7D:C7:33:93:AF:E1:91 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 0107 Signing time: Thu 05 Jun 2025 04:23:15 +0000 Manifest this update: Thu 05 Jun 2025 04:23:14 +0000 Manifest next update: Thu 12 Jun 2025 04:23:14 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: PYiVobA/78y/0Wvbh0gT68+Z0iXE7LUHHZOv2bAF1cU=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Jun 5 04:23:14 2025 GMT Not After : Jun 12 04:23:14 2025 GMT Subject: CN=68411bb3-c26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:81:3d:1a:cb:41:1c:c7:31:b8:13:5a:c7: 16:46:45:e0:37:68:61:b9:7b:13:55:9b:76:ac:ca: 97:b4:73:9a:07:3b:78:f5:fc:32:1d:3d:25:90:91: a1:6a:48:98:62:74:ed:30:b9:ab:98:c8:9d:a6:24: 03:31:2f:58:01:91:2a:ca:e6:43:ef:c6:32:a0:05: 96:a2:df:49:16:18:7a:d9:0b:67:70:44:ad:25:6e: ab:0b:01:f8:bf:b4:b1:77:94:b6:37:2e:35:12:1c: 85:b0:59:29:07:94:4b:ba:43:33:45:66:65:a3:54: 8e:a8:9d:de:1a:d3:57:c8:c1:c9:89:ca:76:3f:27: 56:ba:13:5c:be:17:90:f3:fd:1e:b1:00:f9:a8:62: 4b:dd:e7:99:24:c5:d3:38:8e:4e:9c:fe:51:fc:63: b5:a4:75:6b:ef:23:b6:13:a4:42:b2:b1:b8:89:18: df:5e:bb:ca:bd:0f:1c:9e:06:e4:5d:dc:f1:c4:23: 0f:53:63:3b:48:51:9c:a5:28:3b:47:b3:37:62:86: 43:86:aa:4c:ee:fc:35:41:3d:92:7f:90:2b:7a:03: 14:ee:19:38:94:aa:a4:3f:56:e5:fe:98:09:fb:04: b9:04:c3:63:13:52:a6:fe:e3:fe:f2:88:cf:10:46: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F5:41:5C:A4:31:42:F9:18:6E:09:63:21:7D:C7:33:93:AF:E1:91 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:69:2f:49:01:ff:3f:95:b9:3a:8c:aa:49:70:17:55:e9:23: 4c:da:34:85:5f:bb:ba:3f:85:97:f1:b1:27:26:88:c5:9d:26: 4c:f1:f2:e0:3b:4a:8b:bc:86:99:bc:ca:7e:91:0f:eb:6c:3b: 04:30:fc:ec:9a:16:18:86:9b:83:a4:cc:2c:65:ab:02:c6:dd: de:d2:1f:f8:f3:53:d5:3f:61:c2:06:34:a1:f9:a0:01:cb:2f: 5b:37:bb:a6:50:17:b1:89:5b:01:ac:b2:0e:63:9f:bd:b2:0f: 23:21:fe:ce:2e:91:1f:a8:2f:76:41:89:bc:80:d4:98:56:be: 92:36:17:d9:d9:84:21:93:3e:54:91:97:64:b3:f7:9e:91:c7: 89:45:be:7b:8d:f5:61:74:e9:e9:cf:01:c4:83:57:36:3f:22: ed:5c:a8:5f:95:99:db:6e:bc:9d:6e:58:0a:15:18:36:aa:e7: d4:73:3e:09:8f:f7:6a:5c:e3:fb:dd:8b:58:71:9b:bc:a4:a6: 35:81:63:17:61:a0:97:f9:3a:d6:03:15:4e:64:18:1b:89:81: 7f:17:ca:98:28:4c:c3:50:8e:d1:cf:8d:4f:93:16:23:07:6d: d0:0f:78:43:a7:fe:24:d8:08:f0:3f:ab:49:c6:ca:fa:bc:28: 88:78:78:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUwNjA1MDQyMzE0WhcNMjUwNjEyMDQyMzE0WjAYMRYwFAYD VQQDEw02ODQxMWJiMy1jMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZyBPRrLQRzHMbgTWscWRkXgN2hhuXsTVZt2rMqXtHOaBzt49fwyHT0lkJGh akiYYnTtMLmrmMidpiQDMS9YAZEqyuZD78YyoAWWot9JFhh62QtncEStJW6rCwH4 v7Sxd5S2Ny41EhyFsFkpB5RLukMzRWZlo1SOqJ3eGtNXyMHJicp2PydWuhNcvheQ 8/0esQD5qGJL3eeZJMXTOI5OnP5R/GO1pHVr7yO2E6RCsrG4iRjfXrvKvQ8cngbk XdzxxCMPU2M7SFGcpSg7R7M3YoZDhqpM7vw1QT2Sf5AregMU7hk4lKqkP1bl/pgJ +wS5BMNjE1Km/uP+8ojPEEYebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL1QVyk MUL5GG4JYyF9xzOTr+GRMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUaS9JAf8/lbk6jKpJcBdV6SNM2jSFX7u6P4WX8bEnJojFnSZM8fLg O0qLvIaZvMp+kQ/rbDsEMPzsmhYYhpuDpMwsZasCxt3e0h/481PVP2HCBjSh+aAB yy9bN7umUBexiVsBrLIOY5+9sg8jIf7OLpEfqC92QYm8gNSYVr6SNhfZ2YQhkz5U kZdks/eekceJRb57jfVhdOnpzwHEg1c2PyLtXKhflZnbbrydblgKFRg2qufUcz4J j/dqXOP73YtYcZu8pKY1gWMXYaCX+TrWAxVOZBgbiYF/F8qYKEzDUI7Rz41PkxYj B23QD3hDp/4k2AjwP6tJxsr6vCiIeHhy -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:02 2025 by rpki-client