$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft File: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft (raw, json) Hash identifier: qWu1sVByAEj43IsEXvoIi45jYR3mKMaI9ruAV5OfhPo= Subject key identifier: A3:F0:1B:41:76:84:03:E7:16:40:36:5B:A4:E2:19:03:2E:55:76:D3 Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA Certificate issuer: /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft Manifest number: 09B0 Signing time: Wed 20 Aug 2025 20:06:33 +0000 Manifest this update: Wed 20 Aug 2025 20:06:33 +0000 Manifest next update: Wed 27 Aug 2025 20:06:33 +0000 Files and hashes: 1: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl (hash: Yd+1iB83kGUhgPCKBPyNGo7p7CCiR4mu5hAvr0YM8mg=) 2: A7FF3E74AD2511EFB6717A1CC4F9AE02.roa (hash: 8jyodIT0lA23GFn2Etdimkb1I3FPJx9giYmFsDGMJ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C016, serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA Validity Not Before: Aug 20 20:06:33 2025 GMT Not After : Aug 27 20:06:33 2025 GMT Subject: CN=68a62ac9-f94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:32:9b:04:63:47:74:fe:54:1f:b0:3d:61: 90:c2:89:77:58:77:c8:82:22:86:31:a9:be:c1:0c: 5d:e9:8a:bb:db:74:b9:95:62:6c:3a:fb:00:9a:80: 98:d9:5f:da:6f:ab:28:2e:4b:44:94:f1:04:1d:ad: d2:d6:ae:7e:a2:c7:3b:3a:af:77:97:ed:01:d2:24: 8c:7a:37:51:d0:40:26:54:5f:0c:67:db:87:99:17: 5a:29:d8:5f:2e:33:47:b0:64:38:05:31:3b:6f:c7: fc:cc:05:18:6a:6b:1b:71:8f:8c:4e:ab:5b:25:25: e9:6e:45:9a:87:b7:45:82:ce:00:89:01:94:d2:4c: d3:a8:56:69:ad:de:e3:f9:a6:55:f8:38:fd:10:dd: 02:21:66:b1:0b:dd:26:24:c5:30:6e:5f:8c:d6:28: cb:88:59:57:46:23:8f:87:47:7d:b1:31:94:bb:9d: 93:08:4e:6e:8f:21:91:d1:df:77:c1:34:17:43:16: f7:c9:08:83:a7:b7:50:69:f2:fa:7b:74:46:69:12: 16:c3:db:62:5f:f4:71:2d:39:5e:d0:91:f2:01:88: 1d:05:ca:a5:c7:9a:3f:89:eb:bb:c5:32:91:78:6b: 5a:40:82:56:e5:91:45:7e:c9:6f:8e:d6:26:af:db: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F0:1B:41:76:84:03:E7:16:40:36:5B:A4:E2:19:03:2E:55:76:D3 X509v3 Authority Key Identifier: keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6a:bf:da:02:b0:43:8a:bf:f5:f6:9b:90:16:53:ad:96:f2: b8:f2:e9:44:11:6b:44:33:1d:45:6f:f4:69:39:7c:cd:1e:87: 06:32:c7:52:f8:d3:a3:9e:6f:2b:47:9e:2e:b3:78:b4:bf:bd: 17:69:1f:0b:17:99:12:cf:55:3a:70:7a:3e:ab:23:cf:ea:b8: 2c:f8:32:53:19:ac:cf:11:58:14:ed:5c:2e:8d:8f:cb:be:5b: 49:84:00:c5:03:8a:4e:32:5e:1f:46:bc:84:ce:e6:36:67:34: 74:79:49:b8:94:ed:d8:49:6e:65:67:c1:98:7b:10:3e:55:90: dd:94:01:81:d5:2d:e8:23:f0:da:81:44:66:e3:22:0f:50:77: 64:6c:3b:e5:4b:3a:15:4f:ad:7e:4f:d0:65:97:e3:7d:59:e1: a4:7d:8f:da:79:5e:50:60:d2:28:58:d7:13:14:81:1b:35:3c: 71:be:cd:f3:9b:39:c4:9a:5a:ba:2d:05:38:80:17:58:13:41: b0:9c:fb:64:98:c1:6b:31:35:f2:f4:de:22:6f:1c:5d:14:55: d5:66:11:94:f6:c2:55:fe:38:5c:96:fd:db:56:9b:fb:49:86: 92:b2:a2:0c:44:0f:73:3e:d8:e7:87:47:50:71:48:fd:cc:e3: f5:db:ba:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMwMTYxMTAvBgNVBAUTKEI1QUU0N0RBRDA0QTQ2NTkzQTNBRDA4MjUyMDZFMTBC Q0Y5NkY4Q0EwHhcNMjUwODIwMjAwNjMzWhcNMjUwODI3MjAwNjMzWjAYMRYwFAYD VQQDEw02OGE2MmFjOS1mOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqkymwRjR3T+VB+wPWGQwol3WHfIgiKGMam+wQxd6Yq723S5lWJsOvsAmoCY 2V/ab6soLktElPEEHa3S1q5+osc7Oq93l+0B0iSMejdR0EAmVF8MZ9uHmRdaKdhf LjNHsGQ4BTE7b8f8zAUYamsbcY+MTqtbJSXpbkWah7dFgs4AiQGU0kzTqFZprd7j +aZV+Dj9EN0CIWaxC90mJMUwbl+M1ijLiFlXRiOPh0d9sTGUu52TCE5ujyGR0d93 wTQXQxb3yQiDp7dQafL6e3RGaRIWw9tiX/RxLTle0JHyAYgdBcqlx5o/ieu7xTKR eGtaQIJW5ZFFfslvjtYmr9vCXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPwG0F2 hAPnFkA2W6TiGQMuVXbTMB8GA1UdIwQYMBaAFLWuR9rQSkZZOjrQglIG4QvPlvjK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzAxNi9DRjVGMjlDQThG MzkxMUVBQjNDMzE3NEFDNEY5QUUwMi90YTVIMnRCS1JsazZPdENDVWdiaEM4LVct TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhNUgydEJLUmxrNk90Q0NVZ2JoQzgtVy1Nby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzAxNi9DRjVGMjlDQThGMzkxMUVBQjNDMzE3NEFDNEY5QUUwMi90YTVIMnRCS1Js azZPdENDVWdiaEM4LVctTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ar/aArBDir/19puQFlOtlvK48ulEEWtEMx1Fb/RpOXzNHocGMsdS +NOjnm8rR54us3i0v70XaR8LF5kSz1U6cHo+qyPP6rgs+DJTGazPEVgU7VwujY/L vltJhADFA4pOMl4fRryEzuY2ZzR0eUm4lO3YSW5lZ8GYexA+VZDdlAGB1S3oI/Da gURm4yIPUHdkbDvlSzoVT61+T9Bll+N9WeGkfY/aeV5QYNIoWNcTFIEbNTxxvs3z mznEmlq6LQU4gBdYE0GwnPtkmMFrMTXy9N4ibxxdFFXVZhGU9sJV/jhclv3bVpv7 SYaSsqIMRA9zPtjnh0dQcUj9zOP127r7 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:37 2025 by rpki-client