$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: oSBYzJ7Bve15WtP2ZQh5r7Tj4WB3x4zpbubZrKuWxmo= Subject key identifier: 65:6F:EC:E1:B3:42:13:BD:29:7E:D1:28:AB:E9:3A:43:23:BC:38:06 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 3490 Signing time: Sun 08 Jun 2025 15:05:52 +0000 Manifest this update: Sun 08 Jun 2025 15:05:51 +0000 Manifest next update: Sun 15 Jun 2025 15:05:51 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: EmXLWurus699IzqoWXSQ5p1P+rhYBSfM1SDtWOk1iuc=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Jun 8 15:05:51 2025 GMT Not After : Jun 15 15:05:51 2025 GMT Subject: CN=6845a6cf-20d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:d6:d6:f7:a4:43:ad:b2:77:0d:f2:e0:f1: 57:1e:fe:c3:30:1d:4d:1f:2f:fe:05:33:76:3e:e6: 42:0e:30:4c:1c:58:95:43:9e:57:28:80:d8:b6:28: 7e:b1:06:9b:62:5e:d4:5d:6b:cd:f5:da:27:3b:de: f7:c4:79:5c:2e:05:f9:7e:37:fe:22:aa:68:8f:61: 23:ef:99:58:47:b9:ae:11:5e:54:44:fb:78:d3:7e: 1a:91:b3:3e:00:64:c8:d8:1d:29:31:fd:7c:bd:b3: 87:7a:62:12:04:d8:18:cb:cf:a4:50:31:01:2c:c4: 69:f6:cb:57:08:3b:03:4a:58:28:b5:e0:f7:12:f5: f4:c3:d7:ee:cf:81:c4:18:b5:52:84:c3:2f:70:4d: 1f:f9:31:f7:75:ff:81:12:3b:aa:30:99:63:ac:9c: 12:73:f4:94:89:7f:f4:95:78:04:96:15:76:f3:55: 18:ff:2b:b4:cd:be:30:ac:cc:86:c8:8d:e0:39:75: 60:83:11:36:47:b3:f8:dc:37:4f:c2:e3:e9:b8:c9: e3:f9:70:ef:93:cd:82:ff:f4:47:f2:93:f1:9d:8a: f0:eb:b3:07:1e:ee:ee:7e:de:e4:e9:39:d8:61:d6: ee:81:16:2c:3e:2c:a3:79:df:11:95:57:61:ce:17: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:EC:E1:B3:42:13:BD:29:7E:D1:28:AB:E9:3A:43:23:BC:38:06 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c6:87:23:1b:97:5c:72:38:66:27:20:b0:58:f5:1d:15:43: ce:85:bd:fb:9c:51:e3:13:42:11:ac:86:7c:88:3b:20:06:8f: ab:19:00:44:32:95:a3:3f:3f:11:e2:09:7b:92:2e:d4:9a:0a: 55:7e:7b:18:fc:79:1b:7d:3a:4d:20:6f:fa:d9:0f:9f:07:50: 97:53:25:3f:4d:13:c0:6e:d1:db:05:ae:97:e4:0d:5e:3f:3a: 28:65:96:01:4a:b1:39:1c:85:76:d8:7e:e4:b3:29:76:de:fa: a9:32:3a:52:48:88:87:8c:1c:7e:aa:79:ac:93:db:be:dc:c8: fb:0c:da:de:f9:fa:6f:bf:e5:78:93:40:97:41:7f:a2:64:79: a3:56:22:14:86:4b:75:59:2b:9d:f5:93:c7:a4:b6:e7:2b:44: 55:24:c5:71:fa:b0:c7:24:b6:1f:6f:09:99:c9:4d:95:d7:75: d3:27:06:e2:dc:c4:51:69:a7:25:57:71:bb:e9:b0:5e:01:7e: d4:c3:79:52:89:d8:06:00:81:b7:e9:5c:1d:66:b3:d2:9a:fb: 4f:8b:19:bd:59:4c:0e:81:18:68:c7:8a:73:7c:9c:2e:87:b0: 92:90:d8:95:91:3d:ba:51:e8:77:0a:c5:64:5e:26:cd:c2:33: 9f:05:f5:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUwNjA4MTUwNTUxWhcNMjUwNjE1MTUwNTUxWjAYMRYwFAYD VQQDEw02ODQ1YTZjZi0yMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmLW1vekQ62ydw3y4PFXHv7DMB1NHy/+BTN2PuZCDjBMHFiVQ55XKIDYtih+ sQabYl7UXWvN9donO973xHlcLgX5fjf+Iqpoj2Ej75lYR7muEV5URPt4034akbM+ AGTI2B0pMf18vbOHemISBNgYy8+kUDEBLMRp9stXCDsDSlgoteD3EvX0w9fuz4HE GLVShMMvcE0f+TH3df+BEjuqMJljrJwSc/SUiX/0lXgElhV281UY/yu0zb4wrMyG yI3gOXVggxE2R7P43DdPwuPpuMnj+XDvk82C//RH8pPxnYrw67MHHu7uft7k6TnY YdbugRYsPiyjed8RlVdhzhetpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVv7OGz QhO9KX7RKKvpOkMjvDgGMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8xocjG5dccjhmJyCwWPUdFUPOhb37nFHjE0IRrIZ8iDsgBo+rGQBE MpWjPz8R4gl7ki7UmgpVfnsY/HkbfTpNIG/62Q+fB1CXUyU/TRPAbtHbBa6X5A1e PzooZZYBSrE5HIV22H7ksyl23vqpMjpSSIiHjBx+qnmsk9u+3Mj7DNre+fpvv+V4 k0CXQX+iZHmjViIUhkt1WSud9ZPHpLbnK0RVJMVx+rDHJLYfbwmZyU2V13XTJwbi 3MRRaaclV3G76bBeAX7Uw3lSidgGAIG36VwdZrPSmvtPixm9WUwOgRhox4pzfJwu h7CSkNiVkT26Ueh3CsVkXibNwjOfBfVm -----END CERTIFICATE-----Generated at Mon Jun 9 02:44:56 2025 by rpki-client