$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: bZqiQt99D3wJyoc7OtZswHnrQgiEbxV0vvbKYzJFbZM= Subject key identifier: 78:BC:66:72:92:68:2E:F3:5D:7E:1F:C1:36:48:14:E0:06:2A:79:02 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 1284 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 127D Signing time: Mon 02 Jun 2025 17:17:35 +0000 Manifest this update: Mon 02 Jun 2025 17:17:34 +0000 Manifest next update: Mon 09 Jun 2025 17:17:34 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: ywlA5mCcnj2fhCG/0D8pc0n+FfNlDohASLS/TWjKckE=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4740 (0x1284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Jun 2 17:17:34 2025 GMT Not After : Jun 9 17:17:34 2025 GMT Subject: CN=683ddcaf-b679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:38:ea:75:65:32:9d:bb:fe:55:7b:b6:06: 18:8a:cf:ff:6a:8e:53:15:97:3b:9a:f9:02:52:4d: b6:61:07:fe:04:e6:05:10:02:94:b3:56:ca:65:b8: a6:e9:f9:d2:28:48:49:5d:db:ce:84:ec:c2:2b:7d: 88:b0:dc:7a:66:dd:e8:b0:c4:f0:d7:3f:38:f8:5a: 3b:36:f4:94:b2:ad:13:4a:86:c3:b2:fd:3c:f0:95: 4a:db:cd:56:ab:c1:30:a7:11:dc:55:43:30:aa:68: 7f:0c:46:71:6e:c9:dc:59:8d:59:8d:ea:83:67:b5: 4d:71:9e:62:76:17:38:69:11:6e:db:9e:9e:a3:55: 9d:a0:44:a0:f1:f1:5d:50:f4:53:d1:07:b1:19:09: 5d:27:f2:e9:27:89:78:8d:69:73:f2:31:6b:e3:34: 33:e4:f4:54:ca:ae:d4:2d:ba:9c:a1:df:ea:b5:73: b4:62:5a:a1:1d:14:ca:81:52:c8:ef:b5:7e:7d:cd: 93:5c:b9:4f:a2:66:09:de:cf:d8:f3:3c:e4:fc:ee: 8a:a8:04:a3:0c:2c:88:32:6c:e0:de:52:a8:73:cd: 0d:a8:4e:97:55:a7:32:cb:0d:1c:1f:a5:77:42:55: 3a:a0:a9:a2:68:ad:87:63:29:0a:57:23:40:dc:09: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BC:66:72:92:68:2E:F3:5D:7E:1F:C1:36:48:14:E0:06:2A:79:02 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:82:b3:d0:54:89:45:fc:13:7e:1d:f0:ed:39:ac:76:5c:41: 3c:d0:50:96:7b:dc:f6:5e:66:35:13:dd:e8:ed:c2:42:04:ad: e8:eb:c1:c4:2e:46:30:11:cb:ee:df:8a:65:d4:2a:5d:12:84: 43:eb:b7:2f:6e:23:ff:96:86:dc:c7:67:c4:ba:d1:0d:77:70: 98:78:c5:3c:ff:4d:8f:b2:26:22:a5:5b:cb:6c:d3:99:5b:a2: da:29:47:53:94:e8:d3:a6:e3:a0:e4:af:18:d9:a7:47:6b:8d: e7:21:91:40:a1:96:8e:25:09:c1:77:40:e4:7b:e6:64:9a:0d: 14:d8:9f:ae:ff:ac:0b:cc:43:af:b6:2b:7b:1d:b0:9c:c8:0d: ed:05:e0:1a:e8:e5:b0:ec:a2:ca:47:71:58:0b:af:b1:73:55: 0d:14:ca:50:87:a0:fd:df:9f:8c:7f:25:20:88:45:1e:0b:16: ef:82:b9:7b:d2:ce:40:45:64:46:78:87:ef:15:46:85:d7:6f: 46:fd:5a:31:31:a6:35:13:b1:d4:c8:ec:52:a7:98:eb:fd:e1: ee:ac:cb:57:10:97:a8:df:93:b7:4a:d2:ee:86:fc:1e:bf:9b: 84:27:58:71:87:8d:f8:a4:0a:1f:2f:ba:af:5b:a6:e7:82:81: d7:c2:98:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwNjAyMTcxNzM0WhcNMjUwNjA5MTcxNzM0WjAYMRYwFAYD VQQDEw02ODNkZGNhZi1iNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5846nVlMp27/lV7tgYYis//ao5TFZc7mvkCUk22YQf+BOYFEAKUs1bKZbim 6fnSKEhJXdvOhOzCK32IsNx6Zt3osMTw1z84+Fo7NvSUsq0TSobDsv088JVK281W q8EwpxHcVUMwqmh/DEZxbsncWY1ZjeqDZ7VNcZ5idhc4aRFu256eo1WdoESg8fFd UPRT0QexGQldJ/LpJ4l4jWlz8jFr4zQz5PRUyq7ULbqcod/qtXO0YlqhHRTKgVLI 77V+fc2TXLlPomYJ3s/Y8zzk/O6KqASjDCyIMmzg3lKoc80NqE6XVacyyw0cH6V3 QlU6oKmiaK2HYykKVyNA3Al2HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi8ZnKS aC7zXX4fwTZIFOAGKnkCMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLgrPQVIlF/BN+HfDtOax2XEE80FCWe9z2XmY1E93o7cJCBK3o68HE LkYwEcvu34pl1CpdEoRD67cvbiP/lobcx2fEutENd3CYeMU8/02PsiYipVvLbNOZ W6LaKUdTlOjTpuOg5K8Y2adHa43nIZFAoZaOJQnBd0Dke+Zkmg0U2J+u/6wLzEOv tit7HbCcyA3tBeAa6OWw7KLKR3FYC6+xc1UNFMpQh6D935+MfyUgiEUeCxbvgrl7 0s5ARWRGeIfvFUaF129G/VoxMaY1E7HUyOxSp5jr/eHurMtXEJeo35O3StLuhvwe v5uEJ1hxh434pAofL7qvW6bngoHXwpg2 -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:39 2025 by rpki-client