$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: 4S0+311+7ESEj4E6ECMXcuUgA/t38XEgWD+Oc5mdtmE= Subject key identifier: 24:13:2E:D9:DB:B5:70:82:72:1F:41:DB:44:06:52:4B:5B:49:05:47 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 128E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 1287 Signing time: Sun 22 Jun 2025 16:57:28 +0000 Manifest this update: Sun 22 Jun 2025 16:57:28 +0000 Manifest next update: Sun 29 Jun 2025 16:57:28 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: UaAB9clIBJqEMvgeV7BnTnGYbKEFtJKbEAf0/VKvZM8=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 16:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4750 (0x128e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Jun 22 16:57:28 2025 GMT Not After : Jun 29 16:57:28 2025 GMT Subject: CN=685835f8-07ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:0c:33:08:46:ce:f5:c1:0f:06:c9:4a:fa: 3f:b8:f3:5d:4d:2e:83:af:9b:5c:65:b9:35:d0:c7: b1:0c:b2:36:5f:d6:a7:07:ed:dc:86:d1:c4:e5:5b: 4d:7a:d9:6a:df:dc:09:9d:02:00:56:75:e5:0e:98: b7:32:4a:e8:93:aa:76:51:3e:da:db:43:bb:7a:aa: 88:86:51:b1:8c:47:61:4a:b7:e5:fe:eb:69:66:85: 86:1b:dd:ea:79:c8:cf:81:7a:c2:c4:cb:3e:5e:f1: 6f:cd:b4:7c:91:73:25:41:8d:cf:6d:94:c9:cd:c6: 13:23:9a:27:d1:d7:f8:81:98:44:0c:7e:81:07:5a: 16:4f:3b:e1:a6:41:4d:3b:05:6a:aa:87:e1:88:67: 37:17:ea:17:f8:2f:b9:dc:53:d5:9f:be:c0:7d:e6: f7:60:e5:49:87:ee:27:b8:3f:ef:74:7c:99:5d:ac: a1:d9:8b:47:e1:f2:59:7e:2c:9a:e6:0a:2d:ea:4f: 73:7d:33:17:98:a0:ad:6c:ba:a5:5a:c3:01:b8:15: f4:89:c8:51:01:24:18:8a:a6:d7:77:81:da:17:5d: b4:11:43:ee:e2:c8:19:d3:f8:c0:24:00:73:b5:48: 65:ba:42:a7:34:f1:f6:00:28:6b:7d:25:14:31:85: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:13:2E:D9:DB:B5:70:82:72:1F:41:DB:44:06:52:4B:5B:49:05:47 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:68:f4:ff:73:9c:95:49:44:ae:06:41:1d:a1:50:93:32:ba: 56:50:01:30:fb:ad:b4:c0:7f:3f:be:3f:92:25:f5:ee:58:6f: 5a:21:84:92:0d:6e:ef:0a:df:24:f9:f0:9a:69:46:ad:e2:54: 10:65:d7:7a:22:3e:7b:89:3c:41:ad:cc:83:01:fb:05:be:83: 6f:78:b2:50:aa:0c:85:10:03:61:f4:ca:e5:d7:5d:a5:bc:98: 8b:53:67:0b:89:0d:21:53:6d:3d:42:85:19:d7:a5:e6:d4:a7: a0:a7:42:99:e4:06:6a:3a:4b:0d:af:fe:2c:d1:ff:47:17:39: fb:c4:71:a3:79:cb:c7:8a:15:83:ac:0d:c6:b4:b0:88:f0:3f: b1:7b:ab:1d:f3:42:e7:32:86:ee:c7:cc:82:50:ac:34:26:91: 10:3e:0e:dc:46:17:15:67:b7:df:90:6b:44:d5:af:37:ba:90: c8:c1:fb:ea:33:78:cf:22:9d:6c:a0:c2:9e:b6:97:c8:ec:01: d2:4d:fc:fa:74:dc:12:f2:13:b9:df:21:85:f4:3c:0c:d3:d2: b8:c8:9c:ef:48:35:cb:d8:aa:5e:d1:f9:ab:8c:73:b9:f3:40: f8:75:20:05:a3:19:85:ad:dd:67:15:d9:5a:25:91:42:49:50: 28:d8:bb:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwNjIyMTY1NzI4WhcNMjUwNjI5MTY1NzI4WjAYMRYwFAYD VQQDEw02ODU4MzVmOC0wN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ0MMwhGzvXBDwbJSvo/uPNdTS6Dr5tcZbk10MexDLI2X9anB+3chtHE5VtN etlq39wJnQIAVnXlDpi3Mkrok6p2UT7a20O7eqqIhlGxjEdhSrfl/utpZoWGG93q ecjPgXrCxMs+XvFvzbR8kXMlQY3PbZTJzcYTI5on0df4gZhEDH6BB1oWTzvhpkFN OwVqqofhiGc3F+oX+C+53FPVn77Afeb3YOVJh+4nuD/vdHyZXayh2YtH4fJZfiya 5got6k9zfTMXmKCtbLqlWsMBuBX0ichRASQYiqbXd4HaF120EUPu4sgZ0/jAJABz tUhlukKnNPH2AChrfSUUMYUzBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQTLtnb tXCCch9B20QGUktbSQVHMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2aPT/c5yVSUSuBkEdoVCTMrpWUAEw+620wH8/vj+SJfXuWG9aIYSS DW7vCt8k+fCaaUat4lQQZdd6Ij57iTxBrcyDAfsFvoNveLJQqgyFEANh9Mrl112l vJiLU2cLiQ0hU209QoUZ16Xm1Kegp0KZ5AZqOksNr/4s0f9HFzn7xHGjecvHihWD rA3GtLCI8D+xe6sd80LnMobux8yCUKw0JpEQPg7cRhcVZ7ffkGtE1a83upDIwfvq M3jPIp1soMKetpfI7AHSTfz6dNwS8hO53yGF9DwM09K4yJzvSDXL2Kpe0fmrjHO5 80D4dSAFoxmFrd1nFdlaJZFCSVAo2Lv1 -----END CERTIFICATE-----Generated at Sun Jun 22 23:22:01 2025 by rpki-client