$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json) Hash identifier: reB1q91gzikd1WEgd2rXOMIE7i4tKXpAnenFfjXkzZc= Subject key identifier: 41:88:72:84:D2:13:51:7D:4C:76:6D:AC:9B:52:AB:9B:FF:4E:0E:B5 Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft Manifest number: 8D Signing time: Fri 11 Jul 2025 06:50:48 +0000 Manifest this update: Fri 11 Jul 2025 06:50:48 +0000 Manifest next update: Fri 18 Jul 2025 06:50:48 +0000 Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: nc32c10WtP/cblssVBz3Kmrk1nlKlRR7rsAzxHHR2GY=) 2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: H6cM4D6HiFEzXOD3BJphw2tquQW1HD/n9sWWwx2nQbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Jul 2025 06:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Jul 11 06:50:48 2025 GMT Not After : Jul 18 06:50:48 2025 GMT Subject: CN=6870b448-9412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:59:29:53:45:56:98:23:22:08:d7:a0:f2: 03:1e:55:3a:49:6b:c8:c2:15:7c:86:62:12:b0:7b: d1:22:cb:24:2f:ce:64:7a:7b:f4:66:3e:1b:b5:35: 0a:32:43:a7:8c:4b:49:81:0e:8a:50:a8:af:bd:1c: 61:9c:b1:73:9c:a3:fe:5b:58:cc:42:3e:9e:74:87: 0c:27:af:3c:6d:5a:98:76:e9:f8:da:1e:97:12:c5: 03:b7:7f:a8:af:73:ba:d5:44:74:74:76:8b:f1:b8: 46:cd:e9:03:a9:ba:eb:1c:9d:76:f6:ea:77:73:88: 2c:a6:55:4c:fb:eb:fa:88:a2:4a:a5:31:5a:92:5e: 58:f7:f4:bb:11:ba:3a:85:64:2a:6e:16:30:fc:64: 42:c7:25:97:03:da:07:bb:b7:cb:b3:2e:4a:db:b7: b0:1c:a5:10:1b:51:10:2f:71:c8:61:c8:d7:a2:c4: c7:5c:26:9a:8e:80:c4:39:58:5a:31:fe:3c:01:87: 81:4f:1c:2e:4e:37:fb:96:ba:2c:0e:06:9b:e5:0e: 1e:84:02:b3:f8:62:13:33:7c:13:43:3b:d9:ab:77: 48:f1:53:cc:65:eb:a7:1a:ee:c3:57:e6:4f:51:b3: 1a:fd:ab:dd:ac:7e:80:12:f6:8f:e1:55:18:be:e7: 4f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:88:72:84:D2:13:51:7D:4C:76:6D:AC:9B:52:AB:9B:FF:4E:0E:B5 X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:40:7f:c9:df:7f:6a:c5:d5:93:55:61:d1:eb:81:a9:ee:ef: 89:cf:52:d3:51:11:40:fd:0e:b3:50:42:92:8d:a0:ed:d1:72: c4:25:c4:a4:46:65:bd:f1:ff:97:f6:66:04:f5:a3:cd:44:20: a4:e0:20:ee:44:5a:c9:32:8c:13:4c:25:04:4e:3b:4a:2d:ed: 71:bf:08:6d:84:66:72:63:08:0b:c7:ab:19:19:74:90:7f:cd: 83:14:66:53:b7:cd:ec:5f:d4:ef:9c:bd:ba:90:89:e7:e8:09: 41:83:dd:66:70:89:8e:10:53:6f:95:19:13:41:77:df:06:41: 90:a3:b0:82:c1:77:0a:86:c2:7c:a7:f2:3f:15:95:27:5b:f8: 92:e9:9e:21:4d:36:c8:ab:da:f1:43:1a:e5:a9:ca:43:d0:fa: f0:8d:2d:6d:67:86:ea:0f:5d:1b:2d:fe:02:63:17:df:87:d3: 03:49:3e:b9:aa:bf:14:86:3c:cd:30:d7:78:51:5f:a7:f8:d9: 7b:93:e6:97:76:c6:35:56:66:e5:0c:70:88:35:0d:19:29:de: 23:db:04:bb:13:09:12:73:ae:b1:37:1a:58:09:35:2c:ea:db: 39:a6:f0:50:6c:ec:2a:4b:14:8d:63:38:07:23:db:7d:fd:d8: 1e:71:db:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKEI1RDk1NTk3N0FEQTQ2ODNBQzVCNTlDMjU4MThCNDQz ODFDMjRGRTYwHhcNMjUwNzExMDY1MDQ4WhcNMjUwNzE4MDY1MDQ4WjAYMRYwFAYD VQQDEw02ODcwYjQ0OC05NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy15ZKVNFVpgjIgjXoPIDHlU6SWvIwhV8hmISsHvRIsskL85kenv0Zj4btTUK MkOnjEtJgQ6KUKivvRxhnLFznKP+W1jMQj6edIcMJ688bVqYdun42h6XEsUDt3+o r3O61UR0dHaL8bhGzekDqbrrHJ129up3c4gsplVM++v6iKJKpTFakl5Y9/S7Ebo6 hWQqbhYw/GRCxyWXA9oHu7fLsy5K27ewHKUQG1EQL3HIYcjXosTHXCaajoDEOVha Mf48AYeBTxwuTjf7lrosDgab5Q4ehAKz+GITM3wTQzvZq3dI8VPMZeunGu7DV+ZP UbMa/avdrH6AEvaP4VUYvudPnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGIcoTS E1F9THZtrJtSq5v/Tg61MB8GA1UdIwQYMBaAFLXZVZd62kaDrFtZwlgYtEOBwk/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy85QTU4QzM4QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJvT3NXMW5DV0JpMFE0SENU LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1QtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy85QTU4QzM4QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJv T3NXMW5DV0JpMFE0SENULVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFQH/J339qxdWTVWHR64Gp7u+Jz1LTURFA/Q6zUEKSjaDt0XLEJcSk RmW98f+X9mYE9aPNRCCk4CDuRFrJMowTTCUETjtKLe1xvwhthGZyYwgLx6sZGXSQ f82DFGZTt83sX9TvnL26kInn6AlBg91mcImOEFNvlRkTQXffBkGQo7CCwXcKhsJ8 p/I/FZUnW/iS6Z4hTTbIq9rxQxrlqcpD0PrwjS1tZ4bqD10bLf4CYxffh9MDST65 qr8UhjzNMNd4UV+n+Nl7k+aXdsY1VmblDHCINQ0ZKd4j2wS7EwkSc66xNxpYCTUs 6ts5pvBQbOwqSxSNYzgHI9t9/dgecdv/ -----END CERTIFICATE-----Generated at Sat Jul 12 17:07:51 2025 by rpki-client