$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: iTRFfr2CC/bB90xXonwCViNfPq076QV9i2XtGjuD0q4= Subject key identifier: B5:86:BE:C6:F6:6D:93:06:0C:07:DF:4B:40:3C:80:6B:5D:39:E2:3F Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 0A13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 0A0D Signing time: Thu 12 Jun 2025 19:37:00 +0000 Manifest this update: Thu 12 Jun 2025 19:36:59 +0000 Manifest next update: Thu 19 Jun 2025 19:36:59 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: f3Lfr6QU5Gd6nB90uV9u2LDwao/TPzFNW45vZMUfnx0=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2579 (0xa13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Jun 12 19:36:59 2025 GMT Not After : Jun 19 19:36:59 2025 GMT Subject: CN=684b2c5b-68fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:04:6c:c4:24:5f:b2:86:f4:38:eb:a2:ab: 8b:94:79:5b:d2:6e:f0:3c:85:06:b2:47:0e:3f:34: ce:38:ba:29:32:35:8c:06:ef:12:6d:61:a8:68:36: 77:a9:7b:ba:7a:8e:c0:c6:fa:94:1c:d0:8a:39:18: 5b:8b:b6:b0:42:81:f3:74:35:da:14:c1:f9:cd:66: 0c:e0:b8:c7:90:08:96:3f:22:77:e2:22:9d:1e:41: 5b:67:2d:9d:d9:98:41:ce:5a:ff:86:1f:c0:bd:ed: e9:0b:3d:2b:fb:6b:19:46:1b:1c:21:2f:16:ee:2e: b4:e2:43:e3:90:86:47:ec:26:68:98:46:ab:fc:be: ab:ea:5e:63:0b:49:ac:fb:66:5e:30:8b:f3:67:bf: 92:a2:24:84:57:de:78:1a:f8:75:87:eb:a8:2b:d4: 89:e2:71:6e:a3:93:f3:ee:57:71:8c:8d:0b:e0:0a: cb:af:4e:22:f5:2b:72:10:03:dc:e9:6c:24:57:60: a2:90:6b:d4:58:b3:a4:20:ef:91:d3:6e:53:b0:16: 87:3e:f4:0a:78:cc:3a:38:b4:71:1d:43:2f:1a:dc: c2:b8:8e:58:7d:e2:ea:e4:51:93:2e:fe:10:5d:ce: 47:80:da:06:ec:49:36:e7:50:8b:87:aa:cc:16:24: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:86:BE:C6:F6:6D:93:06:0C:07:DF:4B:40:3C:80:6B:5D:39:E2:3F X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:79:11:eb:65:b3:d9:67:d3:79:ad:12:1f:79:19:16:6a:90: 82:56:b0:d5:e3:b1:6d:05:20:de:f5:20:77:4b:c5:0f:65:9d: 06:5b:db:4f:0d:2e:f1:7b:34:5e:a2:41:8c:7b:5b:45:cb:74: d5:16:31:23:d0:a6:76:42:dc:fd:6a:ae:78:9b:e4:21:3a:77: b8:62:a6:76:d2:35:27:fb:f9:ea:ff:4b:b8:4b:e6:a8:3c:c8: 30:b8:4d:8f:7c:c4:59:34:64:86:9b:1f:ad:e4:40:50:ba:e0: 89:b2:a5:80:7a:98:ed:6c:56:5e:94:d8:b0:d2:8a:14:df:3e: b8:32:d6:f3:eb:3b:70:8a:6b:a5:89:fd:bb:aa:bb:12:84:57: 04:10:c3:44:f0:92:9a:8a:5d:cd:8c:21:4b:ac:51:39:a5:24: 60:6f:88:e2:74:40:da:33:7a:13:06:e9:6b:5e:51:9f:13:67: b3:37:26:f8:b7:6e:7f:3a:55:4d:6f:df:43:07:d6:92:b3:74: 17:d5:d8:4e:90:cc:c2:b2:e5:86:78:3d:45:82:b8:d3:35:00: 27:74:04:4d:08:42:75:75:98:cb:00:e9:a9:95:cb:de:99:bc: 44:f9:f5:9b:37:d5:92:8f:5f:09:ef:1f:e9:36:39:95:b4:ef: e7:6a:59:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjUwNjEyMTkzNjU5WhcNMjUwNjE5MTkzNjU5WjAYMRYwFAYD VQQDEw02ODRiMmM1Yi02OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E4EbMQkX7KG9DjroquLlHlb0m7wPIUGskcOPzTOOLopMjWMBu8SbWGoaDZ3 qXu6eo7AxvqUHNCKORhbi7awQoHzdDXaFMH5zWYM4LjHkAiWPyJ34iKdHkFbZy2d 2ZhBzlr/hh/Ave3pCz0r+2sZRhscIS8W7i604kPjkIZH7CZomEar/L6r6l5jC0ms +2ZeMIvzZ7+SoiSEV954Gvh1h+uoK9SJ4nFuo5Pz7ldxjI0L4ArLr04i9StyEAPc 6WwkV2CikGvUWLOkIO+R025TsBaHPvQKeMw6OLRxHUMvGtzCuI5YfeLq5FGTLv4Q Xc5HgNoG7Ek251CLh6rMFiR2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWGvsb2 bZMGDAffS0A8gGtdOeI/MB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCeRHrZbPZZ9N5rRIfeRkWapCCVrDV47FtBSDe9SB3S8UPZZ0GW9tP DS7xezReokGMe1tFy3TVFjEj0KZ2Qtz9aq54m+QhOne4YqZ20jUn+/nq/0u4S+ao PMgwuE2PfMRZNGSGmx+t5EBQuuCJsqWAepjtbFZelNiw0ooU3z64Mtbz6ztwimul if27qrsShFcEEMNE8JKail3NjCFLrFE5pSRgb4jidEDaM3oTBulrXlGfE2ezNyb4 t25/OlVNb99DB9aSs3QX1dhOkMzCsuWGeD1FgrjTNQAndARNCEJ1dZjLAOmplcve mbxE+fWbN9WSj18J7x/pNjmVtO/nall7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:46 2025 by rpki-client