$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: 9hEgbUXL0e0z+ByXbqNKdnuO2CUM8GZBk6V+ldNY0k4= Subject key identifier: D8:3C:CA:B6:9A:17:7F:59:31:F1:1C:7B:87:F8:38:5E:C7:67:E6:36 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 3508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 34C8 Signing time: Sat 31 May 2025 14:16:45 +0000 Manifest this update: Sat 31 May 2025 14:16:44 +0000 Manifest next update: Sat 07 Jun 2025 14:16:44 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: CsLFbV9VNbF3RxXkKOql2eb9k5/hhOdHv9aBV5ImbWA=) 2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=) 4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13576 (0x3508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: May 31 14:16:44 2025 GMT Not After : Jun 7 14:16:44 2025 GMT Subject: CN=683b0f4d-5a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:cd:e5:ca:3f:35:98:33:5a:65:b4:7c:fe: ce:60:98:93:af:3a:bf:a1:26:85:c6:d6:a8:64:27: 54:67:63:fd:42:aa:8b:48:ae:15:35:f6:ee:23:27: b9:d5:52:32:c8:75:66:f9:b7:16:d4:b0:a5:33:0e: 8b:e8:e7:bd:09:f9:e8:82:f3:f0:cc:93:1d:32:06: 89:f9:b0:2f:7a:eb:b0:a2:76:16:62:ba:d3:0b:d1: 95:a4:b6:4b:86:7d:f9:08:d8:0f:d0:59:00:b9:e6: 27:5f:6f:f8:e2:af:5b:71:fd:6f:7f:70:32:3f:e3: f6:d6:72:77:4a:b5:03:6c:de:ce:a4:73:9a:57:5a: 05:95:1b:00:d9:48:ef:73:df:b6:67:d6:5c:19:89: 33:6f:f4:dd:27:17:c2:11:e6:ac:d6:ff:f0:e5:82: 45:d7:09:b2:f1:99:0f:47:a3:f7:9e:4c:6a:77:e6: 99:32:6d:65:54:61:79:37:31:e2:96:de:bd:28:31: 9e:41:85:06:01:a8:36:0d:cc:42:46:7c:4c:33:c4: 1a:53:73:18:87:fa:e4:7d:35:ca:d7:32:2a:99:c5: 7a:91:3a:f8:fb:87:3f:56:44:ba:a9:0d:e5:92:e2: 00:f1:92:5d:3e:9a:fe:b5:55:15:71:74:a1:4d:6b: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:CA:B6:9A:17:7F:59:31:F1:1C:7B:87:F8:38:5E:C7:67:E6:36 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:71:fb:6e:f1:70:a3:f4:a6:c0:97:4f:34:a9:95:94:ad: 84:6b:a7:ae:91:71:2f:51:40:d3:85:b4:2c:d0:23:61:c2:4b: 2e:6c:80:52:aa:b6:f4:cb:85:c6:aa:00:9c:ae:b4:fe:39:bc: 4c:3f:9e:a8:b9:27:13:b4:79:0e:42:5d:79:7a:87:a8:e5:30: b9:22:da:63:93:6f:43:e8:b3:7c:89:9c:6d:2b:9e:29:b0:cd: 9b:a3:5b:cd:23:7f:65:be:b6:14:6e:ef:13:d2:c5:22:7a:d4: 4e:b0:1b:d3:2f:77:d3:16:fd:63:bd:00:37:f3:5b:62:17:b3: d8:b2:9b:d3:e2:1f:8b:ff:db:3c:97:86:de:7c:d1:b9:f1:d3: 08:a3:bc:a5:a8:11:14:75:ea:49:b8:63:cd:e1:3f:c4:84:b0: aa:83:34:51:d2:f2:e2:77:74:79:7c:4d:f8:b0:e0:d6:1e:7e: f1:76:b1:de:f4:0f:ad:95:d7:bc:ab:bc:8f:0b:7f:a1:7a:13: 8f:bf:9c:34:97:49:f5:4c:cd:23:bc:56:75:78:65:cf:a1:5b: a1:82:54:74:61:47:ee:c7:1f:b9:08:08:e2:b7:18:01:1b:78: 65:15:ed:22:45:ef:e3:48:34:40:4e:81:a1:dd:cb:d0:1e:be: 18:44:bd:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjUwNTMxMTQxNjQ0WhcNMjUwNjA3MTQxNjQ0WjAYMRYwFAYD VQQDEw02ODNiMGY0ZC01YTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz/N5co/NZgzWmW0fP7OYJiTrzq/oSaFxtaoZCdUZ2P9QqqLSK4VNfbuIye5 1VIyyHVm+bcW1LClMw6L6Oe9CfnogvPwzJMdMgaJ+bAveuuwonYWYrrTC9GVpLZL hn35CNgP0FkAueYnX2/44q9bcf1vf3AyP+P21nJ3SrUDbN7OpHOaV1oFlRsA2Ujv c9+2Z9ZcGYkzb/TdJxfCEeas1v/w5YJF1wmy8ZkPR6P3nkxqd+aZMm1lVGF5NzHi lt69KDGeQYUGAag2DcxCRnxMM8QaU3MYh/rkfTXK1zIqmcV6kTr4+4c/VkS6qQ3l kuIA8ZJdPpr+tVUVcXShTWtVTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg8yraa F39ZMfEce4f4OF7HZ+Y2MB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUsHH7bvFwo/SmwJdPNKmVlK2Ea6eukXEvUUDThbQs0CNhwksubIBS qrb0y4XGqgCcrrT+ObxMP56ouScTtHkOQl15eoeo5TC5Itpjk29D6LN8iZxtK54p sM2bo1vNI39lvrYUbu8T0sUietROsBvTL3fTFv1jvQA381tiF7PYspvT4h+L/9s8 l4befNG58dMIo7ylqBEUdepJuGPN4T/EhLCqgzRR0vLid3R5fE34sODWHn7xdrHe 9A+tlde8q7yPC3+hehOPv5w0l0n1TM0jvFZ1eGXPoVuhglR0YUfuxx+5CAjitxgB G3hlFe0iRe/jSDRAToGh3cvQHr4YRL3H -----END CERTIFICATE-----Generated at Sat May 31 17:18:52 2025 by rpki-client