$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: 7sVNrBuEjmFixrOffPmkUiTkbTi4sAYe1DxGVi9V4pY= Subject key identifier: 63:46:94:3F:BB:79:63:C7:F4:F1:9F:E9:F4:90:CF:9E:E6:2A:07:07 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 129B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 1294 Signing time: Fri 18 Jul 2025 17:14:49 +0000 Manifest this update: Fri 18 Jul 2025 17:14:49 +0000 Manifest next update: Fri 25 Jul 2025 17:14:49 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: HLvsY3h/j0Fx8D56Vmi83QA0pwTH2EBmR2/xO3uMfMM=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4763 (0x129b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Jul 18 17:14:49 2025 GMT Not After : Jul 25 17:14:49 2025 GMT Subject: CN=687a8109-a77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a5:8e:cf:ee:e0:15:97:c0:a7:10:29:97:bb: c3:74:af:79:bf:f5:63:92:3a:23:94:2d:4f:5e:13: 80:57:3d:ac:3b:bf:ab:a7:66:8c:e7:cd:98:ba:60: 73:72:86:6d:f6:0e:33:e0:c2:6a:34:b4:1d:1d:ea: d6:5c:5e:c8:d1:91:22:31:c9:8f:7f:9b:5b:22:b3: d1:4e:a9:55:9e:11:56:c0:4d:65:f7:26:86:5d:9b: c4:fb:2f:0f:de:fe:f0:95:67:cc:6d:76:34:5b:63: 37:bb:84:6b:e6:e7:26:77:8a:66:51:17:aa:fa:02: 98:73:c5:72:ff:9e:af:59:62:1c:82:96:5a:6e:58: e3:4d:27:2e:11:2d:14:a0:89:50:44:84:5b:a5:13: cf:6e:db:a4:e5:98:a6:09:8e:e9:a1:45:50:0f:70: 71:de:b7:af:41:f6:4c:20:c4:ea:82:a4:cf:3c:90: 5a:a3:af:d2:a8:af:3a:37:13:99:83:5c:77:12:9e: 73:85:02:13:9b:18:6d:a1:09:de:56:e6:e2:dc:05: 3c:e3:f0:86:a8:d3:52:f1:da:33:ec:c6:67:ea:bb: 90:ac:b1:87:1c:a0:2a:82:10:95:c1:04:b4:25:3a: a8:3d:f1:67:07:ba:0d:80:6c:52:8c:29:ce:b5:dc: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:46:94:3F:BB:79:63:C7:F4:F1:9F:E9:F4:90:CF:9E:E6:2A:07:07 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a7:40:e8:82:d6:61:26:2d:4c:4d:ca:9b:83:92:ee:05:09: 01:7d:99:17:e2:0b:2d:6b:09:6e:b7:9a:9d:18:cb:bf:0b:49: f5:c1:71:e9:19:bb:69:11:91:c2:7c:57:05:30:0e:bc:15:c8: 8d:77:f1:82:82:b7:ee:d8:fe:df:61:84:73:b4:a0:d8:2f:3c: 7c:31:7d:85:0c:18:73:15:3e:f9:40:ec:b7:bc:ce:b2:ef:a7: 7f:2f:31:19:1d:d9:2e:13:77:87:50:6c:90:c3:b0:a9:1c:f0: b9:ab:a2:1c:01:05:34:aa:f6:e2:4b:d1:ae:02:78:af:36:ed: e3:87:1f:e6:72:23:88:8f:0d:a9:48:76:3b:40:34:f1:72:1b: 23:02:10:82:e9:bb:cb:f3:1d:e2:fe:d6:00:d4:7e:26:82:ff: 78:55:18:0b:8f:2a:13:0d:54:2d:6c:67:cd:d6:98:0a:c4:67: aa:a6:20:96:26:8d:67:46:8c:e2:02:75:7f:e8:4d:09:a9:b6: 74:05:26:bf:21:87:d7:24:31:fa:8c:89:65:61:15:31:50:2d: 89:9c:4d:33:80:a6:99:d9:29:7b:8f:a1:ea:db:6c:b5:31:0b: e6:30:8c:da:c0:76:f2:e7:ed:7a:58:6f:23:58:7e:72:0c:35: 99:dc:89:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwNzE4MTcxNDQ5WhcNMjUwNzI1MTcxNDQ5WjAYMRYwFAYD VQQDEw02ODdhODEwOS1hNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qWOz+7gFZfApxApl7vDdK95v/VjkjojlC1PXhOAVz2sO7+rp2aM582YumBz coZt9g4z4MJqNLQdHerWXF7I0ZEiMcmPf5tbIrPRTqlVnhFWwE1l9yaGXZvE+y8P 3v7wlWfMbXY0W2M3u4Rr5ucmd4pmUReq+gKYc8Vy/56vWWIcgpZabljjTScuES0U oIlQRIRbpRPPbtuk5ZimCY7poUVQD3Bx3revQfZMIMTqgqTPPJBao6/SqK86NxOZ g1x3Ep5zhQITmxhtoQneVubi3AU84/CGqNNS8doz7MZn6ruQrLGHHKAqghCVwQS0 JTqoPfFnB7oNgGxSjCnOtdwiGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNGlD+7 eWPH9PGf6fSQz57mKgcHMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkp0DogtZhJi1MTcqbg5LuBQkBfZkX4gstawlut5qdGMu/C0n1wXHp GbtpEZHCfFcFMA68FciNd/GCgrfu2P7fYYRztKDYLzx8MX2FDBhzFT75QOy3vM6y 76d/LzEZHdkuE3eHUGyQw7CpHPC5q6IcAQU0qvbiS9GuAnivNu3jhx/mciOIjw2p SHY7QDTxchsjAhCC6bvL8x3i/tYA1H4mgv94VRgLjyoTDVQtbGfN1pgKxGeqpiCW Jo1nRoziAnV/6E0JqbZ0BSa/IYfXJDH6jIllYRUxUC2JnE0zgKaZ2Sl7j6Hq22y1 MQvmMIzawHby5+16WG8jWH5yDDWZ3Ilb -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:50 2025 by rpki-client