$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: KIztGy6iSdHd8B3ol5sffsApLxh+VLvvioFX0UOlbQ0= Subject key identifier: 22:45:39:22:CD:DD:CC:42:AB:E9:29:E5:06:E3:D5:2D:BE:01:71:C0 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06DA Signing time: Mon 30 Jun 2025 22:22:01 +0000 Manifest this update: Mon 30 Jun 2025 22:22:00 +0000 Manifest next update: Mon 07 Jul 2025 22:22:00 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: yLs8FJvBc0DVmPhSQd2JMofi2Z6QXP9qIViaquRT9mU=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Jun 30 22:22:00 2025 GMT Not After : Jul 7 22:22:00 2025 GMT Subject: CN=68630e08-00c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:49:ec:51:80:95:f9:0a:55:9e:eb:8b:e9: 24:b1:cf:7b:1e:00:cc:21:d6:a5:b2:88:9e:e3:cf: c3:f3:84:04:83:62:61:39:ed:3a:9a:52:97:15:d5: 1a:4c:fe:80:07:54:71:c4:bb:18:85:5b:37:36:24: 31:e4:5c:53:f0:f7:a2:e6:29:bf:35:94:db:6a:c3: d7:be:ff:f0:f1:b4:38:97:61:d0:09:54:04:a7:6f: 3a:82:17:63:97:8f:30:78:02:c0:a6:4f:cb:e1:fa: 8e:c2:a3:0a:04:97:1d:5f:93:b3:0f:36:6a:76:44: bc:59:d5:c8:41:98:2c:48:d2:00:c9:06:ae:15:2a: 9a:cd:4a:0d:e1:c9:38:00:23:b2:91:79:12:ec:94: 50:78:97:3c:43:1d:07:92:b4:81:9a:58:4c:79:b2: ec:6e:09:88:dc:00:af:3a:3e:4f:5d:9a:bc:a2:8e: 79:66:d6:c6:a5:85:59:8a:27:c1:50:c0:5c:ac:78: b2:2e:45:9a:d5:b2:3a:a8:45:6b:b7:4c:bd:59:e2: e9:90:4a:2d:c7:3d:e8:8b:2a:b9:3c:92:54:f5:23: a7:a2:f5:0b:36:af:23:bf:e3:52:da:35:4a:a9:70: 4d:81:d4:75:1e:93:60:ae:f2:00:93:78:af:aa:ee: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:45:39:22:CD:DD:CC:42:AB:E9:29:E5:06:E3:D5:2D:BE:01:71:C0 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:97:20:ad:fb:4a:83:bf:8f:72:d0:bf:27:6e:c4:ba:f0:bd: 2f:25:15:e8:b0:88:03:f6:6b:81:9c:f5:04:ca:8a:f5:e1:28: 6a:59:46:15:9b:03:79:88:95:1f:24:88:a8:dd:d6:b0:96:f4: 0b:f3:c3:80:af:82:0f:89:b8:7a:4e:0a:f2:68:59:44:0b:d7: 13:53:3a:52:98:13:d7:66:97:46:10:5a:c1:cf:6b:d4:5b:ec: 43:a8:8f:c1:40:3b:45:47:b5:0f:d1:59:73:de:f3:06:7f:bd: d9:7b:0d:5e:2e:79:38:90:66:bd:fd:9e:dd:cf:67:cd:0d:7c: 52:5d:7a:fa:cd:fe:bd:3f:24:f5:7e:02:fa:c9:97:92:f5:d8: de:90:dc:47:c3:3a:0b:81:1e:16:e2:56:9b:8b:b2:59:49:4b: 95:18:41:ea:de:3f:88:af:27:8b:f9:1c:db:bb:40:1c:69:c9: c7:6d:7d:8b:f0:80:56:9b:0f:83:6d:a8:f8:22:c8:ef:d9:f7: d3:18:a9:d6:6a:c5:32:de:2f:32:4e:62:17:29:f1:5c:68:95: 56:37:7a:75:6b:d2:8f:29:e9:cb:d2:cd:44:f0:c7:b6:00:a1: 68:03:02:c4:b2:75:00:d7:50:8c:1f:ec:af:bd:20:17:14:6a: 4f:30:44:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwNjMwMjIyMjAwWhcNMjUwNzA3MjIyMjAwWjAYMRYwFAYD VQQDEw02ODYzMGUwOC0wMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPtJ7FGAlfkKVZ7ri+kksc97HgDMIdalsoie48/D84QEg2JhOe06mlKXFdUa TP6AB1RxxLsYhVs3NiQx5FxT8Pei5im/NZTbasPXvv/w8bQ4l2HQCVQEp286ghdj l48weALApk/L4fqOwqMKBJcdX5OzDzZqdkS8WdXIQZgsSNIAyQauFSqazUoN4ck4 ACOykXkS7JRQeJc8Qx0HkrSBmlhMebLsbgmI3ACvOj5PXZq8oo55ZtbGpYVZiifB UMBcrHiyLkWa1bI6qEVrt0y9WeLpkEotxz3oiyq5PJJU9SOnovULNq8jv+NS2jVK qXBNgdR1HpNgrvIAk3ivqu552wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJFOSLN 3cxCq+kp5Qbj1S2+AXHAMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmlyCt+0qDv49y0L8nbsS68L0vJRXosIgD9muBnPUEyor14ShqWUYV mwN5iJUfJIio3dawlvQL88OAr4IPibh6TgryaFlEC9cTUzpSmBPXZpdGEFrBz2vU W+xDqI/BQDtFR7UP0Vlz3vMGf73Zew1eLnk4kGa9/Z7dz2fNDXxSXXr6zf69PyT1 fgL6yZeS9djekNxHwzoLgR4W4labi7JZSUuVGEHq3j+IryeL+Rzbu0AcacnHbX2L 8IBWmw+Dbaj4Isjv2ffTGKnWasUy3i8yTmIXKfFcaJVWN3p1a9KPKenL0s1E8Me2 AKFoAwLEsnUA11CMH+yvvSAXFGpPMETn -----END CERTIFICATE-----Generated at Tue Jul 1 13:33:01 2025 by rpki-client