$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: +MQdg54mjHJh5zz0rWYPG01eNTsRL1wiOiuPCAqjDmg= Subject key identifier: 86:7E:CA:B1:AE:EB:59:75:53:70:27:11:1C:F8:DC:D1:3E:49:53:59 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 065B Signing time: Fri 18 Jul 2025 22:38:12 +0000 Manifest this update: Fri 18 Jul 2025 22:38:11 +0000 Manifest next update: Fri 25 Jul 2025 22:38:11 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: x0n5k9k72iT3UcawqqeuNC4rSWiS6PQdBP6ORSRAX1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Jul 18 22:38:11 2025 GMT Not After : Jul 25 22:38:11 2025 GMT Subject: CN=687accd3-737a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:04:0c:fd:c8:5d:d9:13:04:11:3e:f5:1f:f0: f5:d0:a7:a4:1b:1e:4e:2a:ac:17:b5:a8:f7:ae:ad: 34:13:30:1e:4a:2c:f1:5d:4e:b9:34:25:16:40:e6: b7:eb:2b:08:ab:ca:20:64:53:fa:25:3c:6d:81:a8: c7:24:bb:8e:4a:9b:e6:a7:7d:0f:85:18:6b:ea:ad: 89:af:5e:52:53:99:5e:e8:84:c2:e4:4f:dd:a1:1d: a0:08:a9:a6:65:8b:b7:28:ed:aa:09:09:b4:f1:c7: 58:46:d0:67:fb:74:93:e8:a5:97:b3:91:d4:bb:f0: db:2c:e3:52:ac:c8:46:ae:e8:b8:92:25:b2:28:d8: 46:ed:63:ee:ec:94:81:8c:76:e4:04:0f:4b:b2:66: fa:9e:cc:a8:3b:93:73:58:b5:e2:5f:ef:86:46:85: f2:f0:06:8b:60:95:e8:7f:eb:ba:b1:a3:7b:7f:91: 3a:20:29:86:65:7b:8e:ca:94:a3:aa:f1:0d:d8:b0: f7:49:b1:0f:b8:96:f4:5e:4d:52:aa:f9:64:b9:92: 54:7e:7b:4c:96:e2:1a:dd:b3:92:0c:28:60:67:99: cf:a6:c4:94:f6:0b:13:2c:6a:99:58:f4:4b:bf:26: 08:4c:f4:57:55:92:57:46:81:ab:69:bf:1d:bb:45: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7E:CA:B1:AE:EB:59:75:53:70:27:11:1C:F8:DC:D1:3E:49:53:59 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fc:b6:73:ae:1c:c0:6e:43:21:27:18:89:7a:23:f2:9a:74: 74:f4:6f:c0:80:64:76:fb:6e:18:fb:5b:cb:0a:4c:61:fa:db: 1f:48:91:b3:99:5e:68:cf:13:a2:8b:57:a9:9a:35:bc:19:e8: ff:13:8d:9f:e2:0f:18:14:c7:19:71:6b:f7:48:92:50:93:ce: a9:26:5c:5a:8f:d2:e0:16:d3:9d:7d:21:09:46:40:dd:95:46: df:9e:1c:bd:aa:74:5e:be:f1:97:76:eb:bf:08:30:76:d9:dc: 6a:44:8e:88:2b:32:58:03:89:b6:a1:d5:cb:70:77:7f:ec:29: ac:8a:bd:4b:bd:ea:39:61:22:a1:16:1f:31:49:da:28:d2:28: b7:b8:7e:06:6f:16:f7:87:c8:0b:d6:8c:5a:ac:a3:b5:82:70: 41:84:5a:96:41:7a:3b:f7:02:f6:6e:3b:3a:95:ac:a7:a9:cd: 9b:7b:31:e0:3e:70:55:89:08:03:e2:12:05:2a:8b:25:ff:3c: b2:82:ec:5a:83:24:cd:78:2e:bd:e9:fa:5d:66:73:36:5e:d5: 84:b7:49:1b:b6:69:36:e9:ce:c8:ea:cd:c4:d8:a0:b1:46:be: 22:23:ab:64:bc:fa:79:a3:c5:fe:6c:bf:f9:22:5d:d0:23:b6: 76:c7:d6:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwNzE4MjIzODExWhcNMjUwNzI1MjIzODExWjAYMRYwFAYD VQQDEw02ODdhY2NkMy03MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wQM/chd2RMEET71H/D10KekGx5OKqwXtaj3rq00EzAeSizxXU65NCUWQOa3 6ysIq8ogZFP6JTxtgajHJLuOSpvmp30PhRhr6q2Jr15SU5le6ITC5E/doR2gCKmm ZYu3KO2qCQm08cdYRtBn+3ST6KWXs5HUu/DbLONSrMhGrui4kiWyKNhG7WPu7JSB jHbkBA9Lsmb6nsyoO5NzWLXiX++GRoXy8AaLYJXof+u6saN7f5E6ICmGZXuOypSj qvEN2LD3SbEPuJb0Xk1SqvlkuZJUfntMluIa3bOSDChgZ5nPpsSU9gsTLGqZWPRL vyYITPRXVZJXRoGrab8du0W83wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ+yrGu 61l1U3AnERz43NE+SVNZMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs/LZzrhzAbkMhJxiJeiPymnR09G/AgGR2+24Y+1vLCkxh+tsfSJGz mV5ozxOii1epmjW8Gej/E42f4g8YFMcZcWv3SJJQk86pJlxaj9LgFtOdfSEJRkDd lUbfnhy9qnRevvGXduu/CDB22dxqRI6IKzJYA4m2odXLcHd/7Cmsir1Lveo5YSKh Fh8xSdoo0ii3uH4Gbxb3h8gL1oxarKO1gnBBhFqWQXo79wL2bjs6laynqc2bezHg PnBViQgD4hIFKosl/zyyguxagyTNeC696fpdZnM2XtWEt0kbtmk26c7I6s3E2KCx Rr4iI6tkvPp5o8X+bL/5Il3QI7Z2x9aN -----END CERTIFICATE-----Generated at Sun Jul 20 10:51:55 2025 by rpki-client