$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: rzUia5oRqvB3mIpnUP+pgdruv+a0BtOHbAHkGiPhCMg= Subject key identifier: 85:87:F8:41:B9:25:F2:1C:30:23:44:43:4C:83:80:BD:E3:2F:57:1D Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 0122 Signing time: Sat 31 May 2025 05:11:22 +0000 Manifest this update: Sat 31 May 2025 05:11:22 +0000 Manifest next update: Sat 07 Jun 2025 05:11:22 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: CvgIZgBCPRjbLeQuIUQGptIUkmXD+ZKjMOqJlP6cDK4=) 2: 65B83800104811F0B4EB540DC4F9AE02.roa (hash: gPeEj7TbdMJkFsvZpQ/te6RCgN+nHiYNDmZuf4HaJ1I=) 3: A75C4CD8FAA411EF9D7B5F80C4F9AE02.roa (hash: F8tsV1hsbNpvD5dlCFkpq9+9IzGp4Qja71ybiyu42xE=) 4: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 5: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: May 31 05:11:22 2025 GMT Not After : Jun 7 05:11:22 2025 GMT Subject: CN=683a8f7a-1185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:31:44:64:1c:ce:5b:c0:1b:af:b7:24:fb: f6:f0:d5:d0:49:f3:67:b9:86:f8:32:c1:7a:9e:2e: 61:a5:bf:81:ce:72:9c:ae:a8:25:f9:cb:b0:60:7e: de:ce:e9:d0:85:e5:67:e1:da:cb:35:8d:8a:85:08: 51:a9:9f:78:3a:5e:4b:15:c4:54:31:29:30:57:cf: f5:fe:54:76:bb:b9:1b:fc:e0:95:1a:2e:50:ee:0f: b0:f6:eb:13:c4:49:30:d0:e6:58:4d:d0:0c:d5:c3: e7:60:ab:4b:62:5f:d2:81:52:e3:af:09:55:8c:75: 53:c1:d6:cb:fc:3e:70:6d:36:2e:fb:cf:30:99:dd: 2f:ab:55:04:97:53:24:90:62:09:2b:44:c6:a9:ad: 72:40:b8:ab:3a:8f:ac:67:1b:cb:2e:f1:8c:f3:e4: 81:1a:f9:5a:f6:87:6d:b0:4d:29:cb:1a:9c:28:ff: ad:1d:4a:ce:ca:e8:12:7e:32:7e:c3:d8:93:c4:25: e9:cb:0a:72:58:5d:d2:26:df:d7:e5:5d:df:58:c5: bb:c0:78:c4:82:f2:b2:ad:3b:58:1c:2d:34:16:3a: d4:da:29:57:bc:6a:bc:1c:d4:19:31:a1:58:a5:28: ff:c9:ec:45:78:2a:b4:5b:ea:fd:ca:83:e4:6c:a9: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:F8:41:B9:25:F2:1C:30:23:44:43:4C:83:80:BD:E3:2F:57:1D X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f6:ed:7f:cc:de:91:3e:d7:0e:0e:0f:07:0d:c4:fa:29:91: e4:95:58:98:ec:8c:11:88:9c:4b:b6:e1:6e:ee:f1:95:96:66: c2:d0:16:fa:02:b4:9d:9d:2e:be:16:cf:39:99:73:a5:a4:4d: 26:76:26:e9:04:e5:21:3b:36:87:f9:19:47:b1:80:37:f5:8a: b4:99:80:a1:74:15:1a:d8:95:df:ce:14:e5:fe:62:89:ee:f7: 42:1f:b5:6c:14:a3:57:72:9d:aa:7e:e4:eb:38:50:fe:f6:0a: 8b:d8:ea:cc:e3:fa:c6:d4:4e:c7:58:73:2f:b2:7c:c6:8d:2f: 7f:b7:c3:29:6c:da:a7:45:17:8e:54:d1:f2:21:64:f5:7b:33: 74:06:eb:81:4d:b5:ff:cc:05:36:e3:89:32:87:2c:5a:f4:ca: 45:fb:de:be:0e:bf:83:a0:22:62:17:da:d7:07:55:13:30:e2: a4:83:c1:4f:a2:7d:ad:06:4b:42:39:e2:ee:d6:4e:a9:6a:33: a8:53:30:41:ef:11:35:bf:0b:5b:5a:b8:22:9c:56:cd:ce:d9: 0a:15:4a:a5:d8:13:3a:7d:c7:45:a8:af:6e:9d:29:08:74:5c: a3:26:0f:bb:2b:69:ae:f8:04:5a:96:3d:24:31:19:5a:59:2b: 37:95:fd:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwNTMxMDUxMTIyWhcNMjUwNjA3MDUxMTIyWjAYMRYwFAYD VQQDEw02ODNhOGY3YS0xMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyroxRGQczlvAG6+3JPv28NXQSfNnuYb4MsF6ni5hpb+BznKcrqgl+cuwYH7e zunQheVn4drLNY2KhQhRqZ94Ol5LFcRUMSkwV8/1/lR2u7kb/OCVGi5Q7g+w9usT xEkw0OZYTdAM1cPnYKtLYl/SgVLjrwlVjHVTwdbL/D5wbTYu+88wmd0vq1UEl1Mk kGIJK0TGqa1yQLirOo+sZxvLLvGM8+SBGvla9odtsE0pyxqcKP+tHUrOyugSfjJ+ w9iTxCXpywpyWF3SJt/X5V3fWMW7wHjEgvKyrTtYHC00FjrU2ilXvGq8HNQZMaFY pSj/yexFeCq0W+r9yoPkbKn6KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWH+EG5 JfIcMCNEQ0yDgL3jL1cdMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE9u1/zN6RPtcODg8HDcT6KZHklViY7IwRiJxLtuFu7vGVlmbC0Bb6 ArSdnS6+Fs85mXOlpE0mdibpBOUhOzaH+RlHsYA39Yq0mYChdBUa2JXfzhTl/mKJ 7vdCH7VsFKNXcp2qfuTrOFD+9gqL2OrM4/rG1E7HWHMvsnzGjS9/t8MpbNqnRReO VNHyIWT1ezN0BuuBTbX/zAU244kyhyxa9MpF+96+Dr+DoCJiF9rXB1UTMOKkg8FP on2tBktCOeLu1k6pajOoUzBB7xE1vwtbWrginFbNztkKFUql2BM6fcdFqK9unSkI dFyjJg+7K2mu+ARalj0kMRlaWSs3lf1w -----END CERTIFICATE-----Generated at Sat May 31 17:32:57 2025 by rpki-client