$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: AYeN+GV2I0ykyG1dan2lWbEUpeEPpNIDH0IdsK70hjc= Subject key identifier: B3:46:DC:C9:0B:B6:4B:F5:9D:CE:A4:8A:9B:AD:19:92:1C:F7:52:4A Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 13CF Signing time: Tue 10 Jun 2025 18:35:44 +0000 Manifest this update: Tue 10 Jun 2025 18:35:44 +0000 Manifest next update: Tue 17 Jun 2025 18:35:44 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: HjzY0Of/MXGTW8eqWLqSm6I8AEcQ5AalLDn4XHF5z/M=) 2: 81A55E3629E711F08823E620C4F9AE02.roa (hash: KfN4zxeodpsFIbSyhLtkJmMGq5059ian7Q/W7KRDS8k=) 3: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: LZ/NW4Ul+FvSw/YC7i7jRWtLnsARm09vDsPHML7acmQ=) 4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: vQI57o5020OkGxEigG4Zf/nYbRzTA4H4J4BJInGUUoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Jun 10 18:35:44 2025 GMT Not After : Jun 17 18:35:44 2025 GMT Subject: CN=68487b00-cf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:70:8e:a5:95:a7:66:9b:58:c2:5e:2b:d1: 86:2d:c3:33:64:c1:31:aa:e4:df:5a:f9:8f:cb:24: 2a:05:fb:d9:40:c0:56:16:13:73:27:e6:21:bd:25: 0b:a6:94:d0:27:f9:dd:11:2f:33:99:0f:d2:91:78: 49:62:0e:59:f6:96:ec:86:f3:ad:34:1c:79:1f:e4: 57:e3:e4:8e:72:6a:c4:1d:1d:72:37:a9:31:73:00: a2:b7:ad:8a:3c:71:bb:ed:84:d9:fa:4b:e2:a8:8a: 6a:b3:7f:40:20:d9:2c:5f:ae:3d:7f:e3:43:ab:d2: 3a:10:11:3e:a7:c7:43:a8:60:e4:d3:11:fb:57:b1: 00:bc:e1:90:fc:44:33:21:84:80:99:ef:67:a4:2b: fa:1d:82:78:bc:60:57:e7:af:4c:02:49:f0:03:f4: 71:71:da:c7:cb:89:c5:ff:f8:ec:e8:ad:35:45:59: 1c:a6:59:88:c7:76:28:ac:75:23:80:43:5c:a4:4e: 83:1a:4d:48:f2:db:99:fa:07:9b:f3:59:08:40:ac: 13:2f:ab:da:c2:b2:31:8c:96:71:a1:de:f6:37:a3: 30:e4:2a:c8:e6:81:92:60:43:68:61:a4:6c:f8:9a: 13:b0:de:52:98:3e:34:9b:92:d0:61:19:b6:a3:c7: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:46:DC:C9:0B:B6:4B:F5:9D:CE:A4:8A:9B:AD:19:92:1C:F7:52:4A X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:29:e6:89:ee:a4:7b:ed:27:12:1d:9c:3b:a6:2c:44:2e:f0: 5c:a4:3d:46:03:66:4d:a7:7b:1d:ba:61:de:f9:8a:a4:c9:07: cb:1c:93:52:ad:44:9a:36:b4:cd:e5:14:51:66:b6:cc:28:d9: d3:a7:bc:4e:5d:60:c1:d8:cb:74:d1:8c:b4:56:97:00:1f:37: 38:1c:8c:1d:7f:21:3b:29:e2:3a:2c:37:82:ad:6b:01:2b:f8: 54:20:81:a4:47:d4:c8:65:39:9c:5b:b3:a9:96:9e:e8:8d:09: 9d:28:21:88:48:17:42:77:54:13:6e:5e:7c:5e:45:eb:77:32: 4e:50:8a:02:a1:84:0c:39:9d:c2:80:44:21:f9:ca:21:21:47: 8f:d5:3d:82:96:7d:7b:4f:28:39:93:44:7b:85:69:ef:b4:28: e2:7b:ab:3c:43:6a:f9:81:25:1f:17:72:1d:29:e7:a1:d4:73: 0a:83:54:84:be:3e:05:c7:3e:ca:70:35:9b:a0:98:fe:5d:12: ae:cd:27:93:38:40:40:1e:2b:e3:78:05:1c:5c:43:57:4c:34: db:76:ef:75:d8:53:a2:a3:40:3f:59:ff:2c:fb:23:56:2a:cd: d5:a7:2c:f7:69:0c:aa:39:4d:a4:e3:14:33:9e:9b:35:5e:b4: 94:b3:22:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUwNjEwMTgzNTQ0WhcNMjUwNjE3MTgzNTQ0WjAYMRYwFAYD VQQDEw02ODQ4N2IwMC1jZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhtwjqWVp2abWMJeK9GGLcMzZMExquTfWvmPyyQqBfvZQMBWFhNzJ+YhvSUL ppTQJ/ndES8zmQ/SkXhJYg5Z9pbshvOtNBx5H+RX4+SOcmrEHR1yN6kxcwCit62K PHG77YTZ+kviqIpqs39AINksX649f+NDq9I6EBE+p8dDqGDk0xH7V7EAvOGQ/EQz IYSAme9npCv6HYJ4vGBX569MAknwA/RxcdrHy4nF//js6K01RVkcplmIx3YorHUj gENcpE6DGk1I8tuZ+geb81kIQKwTL6vawrIxjJZxod72N6Mw5CrI5oGSYENoYaRs +JoTsN5SmD40m5LQYRm2o8fr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNG3MkL tkv1nc6kiputGZIc91JKMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVKeaJ7qR77ScSHZw7pixELvBcpD1GA2ZNp3sdumHe+YqkyQfLHJNS rUSaNrTN5RRRZrbMKNnTp7xOXWDB2Mt00Yy0VpcAHzc4HIwdfyE7KeI6LDeCrWsB K/hUIIGkR9TIZTmcW7Oplp7ojQmdKCGISBdCd1QTbl58XkXrdzJOUIoCoYQMOZ3C gEQh+cohIUeP1T2Cln17Tyg5k0R7hWnvtCjie6s8Q2r5gSUfF3IdKeeh1HMKg1SE vj4Fxz7KcDWboJj+XRKuzSeTOEBAHivjeAUcXENXTDTbdu912FOio0A/Wf8s+yNW Ks3Vpyz3aQyqOU2k4xQznps1XrSUsyJU -----END CERTIFICATE-----Generated at Wed Jun 11 11:16:03 2025 by rpki-client