$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json) Hash identifier: NhLj2CJXcJuIHgRvelyc/h7Sz83Q2IxnUwmxRzvALxY= Subject key identifier: FB:BD:FD:11:E4:EE:56:13:72:1E:79:B2:45:98:EC:54:80:F9:15:B5 Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft Manifest number: 79 Signing time: Sun 01 Jun 2025 06:26:02 +0000 Manifest this update: Sun 01 Jun 2025 06:26:01 +0000 Manifest next update: Sun 08 Jun 2025 06:26:01 +0000 Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: +8odC/jtgBseK9KbNQ/WLHKZ9HCoHvgH0H+oyFM8PRY=) 2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: H6cM4D6HiFEzXOD3BJphw2tquQW1HD/n9sWWwx2nQbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Jun 1 06:26:01 2025 GMT Not After : Jun 8 06:26:01 2025 GMT Subject: CN=683bf279-7057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:a2:d4:5a:36:22:25:ab:d7:bd:ca:09:9c: 9d:d5:94:ad:b2:1a:ce:f2:59:8d:9c:8f:1b:68:e5: 79:c7:64:e7:d9:16:70:fd:73:50:f5:18:f6:21:2f: d8:66:fd:c2:30:d2:ad:84:3d:7b:c4:65:71:2c:eb: 24:ab:64:08:1a:7d:6e:2d:c6:70:6f:ab:7c:4b:11: 1b:36:b4:e2:27:3b:2f:d0:62:7e:63:19:9f:ea:1f: 17:a0:46:69:2c:8f:53:e5:e9:f5:1f:45:d4:b3:f9: 77:a4:cf:08:af:29:00:1a:c5:04:a6:ba:51:db:e3: bc:d1:bb:ff:e0:57:1f:77:75:66:ad:23:4d:82:1f: 3b:66:e1:9a:8f:5f:ad:e3:34:8e:89:ed:7a:70:a5: 1c:a0:c5:65:42:fa:5c:42:e3:e9:89:25:5c:45:54: 0c:f1:f6:da:9e:3f:7d:bf:20:c4:56:13:a3:97:01: df:f8:ff:2b:dc:b2:c6:9a:90:af:c3:85:32:a8:05: 5f:60:ea:b7:6b:d1:91:ce:e1:f3:2d:32:c2:5c:37: eb:36:66:dc:42:0c:95:3e:a8:4b:8c:a8:af:b2:c5: 01:5c:cf:19:f1:64:d0:8c:23:4b:77:37:23:81:37: 6e:7b:c0:0f:a0:25:3d:6d:b7:d9:fe:63:2d:8a:3e: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BD:FD:11:E4:EE:56:13:72:1E:79:B2:45:98:EC:54:80:F9:15:B5 X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b0:22:2a:97:2f:48:06:fa:1d:86:49:b7:aa:4d:a8:b8:f6: a5:b9:f7:2a:f6:79:9d:bf:21:ad:cd:03:91:79:71:32:c2:72: bf:30:12:11:69:dd:c0:e9:e8:57:35:5e:90:58:d4:c7:cf:e1: 90:86:a2:7a:8f:12:83:ed:8b:b4:1b:43:bc:1c:ed:59:fc:2c: a3:db:91:12:83:66:de:96:45:58:ef:0c:13:75:1f:12:18:ad: 4d:ef:85:60:0c:67:8f:88:17:a4:31:07:fc:06:27:18:ea:56: c2:8d:68:6f:22:e0:12:6c:c6:bf:1f:2e:24:be:61:c2:29:f7: c3:c4:ab:ac:4d:fb:2d:3c:5b:d4:13:fe:aa:a1:27:c6:4d:45: bd:56:ef:c2:12:3c:d2:d2:7c:dc:8d:be:36:89:3a:bd:7f:0a: 27:3c:a0:2d:0f:56:ca:33:6f:4f:24:02:fd:09:6a:44:34:c8: 20:ba:63:85:5f:92:b0:de:7a:db:7d:89:07:aa:05:af:77:52: 3f:6d:58:b7:52:d8:b8:a1:5d:ef:82:70:68:7a:a5:3a:a4:2b: 31:a7:13:49:27:23:e8:46:21:46:41:da:73:21:08:7a:c5:9b: 1e:62:8f:1a:24:68:e0:24:aa:28:27:4d:fa:af:8b:9d:77:08: 9e:fa:4d:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoQjVEOTU1OTc3QURBNDY4M0FDNUI1OUMyNTgxOEI0NDM4 MUMyNEZFNjAeFw0yNTA2MDEwNjI2MDFaFw0yNTA2MDgwNjI2MDFaMBgxFjAUBgNV BAMTDTY4M2JmMjc5LTcwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAOaLUWjYiJavXvcoJnJ3VlK2yGs7yWY2cjxto5XnHZOfZFnD9c1D1GPYhL9hm /cIw0q2EPXvEZXEs6ySrZAgafW4txnBvq3xLERs2tOInOy/QYn5jGZ/qHxegRmks j1Pl6fUfRdSz+XekzwivKQAaxQSmulHb47zRu//gVx93dWatI02CHztm4ZqPX63j NI6J7XpwpRygxWVC+lxC4+mJJVxFVAzx9tqeP32/IMRWE6OXAd/4/yvcssaakK/D hTKoBV9g6rdr0ZHO4fMtMsJcN+s2ZtxCDJU+qEuMqK+yxQFczxnxZNCMI0t3NyOB N257wA+gJT1tt9n+Yy2KPgx3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+739EeTu VhNyHnmyRZjsVID5FbUwHwYDVR0jBBgwFoAUtdlVl3raRoOsW1nCWBi0Q4HCT+Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3LzlBNThDMzhBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1Qt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGRsVmwzcmFSb09zVzFuQ1dCaTBRNEhDVC1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3LzlBNThDMzhBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL3RkbFZsM3JhUm9P c1cxbkNXQmkwUTRIQ1QtWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWwIiqXL0gG+h2GSbeqTai49qW59yr2eZ2/Ia3NA5F5cTLCcr8wEhFp 3cDp6Fc1XpBY1MfP4ZCGonqPEoPti7QbQ7wc7Vn8LKPbkRKDZt6WRVjvDBN1HxIY rU3vhWAMZ4+IF6QxB/wGJxjqVsKNaG8i4BJsxr8fLiS+YcIp98PEq6xN+y08W9QT /qqhJ8ZNRb1W78ISPNLSfNyNvjaJOr1/Cic8oC0PVsozb08kAv0JakQ0yCC6Y4Vf krDeett9iQeqBa93Uj9tWLdS2LihXe+CcGh6pTqkKzGnE0knI+hGIUZB2nMhCHrF mx5ijxokaOAkqignTfqvi513CJ76TcM= -----END CERTIFICATE-----Generated at Mon Jun 2 22:20:58 2025 by rpki-client