$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: QTZ9aKSPcUfgiA67//m3QxjHDwBqo5a7fRAiVnUi5sI= Subject key identifier: A3:10:D0:A2:FD:EF:EA:10:A5:AD:53:6D:0E:2C:76:CD:33:D2:C8:C2 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D2E Signing time: Fri 30 May 2025 18:18:10 +0000 Manifest this update: Fri 30 May 2025 18:18:09 +0000 Manifest next update: Fri 06 Jun 2025 18:18:09 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: qQ4vKkTT7blLvW/DGct3us8E5MTGDviXkybAsOoxQiY=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: IYhmr/YeDGU5SLQVUVmRd5b8gjxXk5IMAmPytdaCPDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: May 30 18:18:09 2025 GMT Not After : Jun 6 18:18:09 2025 GMT Subject: CN=6839f662-837d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:74:60:0c:29:ef:f7:2e:74:ba:d6:4e:1d: 16:c2:a7:d7:84:29:18:25:c4:96:81:c5:f3:74:85: 11:e7:08:89:6a:d9:d4:8e:98:6e:f7:ee:e7:59:f0: d2:e7:69:2a:37:42:49:24:c1:fd:3d:08:cf:17:b2: b4:00:7c:b3:58:47:e6:95:e5:33:99:21:1e:28:b1: 3f:50:85:74:8b:1d:4f:4b:13:80:21:ae:b1:ee:9e: db:c1:d8:d5:15:0b:a7:de:e1:a2:48:72:1a:31:80: 21:75:1c:dc:66:1c:f4:3c:59:53:d4:29:db:63:12: 6f:3d:94:14:a3:63:67:0d:7b:06:20:a2:2c:32:a5: e6:d3:f7:92:d6:15:a4:83:ff:e4:0e:1f:45:29:30: 0d:e8:81:77:47:ea:df:55:48:10:bf:23:59:17:72: 56:cd:ae:b8:fe:20:0d:ea:ff:5f:2e:67:4c:79:2d: c2:58:9a:c8:d8:7d:d3:56:ac:70:29:f2:1e:d9:93: e9:b8:c9:c2:c1:bc:7c:50:39:5e:d3:6e:23:40:01: 46:cf:11:a3:60:c2:68:3a:7f:44:39:8a:83:34:08: fb:2b:01:77:bb:48:9d:7e:3c:15:8c:7c:4f:b8:c9: 50:89:18:7c:fc:c1:45:b1:8d:68:31:c2:8f:5b:37: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:D0:A2:FD:EF:EA:10:A5:AD:53:6D:0E:2C:76:CD:33:D2:C8:C2 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1c:a2:d8:8c:c0:21:49:1d:84:7c:91:c4:8b:3f:d3:bc:63: 39:a8:4e:e9:af:de:ef:b8:2c:2b:dd:22:1b:a5:12:cc:1a:45: 4c:15:72:69:a5:1b:39:97:17:59:82:3b:88:c9:7a:85:de:b1: 5c:e1:6f:b3:a0:58:17:d8:4b:d1:0e:11:9a:a5:d1:ac:e0:b4: a7:ef:4a:4b:c7:68:ed:84:9f:54:17:3b:8b:13:7c:a7:8e:86: 98:e9:e2:17:ff:55:d1:5e:34:cb:66:22:93:aa:4e:06:52:ba: 77:ab:2d:3a:c5:04:06:d8:af:16:ed:53:ed:27:35:1d:05:a2: 1b:1c:1d:96:cc:c1:bf:1e:ab:4e:47:8f:a4:15:02:00:d2:8f: 27:ef:e7:39:76:f9:38:e3:e1:47:1d:f7:4d:bf:d5:db:fa:5f: cd:09:a7:ef:51:a2:f8:09:e8:42:ae:f3:3a:6a:40:e7:3e:b1: ad:3d:20:a7:52:24:b3:e6:e9:2c:01:c9:24:61:99:62:6d:d4: 91:d8:92:e3:69:ed:33:34:20:53:2b:18:db:85:71:c3:e2:e2: 26:c4:28:9a:97:01:b1:87:73:ae:09:74:0c:de:bb:ad:8c:1e: 52:d3:48:3e:12:9d:c7:13:36:9b:3d:61:d7:0f:8f:27:d4:00: 01:e7:b7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUwNTMwMTgxODA5WhcNMjUwNjA2MTgxODA5WjAYMRYwFAYD VQQDEw02ODM5ZjY2Mi04MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrV0YAwp7/cudLrWTh0WwqfXhCkYJcSWgcXzdIUR5wiJatnUjphu9+7nWfDS 52kqN0JJJMH9PQjPF7K0AHyzWEfmleUzmSEeKLE/UIV0ix1PSxOAIa6x7p7bwdjV FQun3uGiSHIaMYAhdRzcZhz0PFlT1CnbYxJvPZQUo2NnDXsGIKIsMqXm0/eS1hWk g//kDh9FKTAN6IF3R+rfVUgQvyNZF3JWza64/iAN6v9fLmdMeS3CWJrI2H3TVqxw KfIe2ZPpuMnCwbx8UDle024jQAFGzxGjYMJoOn9EOYqDNAj7KwF3u0idfjwVjHxP uMlQiRh8/MFFsY1oMcKPWzeBzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMQ0KL9 7+oQpa1TbQ4sds0z0sjCMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxHKLYjMAhSR2EfJHEiz/TvGM5qE7pr97vuCwr3SIbpRLMGkVMFXJp pRs5lxdZgjuIyXqF3rFc4W+zoFgX2EvRDhGapdGs4LSn70pLx2jthJ9UFzuLE3yn joaY6eIX/1XRXjTLZiKTqk4GUrp3qy06xQQG2K8W7VPtJzUdBaIbHB2WzMG/HqtO R4+kFQIA0o8n7+c5dvk44+FHHfdNv9Xb+l/NCafvUaL4CehCrvM6akDnPrGtPSCn UiSz5uksAckkYZlibdSR2JLjae0zNCBTKxjbhXHD4uImxCialwGxh3OuCXQM3rut jB5S00g+Ep3HEzabPWHXD48n1AAB57df -----END CERTIFICATE-----Generated at Sat May 31 17:42:34 2025 by rpki-client