$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: if3L18v3zY1H+XQG57/5eHzxhHHAbeFGUhzh2ss0e0Y= Subject key identifier: 10:80:D4:30:95:21:40:71:B5:AF:46:1A:F5:CB:13:F5:92:32:E7:54 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 12AA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 12A2 Signing time: Sun 10 Aug 2025 17:05:06 +0000 Manifest this update: Sun 10 Aug 2025 17:05:06 +0000 Manifest next update: Sun 17 Aug 2025 17:05:06 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: UleIpIukyXoO5C/pIFq2xNJ+QBIv1s6P/VerLpTBLg8=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4778 (0x12aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Aug 10 17:05:06 2025 GMT Not After : Aug 17 17:05:06 2025 GMT Subject: CN=6898d142-97d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:36:54:32:76:0f:33:48:94:66:20:16:5b: e8:97:b3:82:d8:27:82:73:36:07:ad:d5:48:98:50: 48:73:78:ce:21:a8:57:58:ba:ee:34:c6:0e:74:fc: 24:98:31:7d:a7:44:cf:63:70:1c:e0:1d:4e:43:b7: 28:04:a2:32:9b:1b:91:0d:5f:89:d9:b6:f6:da:71: 47:92:24:ff:46:f1:4e:04:9f:38:b4:b2:74:d2:cd: 02:a7:26:2c:29:be:e4:bc:1b:59:a4:a3:e7:75:31: a8:84:e1:f9:31:68:af:0f:65:b6:a3:e0:45:a2:fc: d0:d1:57:04:39:3d:c5:33:ac:c2:39:5d:b8:6c:5b: 71:80:7c:e8:39:3f:88:4f:ab:61:dc:1b:a0:0d:f2: 19:cb:3f:97:a1:8a:1f:e7:93:e6:01:84:36:34:86: f6:56:6b:ea:36:c1:b4:13:3e:27:d0:9a:66:ac:6f: 97:db:0b:a8:c7:5e:0d:8b:9b:03:d1:12:84:ec:b3: f4:10:2e:8b:1b:48:65:e4:00:2a:a9:2f:30:ae:82: d4:c2:e3:c9:91:7d:80:a1:67:20:31:08:72:f2:2c: 3f:06:c5:e3:18:af:b4:a1:4f:c3:8c:f9:b4:bd:5b: ec:6a:cf:16:58:aa:1c:f3:f2:d3:8a:89:21:2b:60: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:80:D4:30:95:21:40:71:B5:AF:46:1A:F5:CB:13:F5:92:32:E7:54 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:cd:61:63:90:3b:82:dd:c4:ef:6a:39:f6:b4:26:3b:c2:ae: 93:79:8a:7e:22:45:5b:45:94:af:11:f2:5a:52:38:7e:b9:ee: d2:5b:e6:74:75:f9:b8:f4:11:eb:57:8b:27:26:f1:ff:a9:d6: 7d:dc:89:68:46:fc:43:b5:4f:8c:81:c6:7f:fe:ce:9b:b0:f5: b2:8c:af:53:1d:21:81:82:75:da:d1:e8:5f:0a:99:8c:bc:60: d4:f0:1b:ce:86:be:7d:78:04:35:26:13:bf:c8:d0:b3:c7:e5: 30:8a:70:c6:43:5e:c0:ea:bf:8f:bc:21:9b:1f:b9:d0:7a:a3: 66:3e:22:b1:c8:eb:9b:31:6c:8b:7c:1d:24:c0:1f:21:89:1e: 58:c9:e0:db:b5:a8:18:b9:08:8e:e7:b0:a6:c0:19:b5:33:9e: cd:0e:06:67:a4:b8:53:42:02:0f:3b:c5:07:e2:50:23:41:96: 3c:06:27:a1:9a:2d:24:bb:c8:40:bc:8c:08:b3:12:b8:db:b2: de:bb:ef:2b:3a:5e:09:e2:19:70:c3:54:c4:0e:ec:1b:df:b5: ae:e6:21:78:5c:15:7e:ba:6f:f6:01:c4:48:ed:2a:7f:34:89: 7c:4b:6a:a4:de:05:9b:6a:29:95:66:ea:47:21:11:81:fa:ee: 04:b5:89:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwODEwMTcwNTA2WhcNMjUwODE3MTcwNTA2WjAYMRYwFAYD VQQDEw02ODk4ZDE0Mi05N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0U2VDJ2DzNIlGYgFlvol7OC2CeCczYHrdVImFBIc3jOIahXWLruNMYOdPwk mDF9p0TPY3Ac4B1OQ7coBKIymxuRDV+J2bb22nFHkiT/RvFOBJ84tLJ00s0CpyYs Kb7kvBtZpKPndTGohOH5MWivD2W2o+BFovzQ0VcEOT3FM6zCOV24bFtxgHzoOT+I T6th3BugDfIZyz+XoYof55PmAYQ2NIb2VmvqNsG0Ez4n0JpmrG+X2wuox14Ni5sD 0RKE7LP0EC6LG0hl5AAqqS8wroLUwuPJkX2AoWcgMQhy8iw/BsXjGK+0oU/DjPm0 vVvsas8WWKoc8/LTiokhK2BSmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCA1DCV IUBxta9GGvXLE/WSMudUMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVzWFjkDuC3cTvajn2tCY7wq6TeYp+IkVbRZSvEfJaUjh+ue7SW+Z0 dfm49BHrV4snJvH/qdZ93IloRvxDtU+MgcZ//s6bsPWyjK9THSGBgnXa0ehfCpmM vGDU8BvOhr59eAQ1JhO/yNCzx+UwinDGQ17A6r+PvCGbH7nQeqNmPiKxyOubMWyL fB0kwB8hiR5YyeDbtagYuQiO57CmwBm1M57NDgZnpLhTQgIPO8UH4lAjQZY8Bieh mi0ku8hAvIwIsxK427Leu+8rOl4J4hlww1TEDuwb37Wu5iF4XBV+um/2AcRI7Sp/ NIl8S2qk3gWbaimVZupHIRGB+u4EtYmP -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:07 2025 by rpki-client