$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: ZwdXhsAfEThBZbAesDiO+i9GpX9/tkLtY72DkOgE8Ic= Subject key identifier: B2:44:A1:01:EB:EA:75:EA:A6:18:43:FF:12:A3:DB:C9:86:54:DB:22 Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0CA9 Signing time: Mon 30 Jun 2025 18:21:37 +0000 Manifest this update: Mon 30 Jun 2025 18:21:37 +0000 Manifest next update: Mon 07 Jul 2025 18:21:37 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: Kw8AJDKJMrY8j5tVHxCDRCfQxjFM2IeJdJ9HxVIRHco=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Jun 30 18:21:37 2025 GMT Not After : Jul 7 18:21:37 2025 GMT Subject: CN=6862d5b1-88b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:db:98:93:33:0c:6d:12:62:6b:c3:12:05: 75:07:a3:3e:b4:6a:c7:fa:f5:7a:c8:d1:cd:b3:09: d5:06:a2:e1:b9:c2:9c:71:5f:02:5c:b5:3c:d0:ae: 0e:dc:01:06:23:b5:95:38:8d:4e:0f:08:1a:d4:b5: 74:c6:b3:6d:4b:33:e0:05:a3:42:fa:34:a1:70:8c: f4:bc:84:a1:50:3b:af:be:2b:37:0c:74:1c:76:68: 59:68:5c:f4:8f:2f:52:ff:5d:86:95:e7:c0:27:a9: 9d:6e:ee:49:ca:12:84:76:68:7d:59:98:95:b5:87: 6f:6f:c9:fe:3c:c7:0a:7d:31:9d:a5:9d:dd:25:81: 61:7a:28:35:3d:a9:ea:06:35:dc:eb:47:f1:d4:f1: 64:9e:24:95:76:ad:60:66:cf:6f:1a:b7:c0:d3:a5: 41:89:61:52:29:ab:ed:59:78:05:2c:ed:d7:6f:4a: 6f:38:f0:92:c3:42:f7:75:2a:e0:c1:11:16:fd:11: ea:fb:d3:25:3a:2a:b2:8f:02:11:a5:0b:7b:03:6b: 60:3d:6e:59:40:14:e8:aa:95:2b:6d:25:35:ec:10: 66:78:3c:7f:a4:a2:ec:0d:4e:49:8b:e2:28:e9:f4: 82:9d:3c:f5:d3:fd:ef:86:7b:97:e4:da:b3:85:ad: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:44:A1:01:EB:EA:75:EA:A6:18:43:FF:12:A3:DB:C9:86:54:DB:22 X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:84:08:e8:02:7b:af:e3:48:f5:dc:a9:a7:ec:6a:e6:46:d4: d9:83:92:fc:dd:cc:59:79:00:23:07:ab:78:3e:6a:9e:b3:94: 17:6c:b5:a0:b9:88:5b:ec:dd:4b:bd:22:bc:62:7b:3a:12:49: dd:a3:63:ff:96:7a:a1:68:aa:77:0e:af:26:aa:ab:77:7f:fd: 04:9c:13:54:22:fc:09:42:71:f4:b5:15:b5:22:93:1d:9c:54: ee:ff:95:90:60:4e:a3:7d:69:61:da:0b:7c:91:89:ab:f0:65: c3:98:9f:d0:91:89:16:cb:88:ce:e3:75:a0:85:3a:4c:cc:18: 1b:0d:5e:a9:31:af:53:12:2e:96:c8:87:2e:60:9f:bf:20:12: 6c:40:7e:93:d2:e3:27:71:f3:a2:ad:f4:da:f3:b8:fa:13:9d: f8:b0:22:fa:06:b4:4a:8e:06:27:09:bb:bb:93:8d:59:28:4e: e2:33:15:ea:cc:1d:0b:31:25:ee:a6:fb:28:74:ad:ea:90:de: f8:83:7c:69:46:05:0e:5f:c3:13:0f:c0:53:a1:18:d1:15:6e: 75:38:db:86:7f:e6:3d:49:23:62:26:4c:d8:5c:1f:ed:74:4e: a0:60:40:e5:e0:69:5f:70:66:cf:c7:35:26:85:74:67:81:f0: 3b:e7:56:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjUwNjMwMTgyMTM3WhcNMjUwNzA3MTgyMTM3WjAYMRYwFAYD VQQDEw02ODYyZDViMS04OGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6DbmJMzDG0SYmvDEgV1B6M+tGrH+vV6yNHNswnVBqLhucKccV8CXLU80K4O 3AEGI7WVOI1ODwga1LV0xrNtSzPgBaNC+jShcIz0vIShUDuvvis3DHQcdmhZaFz0 jy9S/12GlefAJ6mdbu5JyhKEdmh9WZiVtYdvb8n+PMcKfTGdpZ3dJYFheig1Panq BjXc60fx1PFkniSVdq1gZs9vGrfA06VBiWFSKavtWXgFLO3Xb0pvOPCSw0L3dSrg wREW/RHq+9MlOiqyjwIRpQt7A2tgPW5ZQBToqpUrbSU17BBmeDx/pKLsDU5Ji+Io 6fSCnTz10/3vhnuX5Nqzha2QBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJEoQHr 6nXqphhD/xKj28mGVNsiMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQhAjoAnuv40j13Kmn7GrmRtTZg5L83cxZeQAjB6t4Pmqes5QXbLWg uYhb7N1LvSK8Yns6Ekndo2P/lnqhaKp3Dq8mqqt3f/0EnBNUIvwJQnH0tRW1IpMd nFTu/5WQYE6jfWlh2gt8kYmr8GXDmJ/QkYkWy4jO43WghTpMzBgbDV6pMa9TEi6W yIcuYJ+/IBJsQH6T0uMncfOirfTa87j6E534sCL6BrRKjgYnCbu7k41ZKE7iMxXq zB0LMSXupvsodK3qkN74g3xpRgUOX8MTD8BToRjRFW51ONuGf+Y9SSNiJkzYXB/t dE6gYEDl4GlfcGbPxzUmhXRngfA751b2 -----END CERTIFICATE-----Generated at Wed Jul 2 10:20:18 2025 by rpki-client