$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json) Hash identifier: chdsQkPuNX2+Q8/vRewqjcGqUCpGPuKpmNAG0FbX/7g= Subject key identifier: 0A:51:93:84:42:57:DD:FE:B6:01:2E:81:96:82:23:7E:14:D9:71:8F Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538 Certificate serial: 0B1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft Manifest number: 0B15 Signing time: Mon 16 Jun 2025 19:09:27 +0000 Manifest this update: Mon 16 Jun 2025 19:09:26 +0000 Manifest next update: Mon 23 Jun 2025 19:09:26 +0000 Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: gIYmx/KR4cVoW92O759nn9EpJdwobBedKsVTOQ34VdU=) 2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: muZS9WNxEL2wJKlgL2513BvJDYDXcwI4cyb0WW+U1LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2844 (0xb1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538 Validity Not Before: Jun 16 19:09:26 2025 GMT Not After : Jun 23 19:09:26 2025 GMT Subject: CN=68506be7-217a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:ce:e4:c5:ab:53:5c:2d:b4:cf:4d:b5:06: 08:04:9c:6c:d9:2d:0b:fa:a8:7e:57:7f:19:96:b1: fc:d9:3c:c4:a4:ba:3f:5b:89:d8:2f:0d:8a:af:87: 3e:fb:c9:42:bd:1e:a9:bb:e3:cc:4a:a2:65:f5:44: 1b:2b:e7:f2:ff:6c:06:97:51:ed:58:d9:94:c6:b4: d6:1d:d8:07:3a:2b:82:1d:4e:84:95:32:a2:7d:c8: 12:85:86:66:bb:a2:92:9d:79:b5:7c:fa:22:c0:75: 1d:24:72:e0:bb:8b:d2:4e:26:dd:13:16:71:11:1a: cb:8d:8e:ff:5b:98:b3:5a:d4:fe:4a:9c:86:35:c6: 87:12:bd:45:94:a3:1f:ec:14:18:e2:75:c1:3c:5b: ea:b7:0b:1c:ed:07:1c:54:9e:c0:8b:e4:69:5c:20: 56:8a:2a:fa:1e:d8:2a:3a:cc:9c:b5:78:98:98:92: 7d:0d:44:f6:23:88:4e:52:ab:df:2b:c2:7f:d9:67: 46:b0:09:41:98:69:45:f2:ab:cd:9c:52:49:ac:51: e4:50:66:c5:6c:31:13:a3:f4:21:4c:65:11:36:33: e1:e0:ee:08:ea:b4:5a:1b:16:70:bd:81:d9:dc:07: 68:55:67:36:ef:3d:bf:f3:1e:a9:69:26:12:c0:5c: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:93:84:42:57:DD:FE:B6:01:2E:81:96:82:23:7E:14:D9:71:8F X509v3 Authority Key Identifier: keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b1:a5:77:6c:0d:32:f2:dc:76:22:c2:df:e9:d8:0e:64:47: 09:a1:9e:81:1b:f7:1d:d0:83:78:3e:12:3e:a0:f2:fa:32:e1: 22:bd:81:f6:00:03:21:ce:53:d8:f5:0f:d2:d9:91:5f:1c:1d: 02:e4:c3:59:2d:99:02:85:0a:8b:9a:7b:73:8f:dd:d0:42:a0: 78:7d:f9:f1:bc:1f:b6:04:bd:36:65:e4:67:8e:bb:85:a6:15: f1:b9:f6:02:6f:9f:5c:fe:8a:c7:1d:53:eb:ac:e6:1c:d3:bc: 06:71:2c:cd:14:0c:cc:1d:6a:44:a7:d3:a6:05:29:1d:2f:d0: d1:db:cb:d0:15:22:98:05:89:97:d8:5e:90:7f:69:00:52:77: 30:21:b8:8b:f0:3d:65:7c:9a:82:04:61:83:31:65:4d:99:fe: ea:b1:78:b1:36:6f:b2:58:1c:05:0e:f3:1b:f9:c4:54:69:36: 69:76:10:e4:e3:d9:90:0b:74:54:d4:36:b1:15:8f:92:7b:1a: a4:58:b6:3d:28:82:e7:82:69:77:9b:37:09:b2:f2:40:11:a9: 5e:0c:32:5d:7b:8d:11:78:e4:9a:6e:3a:c1:07:e1:f3:35:93: 28:7a:24:9e:d5:d6:5c:0a:79:5c:c0:04:9b:59:51:26:5d:2c: 59:a0:66:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1 RDc4M0Q1MzgwHhcNMjUwNjE2MTkwOTI2WhcNMjUwNjIzMTkwOTI2WjAYMRYwFAYD VQQDEw02ODUwNmJlNy0yMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DXO5MWrU1wttM9NtQYIBJxs2S0L+qh+V38ZlrH82TzEpLo/W4nYLw2Kr4c+ +8lCvR6pu+PMSqJl9UQbK+fy/2wGl1HtWNmUxrTWHdgHOiuCHU6ElTKifcgShYZm u6KSnXm1fPoiwHUdJHLgu4vSTibdExZxERrLjY7/W5izWtT+SpyGNcaHEr1FlKMf 7BQY4nXBPFvqtwsc7QccVJ7Ai+RpXCBWiir6HtgqOsyctXiYmJJ9DUT2I4hOUqvf K8J/2WdGsAlBmGlF8qvNnFJJrFHkUGbFbDETo/QhTGURNjPh4O4I6rRaGxZwvYHZ 3AdoVWc27z2/8x6paSYSwFwlQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApRk4RC V93+tgEugZaCI34U2XGPMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDQ1OS85OUVDODlFQzQyMjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25O MG5RbXlTZlJhSGRkZUQxVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvsaV3bA0y8tx2IsLf6dgOZEcJoZ6BG/cd0IN4PhI+oPL6MuEivYH2 AAMhzlPY9Q/S2ZFfHB0C5MNZLZkChQqLmntzj93QQqB4ffnxvB+2BL02ZeRnjruF phXxufYCb59c/orHHVPrrOYc07wGcSzNFAzMHWpEp9OmBSkdL9DR28vQFSKYBYmX 2F6Qf2kAUncwIbiL8D1lfJqCBGGDMWVNmf7qsXixNm+yWBwFDvMb+cRUaTZpdhDk 49mQC3RU1DaxFY+SexqkWLY9KILngml3mzcJsvJAEaleDDJde40ReOSabjrBB+Hz NZMoeiSe1dZcCnlcwASbWVEmXSxZoGZC -----END CERTIFICATE-----Generated at Wed Jun 18 14:57:19 2025 by rpki-client