$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft File: tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json) Hash identifier: LX7I6gYcmMm83GKQOHPFEf9CM1VNrQ+nzpoh1gSYYeY= Subject key identifier: 1E:A2:D2:AB:81:B5:09:8A:4B:B9:5C:CD:BE:EC:DF:60:CB:85:E4:D1 Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft Manifest number: 0E Signing time: Tue 03 Jun 2025 07:57:31 +0000 Manifest this update: Tue 03 Jun 2025 07:57:31 +0000 Manifest next update: Tue 10 Jun 2025 07:57:31 +0000 Files and hashes: 1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: QMuelp6bp6N6OGWlvdOBNqTlNkxysB64noQ8thrXW/U=) 2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Validity Not Before: Jun 3 07:57:31 2025 GMT Not After : Jun 10 07:57:31 2025 GMT Subject: CN=683eaaeb-9cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:0a:86:4a:b4:35:50:5a:7d:55:50:8c:b3: f3:be:80:bc:00:ec:fc:40:4b:6b:90:d2:ed:20:02: 25:e5:de:92:99:72:e1:82:ee:00:8a:f6:4c:2d:d1: 75:dd:73:43:56:05:f3:94:ab:7f:63:d1:dc:35:66: 6b:31:66:bc:68:fb:83:2d:fb:52:d1:14:2b:be:14: f4:73:92:66:15:33:79:00:58:55:94:4f:9a:8b:72: 1b:2c:ff:a9:50:cc:fb:bb:b5:be:d7:11:1a:39:ca: 55:a6:f2:3e:e2:96:41:f1:34:5f:9a:40:df:76:bb: 4f:92:b1:1a:63:02:43:7d:46:cb:5c:c8:fb:ce:14: 5a:09:c1:34:8b:1b:18:ec:d4:92:29:80:8e:e5:6e: 5a:d9:91:0a:00:60:eb:26:2d:1a:82:7b:6c:88:00: 96:92:59:be:61:73:cd:4d:3c:b2:69:47:5b:31:b0: cc:6b:59:01:92:4b:af:52:1f:bc:50:10:34:35:49: 17:ec:6d:7b:b7:c2:26:7a:7a:4d:11:09:07:8b:f6: bf:ef:c7:71:ba:f2:cd:8e:d7:06:11:5f:88:23:3a: 8c:41:11:cd:f7:ae:1d:3d:01:73:fb:e4:c5:87:49: 5b:94:28:cd:c8:df:49:a9:9a:11:cd:7e:00:95:0d: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A2:D2:AB:81:B5:09:8A:4B:B9:5C:CD:BE:EC:DF:60:CB:85:E4:D1 X509v3 Authority Key Identifier: keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b0:13:aa:ea:43:82:d9:01:c6:a0:6f:2a:10:53:b9:76:c8: ab:4e:70:69:67:37:90:51:9a:29:26:01:85:86:76:b6:8f:e8: 97:8d:6b:b5:52:a7:42:40:74:03:ea:28:2f:9e:4a:ea:67:cb: e2:ad:07:2b:30:b2:77:26:4b:a6:2e:0b:28:5f:88:de:81:75: a7:f5:07:d7:03:af:d4:cb:51:fb:0e:62:6d:8b:c5:dc:af:50: 77:94:d2:e5:af:4b:4c:90:65:92:0a:c5:5e:ce:28:7d:3d:ea: 98:da:80:dd:db:e9:90:3a:a7:04:83:94:ed:3a:9f:8d:68:c8: a8:8a:2e:30:1f:b5:0c:1f:da:a4:3d:c2:3a:e0:34:f8:cd:67: 41:2a:09:bd:b6:8d:44:71:a1:cb:e6:c9:ef:6b:4b:41:0c:e8: 4e:97:76:8a:b1:46:f7:ee:8a:c8:1a:45:ef:81:16:ca:e4:40: 93:be:f4:11:76:3a:79:c8:af:f4:31:50:b4:69:f5:24:20:c9: fc:48:1c:6b:08:60:ba:7f:c9:f1:33:60:56:d4:7d:8c:e6:1d: e1:c1:d9:bd:ca:3f:34:17:a3:ec:49:31:3e:b7:97:59:67:fd: c8:54:68:db:ac:a1:7d:95:7b:d7:a0:f0:72:cf:3c:7f:0a:bb: 4e:61:0a:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5 REFGNEQ0RjAeFw0yNTA2MDMwNzU3MzFaFw0yNTA2MTAwNzU3MzFaMBgxFjAUBgNV BAMTDTY4M2VhYWViLTljZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5gwqGSrQ1UFp9VVCMs/O+gLwA7PxAS2uQ0u0gAiXl3pKZcuGC7gCK9kwt0XXd c0NWBfOUq39j0dw1ZmsxZrxo+4Mt+1LRFCu+FPRzkmYVM3kAWFWUT5qLchss/6lQ zPu7tb7XERo5ylWm8j7ilkHxNF+aQN92u0+SsRpjAkN9RstcyPvOFFoJwTSLGxjs 1JIpgI7lblrZkQoAYOsmLRqCe2yIAJaSWb5hc81NPLJpR1sxsMxrWQGSS69SH7xQ EDQ1SRfsbXu3wiZ6ek0RCQeL9r/vx3G68s2O1wYRX4gjOoxBEc33rh09AXP75MWH SVuUKM3I30mpmhHNfgCVDTy1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHqLSq4G1 CYpLuVzNvuzfYMuF5NEwHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3 UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSwE6rqQ4LZAcagbyoQU7l2yKtOcGlnN5BRmikmAYWGdraP6JeNa7VS p0JAdAPqKC+eSupny+KtByswsncmS6YuCyhfiN6Bdaf1B9cDr9TLUfsOYm2Lxdyv UHeU0uWvS0yQZZIKxV7OKH096pjagN3b6ZA6pwSDlO06n41oyKiKLjAftQwf2qQ9 wjrgNPjNZ0EqCb22jURxocvmye9rS0EM6E6XdoqxRvfuisgaRe+BFsrkQJO+9BF2 OnnIr/QxULRp9SQgyfxIHGsIYLp/yfEzYFbUfYzmHeHB2b3KPzQXo+xJMT63l1ln /chUaNusoX2Ve9eg8HLPPH8Ku05hCsE= -----END CERTIFICATE-----Generated at Wed Jun 4 00:12:33 2025 by rpki-client