$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: /AKJCf+qNTRV5TBe9JNjJWtO7PRk+7kCh1CmndPpISU= Subject key identifier: FA:DB:33:94:41:DE:89:3A:A0:5B:5D:F9:9C:CF:A0:C7:15:6A:5B:68 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 13D1 Signing time: Thu 12 Jun 2025 18:31:08 +0000 Manifest this update: Thu 12 Jun 2025 18:31:07 +0000 Manifest next update: Thu 19 Jun 2025 18:31:07 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: 9MJEmMRVAv406VziF6osbn44KBrMG1oyE9u4aIRV554=) 2: 81A55E3629E711F08823E620C4F9AE02.roa (hash: KfN4zxeodpsFIbSyhLtkJmMGq5059ian7Q/W7KRDS8k=) 3: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: LZ/NW4Ul+FvSw/YC7i7jRWtLnsARm09vDsPHML7acmQ=) 4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: vQI57o5020OkGxEigG4Zf/nYbRzTA4H4J4BJInGUUoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Jun 12 18:31:07 2025 GMT Not After : Jun 19 18:31:07 2025 GMT Subject: CN=684b1ceb-d216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:ca:26:d8:27:6a:a5:fc:f7:e5:79:b7:97: 84:9a:86:04:c5:2e:79:89:7e:2a:5b:9d:5a:d8:13: 73:46:7b:e3:c1:a8:de:97:58:db:b8:7e:63:a8:c1: a3:48:d1:e7:70:4c:0a:ea:7a:ef:5f:3f:7d:e5:6a: a6:88:00:30:10:23:8e:6b:7a:94:1a:18:f8:30:cc: 1c:29:b6:e1:7b:a8:06:ca:2f:82:46:83:98:b5:c6: 97:22:69:28:6b:e1:21:20:d1:cc:d1:9a:4e:72:f6: 22:b0:59:3b:c7:b2:c8:85:e3:00:52:37:72:f7:62: 42:6b:e7:4d:b7:a5:2f:65:cf:79:fc:04:c7:09:53: 74:04:f8:44:b2:e4:27:cb:7b:0c:56:d7:b8:02:2e: 37:4c:70:b7:d9:aa:59:ff:1b:41:60:20:e5:0a:95: e0:f7:12:ce:35:ac:73:9a:8f:e7:ec:71:1f:34:0d: 1e:3d:bf:4b:4d:40:ab:9b:cb:f0:bb:81:cf:6e:bd: 04:bf:ab:3c:c1:89:20:27:e8:41:0d:10:da:1b:ce: 7b:a7:2b:19:91:ad:33:20:bc:4e:0e:f2:44:f3:37: 25:32:4a:dc:7a:c0:39:f9:38:89:eb:fe:09:71:d6: 5c:93:4a:4d:36:7b:cc:ea:f1:b7:5c:9b:40:02:45: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:33:94:41:DE:89:3A:A0:5B:5D:F9:9C:CF:A0:C7:15:6A:5B:68 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c3:c8:b8:5a:f9:ac:d3:3b:c2:d1:c3:ee:46:14:e2:f3:60: 91:5e:a8:e8:39:ab:09:0d:49:87:c0:60:45:01:71:f2:db:e9: e0:ab:d4:f9:8d:bb:68:f0:2f:d4:27:a3:f6:c0:49:2a:1e:84: 85:37:c2:cc:b3:de:bf:b5:72:08:21:46:d2:a6:6f:ec:2e:63: 65:93:c2:c9:d6:8f:24:fd:94:ad:fe:7a:9f:7a:32:e7:b9:af: 0f:2c:94:11:e5:9a:04:77:20:4d:9e:6d:98:54:07:16:89:b1: ce:d5:99:37:7d:d6:a8:80:9a:21:fd:00:3c:59:7c:cc:c4:fc: 88:25:c8:1e:91:80:14:aa:fb:91:27:b6:aa:79:0c:2b:99:0a: 92:dd:2d:59:5b:89:90:24:bc:af:17:36:13:52:47:cf:a3:20: 0e:2d:9d:07:b4:6c:a8:28:40:23:e5:3f:b4:15:3c:b3:11:34: e0:6b:59:90:05:06:7c:57:ba:b2:37:49:3f:89:3f:f1:0b:98: 36:88:93:8d:3d:4c:6e:7c:06:30:f4:78:a5:7f:a6:ef:cc:bd: f7:6f:09:fd:9f:0b:95:b6:88:e3:67:56:82:47:f0:72:19:68: d1:f3:1d:7f:48:fd:ce:0f:84:9d:dd:dc:69:bb:d0:03:20:9d: f7:d3:db:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUwNjEyMTgzMTA3WhcNMjUwNjE5MTgzMTA3WjAYMRYwFAYD VQQDEw02ODRiMWNlYi1kMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmfKJtgnaqX89+V5t5eEmoYExS55iX4qW51a2BNzRnvjwajel1jbuH5jqMGj SNHncEwK6nrvXz995WqmiAAwECOOa3qUGhj4MMwcKbbhe6gGyi+CRoOYtcaXImko a+EhINHM0ZpOcvYisFk7x7LIheMAUjdy92JCa+dNt6UvZc95/ATHCVN0BPhEsuQn y3sMVte4Ai43THC32apZ/xtBYCDlCpXg9xLONaxzmo/n7HEfNA0ePb9LTUCrm8vw u4HPbr0Ev6s8wYkgJ+hBDRDaG857pysZka0zILxODvJE8zclMkrcesA5+TiJ6/4J cdZck0pNNnvM6vG3XJtAAkVdqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrbM5RB 3ok6oFtd+ZzPoMcValtoMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiw8i4Wvms0zvC0cPuRhTi82CRXqjoOasJDUmHwGBFAXHy2+ngq9T5 jbto8C/UJ6P2wEkqHoSFN8LMs96/tXIIIUbSpm/sLmNlk8LJ1o8k/ZSt/nqfejLn ua8PLJQR5ZoEdyBNnm2YVAcWibHO1Zk3fdaogJoh/QA8WXzMxPyIJcgekYAUqvuR J7aqeQwrmQqS3S1ZW4mQJLyvFzYTUkfPoyAOLZ0HtGyoKEAj5T+0FTyzETTga1mQ BQZ8V7qyN0k/iT/xC5g2iJONPUxufAYw9Hilf6bvzL33bwn9nwuVtojjZ1aCR/By GWjR8x1/SP3OD4Sd3dxpu9ADIJ3309vq -----END CERTIFICATE-----Generated at Thu Jun 12 20:19:33 2025 by rpki-client