$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft File: T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft (raw, json) Hash identifier: pGbp8+8N4admKbUGKX+5PqvB7+RbVWbXsTXIuo/qxyY= Subject key identifier: AF:5C:F1:BE:28:02:66:0E:9E:05:D5:7E:A8:13:93:F0:2B:F3:CD:FA Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58 Certificate issuer: /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft Manifest number: 01CF Signing time: Tue 01 Jul 2025 03:22:12 +0000 Manifest this update: Tue 01 Jul 2025 03:22:12 +0000 Manifest next update: Tue 08 Jul 2025 03:22:11 +0000 Files and hashes: 1: T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl (hash: xNfxYuXf2BhWMgt3CWTXFJ5bVnI2xov0XxxXgf+h2M0=) 2: 0BD8AF96D41A11EF804F7049C4F9AE02.roa (hash: CbsMaT+1o+zoMcHzdBRqNGnxnAlCq5uF3XIGjN5ZkQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916548C, serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58 Validity Not Before: Jul 1 03:22:12 2025 GMT Not After : Jul 8 03:22:11 2025 GMT Subject: CN=68635464-a370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:61:88:0c:90:e0:1f:fb:03:2d:74:cf:a9: 2e:82:ca:0f:c9:44:b6:fa:5f:3a:6f:3e:48:6e:f4: 45:dc:b2:82:76:2d:14:96:a6:28:22:0f:7b:ea:03: e8:fe:6c:eb:c7:a9:ce:f2:4c:10:77:7f:7d:9a:1e: 28:79:c9:60:ec:4a:3b:82:8b:78:8e:55:9f:98:a4: 7c:90:c0:9a:9d:c7:8d:9a:5b:95:6a:c7:ba:5c:1e: 6a:c5:b4:df:70:e2:63:36:55:06:4b:e9:1e:c6:fe: f6:05:f5:ff:18:23:d0:a1:44:f2:6d:db:e6:d2:4e: 6b:9f:f0:b0:04:bd:62:d3:2c:b1:64:b9:04:eb:12: a5:fc:71:5b:f5:e9:a6:93:3f:37:85:fd:4b:b6:c1: 1c:09:62:3b:8d:11:61:26:66:a8:eb:7d:87:f0:a8: 1b:e6:1d:70:13:21:af:df:2b:f2:71:0d:6f:2e:9a: 8b:47:ec:c7:35:d6:22:0f:6d:5d:89:8f:fa:a4:63: 81:00:13:3c:59:27:23:3e:7d:f3:44:77:d3:fb:e6: de:81:70:91:5a:42:d5:8a:b9:85:4e:73:7a:7c:59: fc:18:0a:c3:f2:aa:01:a2:77:61:14:d3:3b:4b:25: a8:8a:94:ef:4f:dd:f2:bf:dc:ab:22:c0:97:a2:38: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:F1:BE:28:02:66:0E:9E:05:D5:7E:A8:13:93:F0:2B:F3:CD:FA X509v3 Authority Key Identifier: keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:fd:45:aa:6e:f1:c5:5c:0b:cb:f9:88:ce:fb:ed:52:a8:a4: 57:47:a6:c7:ca:c9:14:b8:d0:ff:0a:c0:ca:10:39:61:41:74: 8a:48:d1:7a:e5:0b:bd:51:06:b4:0e:66:c6:4d:eb:9e:1a:16: b0:59:c7:d4:30:2c:9d:7e:d5:67:00:97:21:df:d4:2e:03:eb: d3:19:aa:f9:71:ea:f9:c6:e2:e1:78:8e:b4:2e:60:bf:c7:e4: 8e:ac:05:70:7b:e7:c7:25:aa:63:cb:8b:f2:18:ff:d3:1e:11: c3:de:0d:84:4e:ad:b3:a0:cf:78:31:b9:13:c5:51:4f:d3:bd: bc:d6:46:87:63:78:e2:ea:31:2e:15:8a:07:bc:30:8c:6c:8b: 66:52:b7:b1:33:ec:63:6c:51:59:4a:b7:6a:3a:55:00:45:0d: a4:c5:35:91:ce:2b:f0:15:a4:8b:b1:a2:aa:ed:da:e0:fd:75: e8:f9:1f:75:1c:1a:54:c4:b4:db:d0:1e:bd:44:c9:70:fa:50: 3b:38:ac:06:4a:34:bd:e5:52:1d:5c:be:7e:bb:08:80:6d:c3: 7e:71:b7:d6:47:70:3d:46:c8:43:d0:4a:59:c1:6f:a7:79:29: bd:2f:46:e4:8a:ca:e9:41:0f:c5:53:6a:83:bc:2d:a3:3c:5e: 45:d0:88:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0OEMxMTAvBgNVBAUTKDRGQTM2OEE2MkVEMjVDNjI3OEUyM0IxQkZGQTI1MUEx NDlBQTJGNTgwHhcNMjUwNzAxMDMyMjEyWhcNMjUwNzA4MDMyMjExWjAYMRYwFAYD VQQDEw02ODYzNTQ2NC1hMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAphiAyQ4B/7Ay10z6kugsoPyUS2+l86bz5IbvRF3LKCdi0UlqYoIg976gPo /mzrx6nO8kwQd399mh4oeclg7Eo7got4jlWfmKR8kMCanceNmluVase6XB5qxbTf cOJjNlUGS+kexv72BfX/GCPQoUTybdvm0k5rn/CwBL1i0yyxZLkE6xKl/HFb9emm kz83hf1LtsEcCWI7jRFhJmao632H8Kgb5h1wEyGv3yvycQ1vLpqLR+zHNdYiD21d iY/6pGOBABM8WScjPn3zRHfT++begXCRWkLVirmFTnN6fFn8GArD8qoBondhFNM7 SyWoipTvT93yv9yrIsCXojghvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9c8b4o AmYOngXVfqgTk/Ar8836MB8GA1UdIwQYMBaAFE+jaKYu0lxieOI7G/+iUaFJqi9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ4Qy9DNzczMUQyNDlF NTUxMUVEOEQ5MkJENzlDNEY5QUUwMi9UNk5vcGk3U1hHSjQ0anNiXzZKUm9VbXFM MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q2Tm9waTdTWEdKNDRqc2JfNkpSb1VtcUwxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ4Qy9DNzczMUQyNDlFNTUxMUVEOEQ5MkJENzlDNEY5QUUwMi9UNk5vcGk3U1hH SjQ0anNiXzZKUm9VbXFMMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5/UWqbvHFXAvL+YjO++1SqKRXR6bHyskUuND/CsDKEDlhQXSKSNF6 5Qu9UQa0DmbGTeueGhawWcfUMCydftVnAJch39QuA+vTGar5cer5xuLheI60LmC/ x+SOrAVwe+fHJapjy4vyGP/THhHD3g2ETq2zoM94MbkTxVFP07281kaHY3ji6jEu FYoHvDCMbItmUrexM+xjbFFZSrdqOlUARQ2kxTWRzivwFaSLsaKq7drg/XXo+R91 HBpUxLTb0B69RMlw+lA7OKwGSjS95VIdXL5+uwiAbcN+cbfWR3A9RshD0EpZwW+n eSm9L0bkisrpQQ/FU2qDvC2jPF5F0Iii -----END CERTIFICATE-----Generated at Wed Jul 2 07:39:23 2025 by rpki-client