$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: 2eDjFhR+SIlaylR1yrdIMB9SiZQPX78SBcEvwPy+bk8= Subject key identifier: 24:29:FD:0A:96:B7:1B:C9:18:7E:7A:3A:36:C2:6A:28:B5:32:E2:60 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0537 Signing time: Fri 08 Aug 2025 23:59:23 +0000 Manifest this update: Fri 08 Aug 2025 23:59:23 +0000 Manifest next update: Fri 15 Aug 2025 23:59:23 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: W5O8liQKPsACdBUWe8Eg+aTjMhhpsZFAAAyz8xdlZEA=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Aug 8 23:59:23 2025 GMT Not After : Aug 15 23:59:23 2025 GMT Subject: CN=68968f5b-926b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:0a:8c:90:db:f6:9d:80:ab:8a:12:3e:bf: ce:9a:be:7b:c9:c5:ae:01:13:46:2b:b0:f8:a3:69: 12:a1:85:72:dd:c6:02:94:77:b3:35:98:fb:1f:de: 30:b9:89:97:ff:4c:13:f9:ea:49:39:d3:c2:06:26: 28:19:20:d8:23:2d:d6:8e:9f:d9:9b:18:eb:4f:6b: ce:1e:a9:2f:c0:30:a2:62:94:cb:ca:b9:3d:61:10: b1:1c:16:0f:50:90:24:be:0f:ba:53:90:40:09:9f: 6f:46:83:e8:ef:ed:29:d3:aa:7e:03:db:39:5a:c3: e3:37:b4:8e:35:54:b9:89:55:91:ce:ce:45:34:cc: cd:a9:87:57:d9:b7:4b:7c:66:7a:60:67:36:b8:b2: f5:84:7d:be:ab:0d:3f:a4:44:6f:2a:4c:c6:a5:02: bc:8c:d4:32:f6:bf:c2:3f:ff:c4:ef:8d:1d:f4:46: 95:dd:7e:9e:86:6d:07:50:48:21:08:0e:c6:70:2d: d7:20:7c:0d:be:d7:eb:f6:92:57:e5:81:60:d1:8d: b5:9f:54:74:c1:8b:72:9d:ec:09:d5:ec:e1:a6:43: 5d:aa:e7:54:df:ac:97:a3:da:d7:a6:0d:84:a2:4a: d6:c8:6c:0c:dd:98:1c:f3:f4:88:53:11:34:c4:19: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:FD:0A:96:B7:1B:C9:18:7E:7A:3A:36:C2:6A:28:B5:32:E2:60 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:07:5d:03:a4:b1:00:c2:99:fe:97:4d:f4:2b:bc:48:b3:f6: 7a:91:99:2a:9d:63:b0:22:b4:8f:08:fc:c6:e6:b2:59:15:3a: 08:44:b8:7e:33:47:68:9e:b3:28:ba:eb:91:2c:06:27:93:6a: 0a:14:86:f7:0a:dc:ce:56:ee:89:70:be:78:4b:69:0f:ce:bc: 29:a5:ef:4a:e4:90:ca:8b:d7:d3:6f:6f:e2:68:6a:19:36:7a: 20:9d:9c:8c:84:2d:11:48:01:17:50:5b:fd:c4:61:75:e9:20: 1c:2e:2a:04:c0:29:79:0c:ac:ea:84:8a:5f:c8:fc:0e:d2:7f: eb:8e:39:0c:50:b6:66:b8:98:fc:3b:01:1b:06:99:e8:d5:68: 3d:09:ef:7f:93:31:c0:5e:9d:35:50:37:ad:2e:79:fd:84:e8: ed:97:a5:c8:18:ac:95:e2:fd:6e:08:4e:15:04:40:5c:89:84: 7e:f3:db:d6:92:4b:bf:24:9e:6d:e3:47:2d:b2:c4:19:52:83: eb:ee:48:83:75:32:ca:f1:01:aa:78:1c:5d:59:0d:74:a0:06: 59:bb:c9:b7:9b:1e:8d:61:b4:47:ee:75:8f:03:c7:aa:40:a9: 8a:b3:4b:e0:43:5b:09:d0:5e:b2:00:b6:8d:be:51:5f:63:ca: 9b:6c:93:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUwODA4MjM1OTIzWhcNMjUwODE1MjM1OTIzWjAYMRYwFAYD VQQDEw02ODk2OGY1Yi05MjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dsKjJDb9p2Aq4oSPr/Omr57ycWuARNGK7D4o2kSoYVy3cYClHezNZj7H94w uYmX/0wT+epJOdPCBiYoGSDYIy3Wjp/ZmxjrT2vOHqkvwDCiYpTLyrk9YRCxHBYP UJAkvg+6U5BACZ9vRoPo7+0p06p+A9s5WsPjN7SONVS5iVWRzs5FNMzNqYdX2bdL fGZ6YGc2uLL1hH2+qw0/pERvKkzGpQK8jNQy9r/CP//E740d9EaV3X6ehm0HUEgh CA7GcC3XIHwNvtfr9pJX5YFg0Y21n1R0wYtynewJ1ezhpkNdqudU36yXo9rXpg2E okrWyGwM3Zgc8/SIUxE0xBnvvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQp/QqW txvJGH56OjbCaii1MuJgMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEB10DpLEAwpn+l030K7xIs/Z6kZkqnWOwIrSPCPzG5rJZFToIRLh+ M0donrMouuuRLAYnk2oKFIb3CtzOVu6JcL54S2kPzrwppe9K5JDKi9fTb2/iaGoZ NnognZyMhC0RSAEXUFv9xGF16SAcLioEwCl5DKzqhIpfyPwO0n/rjjkMULZmuJj8 OwEbBpno1Wg9Ce9/kzHAXp01UDetLnn9hOjtl6XIGKyV4v1uCE4VBEBciYR+89vW kku/JJ5t40ctssQZUoPr7kiDdTLK8QGqeBxdWQ10oAZZu8m3mx6NYbRH7nWPA8eq QKmKs0vgQ1sJ0F6yALaNvlFfY8qbbJMQ -----END CERTIFICATE-----Generated at Sat Aug 9 22:48:00 2025 by rpki-client