$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: YnUhI7zTofd3B7IiUanEVHyXWyKdnferEQ2FkHI9lT4= Subject key identifier: 4A:9E:14:F9:59:4C:97:E7:C4:67:8B:EC:EE:57:18:4E:2E:BF:3A:F5 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 052D Signing time: Sun 20 Jul 2025 23:45:29 +0000 Manifest this update: Sun 20 Jul 2025 23:45:29 +0000 Manifest next update: Sun 27 Jul 2025 23:45:29 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: 9SiCOa1BWEn8G2zyK+NhUOKPcx43BMb/OnOpW2DkDEU=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Jul 20 23:45:29 2025 GMT Not After : Jul 27 23:45:29 2025 GMT Subject: CN=687d7f99-6df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:10:b0:4c:81:35:ae:f3:78:97:3a:c4:03: 87:b1:28:23:47:67:ea:37:8e:12:74:7a:cd:48:20: bf:c6:66:43:3d:ce:c6:78:cc:ef:be:51:4e:18:69: 86:19:c0:21:90:c3:56:bc:30:c5:8f:4a:01:f5:fb: f7:45:8b:59:87:00:4b:7e:87:65:77:af:01:f8:f4: 09:90:7d:07:14:7b:f8:be:5e:74:0a:9c:2b:d8:d3: 3b:2c:b6:a7:2d:8e:89:ff:c8:01:f2:2e:24:29:ab: 0b:99:6b:1b:1d:be:1d:52:75:18:5e:14:db:36:c1: e0:93:6c:62:a1:94:5f:a1:2b:bf:f0:26:e6:ce:8c: 4f:ef:96:28:70:26:14:99:73:90:86:5d:dc:52:68: 95:81:e9:e7:c1:33:ed:ed:a1:20:1e:7a:b1:08:18: b7:a0:e6:28:8f:7b:4d:d0:d8:8a:4e:96:4c:16:b2: 3c:2e:5e:63:b9:93:df:c2:4e:f2:bb:dc:80:8b:a0: a7:92:5f:bb:4f:92:64:15:f4:ea:f8:b0:f7:4d:7f: 77:bc:3f:56:59:ec:1f:5a:54:36:f0:5b:6f:89:df: 60:65:2c:08:02:8f:e2:8c:ea:5d:89:e1:17:9d:62: 32:93:56:d1:b3:9d:d0:3e:5f:67:44:22:ec:9b:6c: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:14:F9:59:4C:97:E7:C4:67:8B:EC:EE:57:18:4E:2E:BF:3A:F5 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:d9:3f:29:da:3b:de:af:7f:88:3e:20:12:72:dc:59:8b: 3c:94:b5:a9:de:20:f9:9c:36:5f:86:45:5a:d3:f2:a8:e7:82: 4d:42:37:7f:39:60:f4:c5:b2:4e:a1:c7:90:c9:09:93:15:00: a5:b0:b8:71:bd:91:a3:91:d7:e2:23:6e:ad:e2:04:9f:43:2a: 21:a9:28:f0:f3:40:e3:fb:4c:2c:1c:4b:18:3e:d1:72:bf:7f: 25:a8:05:82:e6:9b:3b:0b:2e:73:3f:4f:ff:87:84:8f:85:8e: 74:a2:d5:2c:d9:7b:50:f8:7b:ce:79:96:fe:0f:64:32:45:33: 90:a3:06:cb:b4:0b:da:e2:90:cd:a6:aa:c8:d5:b9:55:bb:46: bd:e2:60:20:67:bf:67:95:f3:89:db:28:71:e2:29:37:f4:39: c0:b0:be:b7:2f:1e:56:17:da:ca:93:2a:cd:1d:18:9d:ec:6b: 5d:31:10:69:bb:cc:aa:74:97:ea:77:13:9e:7a:17:1a:c3:51: 8f:c1:6b:b0:29:0d:52:64:fb:c5:6a:45:b2:5b:f6:54:fa:c0: 43:74:8c:28:aa:33:48:9f:83:c4:df:e7:70:a3:bc:a9:3c:98: 0b:66:c8:58:06:69:be:f6:9a:b0:91:79:49:1e:60:fb:bf:24: 75:83:95:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUwNzIwMjM0NTI5WhcNMjUwNzI3MjM0NTI5WjAYMRYwFAYD VQQDEw02ODdkN2Y5OS02ZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6gQsEyBNa7zeJc6xAOHsSgjR2fqN44SdHrNSCC/xmZDPc7GeMzvvlFOGGmG GcAhkMNWvDDFj0oB9fv3RYtZhwBLfodld68B+PQJkH0HFHv4vl50Cpwr2NM7LLan LY6J/8gB8i4kKasLmWsbHb4dUnUYXhTbNsHgk2xioZRfoSu/8CbmzoxP75YocCYU mXOQhl3cUmiVgennwTPt7aEgHnqxCBi3oOYoj3tN0NiKTpZMFrI8Ll5juZPfwk7y u9yAi6Cnkl+7T5JkFfTq+LD3TX93vD9WWewfWlQ28Ftvid9gZSwIAo/ijOpdieEX nWIyk1bRs53QPl9nRCLsm2x9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqeFPlZ TJfnxGeL7O5XGE4uvzr1MB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQy9k/Kdo73q9/iD4gEnLcWYs8lLWp3iD5nDZfhkVa0/Ko54JNQjd/ OWD0xbJOoceQyQmTFQClsLhxvZGjkdfiI26t4gSfQyohqSjw80Dj+0wsHEsYPtFy v38lqAWC5ps7Cy5zP0//h4SPhY50otUs2XtQ+HvOeZb+D2QyRTOQowbLtAva4pDN pqrI1blVu0a94mAgZ79nlfOJ2yhx4ik39DnAsL63Lx5WF9rKkyrNHRid7GtdMRBp u8yqdJfqdxOeehcaw1GPwWuwKQ1SZPvFakWyW/ZU+sBDdIwoqjNIn4PE3+dwo7yp PJgLZshYBmm+9pqwkXlJHmD7vyR1g5UQ -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:17 2025 by rpki-client