$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: vgMIIrYEu7qtO9JP/P3hmUhY1wVKrM2ml5sgdyPZmNM= Subject key identifier: 22:68:9C:16:DE:DD:E1:D4:81:D2:76:9C:78:DF:BF:E6:E1:33:3F:48 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 12B8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 12B0 Signing time: Sat 06 Sep 2025 17:11:06 +0000 Manifest this update: Sat 06 Sep 2025 17:11:05 +0000 Manifest next update: Sat 13 Sep 2025 17:11:05 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: 1L0nggMAWlgXCUiffi7ch0XzJrHOFoJlqg2fn5d+CUA=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4792 (0x12b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Sep 6 17:11:05 2025 GMT Not After : Sep 13 17:11:05 2025 GMT Subject: CN=68bc6b29-eeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:cd:4c:17:28:93:78:18:8e:01:5c:8d:c0: 72:5b:7d:0d:87:03:f5:61:79:20:56:ee:09:d7:8f: c4:4f:55:07:b8:f2:d7:61:a6:49:73:1b:a1:38:39: bc:75:de:76:9a:a3:fc:07:5b:58:3b:47:cc:2b:c4: 4e:e4:68:22:15:70:34:35:91:df:d1:c5:be:7c:90: f8:b8:40:47:94:76:78:ca:74:58:b4:a9:a0:19:39: 22:91:ab:28:25:05:1c:1d:9e:db:b9:2d:69:fc:c3: 59:23:83:1e:23:f9:1f:99:d6:1e:25:a4:d4:f3:6f: 27:38:02:1b:50:90:8d:ac:7c:ff:a6:44:a6:2b:bc: 5f:ed:f8:f5:66:75:85:d0:25:ad:7c:45:66:d1:98: ac:da:2b:08:4d:42:7d:66:f6:d0:82:3e:7b:53:8c: 09:36:4a:27:56:54:f3:88:9a:f3:ed:13:79:6f:2b: eb:aa:ee:af:e9:bc:62:e1:cf:49:a9:db:8d:6d:75: 93:a7:dd:32:53:d6:07:14:92:f5:6f:31:93:b0:4d: a4:66:81:67:a3:c4:0d:d8:e7:a1:7c:b8:d7:83:bb: 50:4c:11:dc:cf:ec:05:a3:1d:24:9b:e5:64:fb:4e: c1:60:a0:47:21:89:4b:50:56:a1:51:ba:0f:49:30: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:68:9C:16:DE:DD:E1:D4:81:D2:76:9C:78:DF:BF:E6:E1:33:3F:48 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a1:73:fa:f8:3d:73:50:99:5b:5e:4a:fa:d8:90:93:a1:8d: 16:2b:e4:ee:e6:ba:3b:64:44:0a:89:d5:30:87:35:3b:94:12: a5:7d:d8:27:e1:bf:23:1a:57:6a:f8:88:0c:48:58:b4:ac:7f: 3e:3d:df:11:9c:c3:01:1b:51:c4:f3:8c:87:09:bf:20:e8:49: 9a:91:3b:d4:eb:87:24:18:7b:5f:03:6b:36:f3:62:06:b1:8e: 43:3a:98:0f:20:4c:ce:61:95:29:ee:fa:f9:80:9e:be:14:eb: f8:6b:0f:da:42:84:3a:57:8f:2a:42:3d:5f:da:00:fe:e1:90: f8:24:b3:b7:de:2e:41:47:80:07:ce:5c:84:e3:a9:81:61:a9: 8c:d5:9f:07:97:d7:63:f4:46:0c:8f:bf:24:e4:28:35:22:2b: 9b:85:ed:0c:82:da:b0:72:6a:7c:7b:53:27:e6:ba:61:ba:4d: 13:61:3f:52:30:c0:8a:4f:1c:82:fa:cf:4a:6f:4e:e4:2b:2f: 49:71:3f:e0:5c:35:a3:98:af:88:0b:3d:9d:cb:b8:0a:25:b8: ee:c8:db:a4:b3:3e:57:89:80:79:cd:8b:89:e2:9f:27:5c:16: 4d:41:c5:1c:44:ef:73:20:c4:f7:43:a3:3a:20:5c:dd:77:32: 97:17:7c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwOTA2MTcxMTA1WhcNMjUwOTEzMTcxMTA1WjAYMRYwFAYD VQQDEw02OGJjNmIyOS1lZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7rNTBcok3gYjgFcjcByW30NhwP1YXkgVu4J14/ET1UHuPLXYaZJcxuhODm8 dd52mqP8B1tYO0fMK8RO5GgiFXA0NZHf0cW+fJD4uEBHlHZ4ynRYtKmgGTkikaso JQUcHZ7buS1p/MNZI4MeI/kfmdYeJaTU828nOAIbUJCNrHz/pkSmK7xf7fj1ZnWF 0CWtfEVm0Zis2isITUJ9ZvbQgj57U4wJNkonVlTziJrz7RN5byvrqu6v6bxi4c9J qduNbXWTp90yU9YHFJL1bzGTsE2kZoFno8QN2OehfLjXg7tQTBHcz+wFox0km+Vk +07BYKBHIYlLUFahUboPSTDxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJonBbe 3eHUgdJ2nHjfv+bhMz9IMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGoXP6+D1zUJlbXkr62JCToY0WK+Tu5ro7ZEQKidUwhzU7lBKlfdgn 4b8jGldq+IgMSFi0rH8+Pd8RnMMBG1HE84yHCb8g6EmakTvU64ckGHtfA2s282IG sY5DOpgPIEzOYZUp7vr5gJ6+FOv4aw/aQoQ6V48qQj1f2gD+4ZD4JLO33i5BR4AH zlyE46mBYamM1Z8Hl9dj9EYMj78k5Cg1Iiubhe0Mgtqwcmp8e1Mn5rphuk0TYT9S MMCKTxyC+s9Kb07kKy9JcT/gXDWjmK+ICz2dy7gKJbjuyNuksz5XiYB5zYuJ4p8n XBZNQcUcRO9zIMT3Q6M6IFzddzKXF3wa -----END CERTIFICATE-----Generated at Sat Sep 6 18:33:11 2025 by rpki-client