$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: TkpfbMKdJrHTASmjE5x4yGUYiAtjPnFVpUjYKGpY3Mg= Subject key identifier: 1E:D4:18:AB:2A:58:C1:1A:B9:AE:EC:84:AD:C5:28:64:96:42:0C:87 Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 0448 Signing time: Mon 21 Jul 2025 00:43:37 +0000 Manifest this update: Mon 21 Jul 2025 00:43:37 +0000 Manifest next update: Mon 28 Jul 2025 00:43:37 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: WtpICrPzOjq6dSMmzHyNKhTwYU65DZWjMMocIJLt9ZQ=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Jul 21 00:43:37 2025 GMT Not After : Jul 28 00:43:37 2025 GMT Subject: CN=687d8d39-22bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:87:79:0c:b4:13:39:2d:d3:6f:5d:28:21: 57:0f:91:41:e1:c3:26:7b:e2:46:f6:43:5a:bc:a0: 36:79:14:7d:f1:f9:28:b8:85:5b:19:c4:13:7f:61: 9b:5a:d0:0d:e0:31:69:1f:e9:0a:14:82:20:af:02: c1:85:fa:71:66:ca:0f:fe:2f:5e:bb:8a:ad:8d:ef: d1:06:b4:40:40:5a:b5:fb:76:36:03:76:c3:e4:7c: 93:cc:23:36:de:93:d0:2e:d9:44:ff:1a:df:a1:96: 68:0d:e5:ef:71:ac:66:67:68:13:02:91:ff:e7:ed: 79:b4:a7:25:09:17:91:00:1a:af:ce:5e:7d:c4:70: 12:de:2d:80:b8:78:b4:af:94:c8:c2:33:47:23:21: e8:67:b8:31:b8:62:b4:13:03:0e:2c:bd:65:1e:bc: 97:6f:06:8d:9b:4b:1b:e5:52:71:95:df:9a:25:a7: 7a:87:41:ad:93:df:44:3a:0b:a6:84:06:18:77:6b: ea:a0:09:e8:eb:d3:5f:5a:ac:8b:bf:1c:6a:fc:4b: 73:15:20:05:7e:3a:8c:aa:fb:ee:81:b2:48:80:d2: cc:81:3b:a3:bf:cb:c9:4d:3c:de:c2:2f:00:a7:6e: 9c:f5:b1:5b:da:f9:1e:1c:8e:93:ff:d6:f7:18:8c: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D4:18:AB:2A:58:C1:1A:B9:AE:EC:84:AD:C5:28:64:96:42:0C:87 X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:9e:58:e8:3c:cb:f5:7a:5d:f8:c7:e2:a2:43:f5:85:2e:ba: ce:65:c4:90:2a:05:86:3a:be:bf:89:d0:5b:46:db:74:69:84: 31:15:c1:98:05:66:bf:4a:fe:42:4f:ac:fa:dd:44:8f:b7:14: e9:69:f7:72:21:8b:f6:19:bd:8c:b3:2f:f1:d9:71:da:1c:46: 6e:57:8f:bc:0f:32:ba:34:57:e5:09:9f:63:b0:4d:f7:3e:7e: 62:8f:6c:60:a2:23:96:4a:42:a2:f9:c8:cf:8a:0b:a0:8c:d0: 29:db:48:23:6f:3d:89:47:84:d6:3b:76:2e:97:97:46:98:f0: c2:99:2c:47:14:5c:38:76:2c:5e:ac:82:e1:5b:d9:71:3c:b8: 10:48:87:0d:28:22:0d:60:1d:0f:c4:79:7c:6a:a4:01:65:51: c7:c6:ae:90:57:fc:7d:8d:86:d7:27:2a:9b:4d:7c:21:1e:36: 1a:e2:f1:22:ba:32:6f:2a:f6:48:2e:ed:56:6f:29:57:00:5b: d7:eb:ab:e1:47:74:06:eb:0c:28:13:b0:68:6c:7a:0e:11:32: 22:8b:3d:0e:af:7a:b9:a8:97:b1:b9:78:e0:3c:e6:0a:f2:97: 0a:3b:1d:33:7d:ca:78:2c:71:e8:70:2a:1d:64:10:fe:43:c2: 43:86:e9:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUwNzIxMDA0MzM3WhcNMjUwNzI4MDA0MzM3WjAYMRYwFAYD VQQDEw02ODdkOGQzOS0yMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tGHeQy0Ezkt029dKCFXD5FB4cMme+JG9kNavKA2eRR98fkouIVbGcQTf2Gb WtAN4DFpH+kKFIIgrwLBhfpxZsoP/i9eu4qtje/RBrRAQFq1+3Y2A3bD5HyTzCM2 3pPQLtlE/xrfoZZoDeXvcaxmZ2gTApH/5+15tKclCReRABqvzl59xHAS3i2AuHi0 r5TIwjNHIyHoZ7gxuGK0EwMOLL1lHryXbwaNm0sb5VJxld+aJad6h0Gtk99EOgum hAYYd2vqoAno69NfWqyLvxxq/EtzFSAFfjqMqvvugbJIgNLMgTujv8vJTTzewi8A p26c9bFb2vkeHI6T/9b3GIymNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7UGKsq WMEaua7shK3FKGSWQgyHMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwnljoPMv1el34x+KiQ/WFLrrOZcSQKgWGOr6/idBbRtt0aYQxFcGY BWa/Sv5CT6z63USPtxTpafdyIYv2Gb2Msy/x2XHaHEZuV4+8DzK6NFflCZ9jsE33 Pn5ij2xgoiOWSkKi+cjPigugjNAp20gjbz2JR4TWO3Yul5dGmPDCmSxHFFw4dixe rILhW9lxPLgQSIcNKCINYB0PxHl8aqQBZVHHxq6QV/x9jYbXJyqbTXwhHjYa4vEi ujJvKvZILu1WbylXAFvX66vhR3QG6wwoE7BobHoOETIiiz0Or3q5qJexuXjgPOYK 8pcKOx0zfcp4LHHocCodZBD+Q8JDhuna -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:45 2025 by rpki-client