$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: rNUOYrL4BaRw0w4BwCHZ84/SD+MvAI7vL62sLlFuFFM= Subject key identifier: AB:F1:A1:D0:B0:3F:EE:01:DE:FE:08:B4:71:11:14:AF:9D:4A:C2:48 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0513 Signing time: Fri 30 May 2025 23:50:32 +0000 Manifest this update: Fri 30 May 2025 23:50:32 +0000 Manifest next update: Fri 06 Jun 2025 23:50:32 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: bxL8yLpaKzMA0073byO/jzjx0woZJDHCZwYGwRLv+EI=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: May 30 23:50:32 2025 GMT Not After : Jun 6 23:50:32 2025 GMT Subject: CN=683a4448-4e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:43:8e:4c:09:18:40:76:ba:7c:3f:ff:ec: 39:d7:6b:0a:dd:77:e5:d7:98:91:d5:0b:62:7c:0b: 2a:af:4b:13:e8:62:ae:03:37:5a:01:bc:d5:61:ac: 1c:18:80:53:17:eb:57:66:0e:19:88:7f:f8:f7:66: 07:0a:03:51:2e:a8:c8:b3:7d:35:21:02:03:e9:ea: 17:7e:6e:cd:44:17:2f:56:09:57:84:1a:72:ef:56: db:c3:61:26:cc:4a:10:b8:1e:08:60:9c:1c:f4:05: fb:f9:3c:11:a0:a2:73:88:3b:f6:9d:85:35:1f:be: b6:a0:aa:9d:37:da:23:96:55:5b:25:40:d2:27:b1: 2e:45:7e:4c:53:39:ed:6d:d6:1a:12:7f:5e:5b:26: 7e:2d:b4:15:6e:d4:e6:2b:a0:08:8f:4f:84:4c:51: 87:1b:b4:38:01:aa:40:1d:7b:e3:1d:73:80:6c:86: 95:ce:ba:a7:f9:07:1c:f5:15:38:f8:b6:cf:cd:b0: 4b:fd:b3:8d:72:38:bc:af:d8:ba:8e:1f:60:59:c1: 8f:c1:08:72:21:1b:3b:6b:78:4d:f5:0b:35:bc:d9: ea:a9:41:72:b3:cf:1d:4b:56:a9:36:fa:7e:a2:cb: dd:52:15:4c:86:87:f0:cc:3f:29:9a:ea:f5:b2:6e: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F1:A1:D0:B0:3F:EE:01:DE:FE:08:B4:71:11:14:AF:9D:4A:C2:48 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:93:6c:69:fb:0a:c6:e1:73:b7:cd:5c:9c:86:20:8d:d9:0f: 6b:e7:e6:52:6b:df:30:00:1a:78:2f:f2:8a:65:74:d7:2e:c5: 43:42:08:44:80:d8:bc:a2:4b:ef:b6:f2:51:45:16:56:59:a3: 19:9f:16:14:02:ec:23:08:8a:6b:a4:17:db:84:0f:88:ea:b2: 2e:5f:bb:42:41:c5:33:56:5b:cc:b6:ce:de:9e:fb:68:81:74: 56:26:b4:fc:c9:a7:e5:c0:ed:20:25:f5:27:7e:f2:81:1c:fe: b9:64:dc:9c:93:97:ca:9e:b3:58:7a:25:32:25:05:35:30:64: ad:3e:67:62:5e:37:16:2e:df:dc:ad:9b:ec:a0:a4:5b:d3:ec: 01:97:7c:c8:cd:4a:ad:44:97:2c:2e:bb:a2:98:a0:63:d6:18: 02:83:0b:98:e2:2b:29:52:d2:58:8b:6e:28:af:c1:89:36:13: 3d:36:6c:a6:8b:80:9d:f4:45:56:ae:7e:d4:17:43:94:34:21: 46:d4:d9:a2:72:d5:01:fe:dd:02:00:5c:31:25:a5:35:e4:4c: d2:08:dc:55:48:b3:77:35:fd:de:5c:d1:51:bd:ed:a4:3b:54: e6:91:38:1f:d6:a7:a6:42:c4:e8:12:c2:b0:23:7d:0d:ad:2f: d2:99:69:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUwNTMwMjM1MDMyWhcNMjUwNjA2MjM1MDMyWjAYMRYwFAYD VQQDEw02ODNhNDQ0OC00ZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxchDjkwJGEB2unw//+w512sK3Xfl15iR1QtifAsqr0sT6GKuAzdaAbzVYawc GIBTF+tXZg4ZiH/492YHCgNRLqjIs301IQID6eoXfm7NRBcvVglXhBpy71bbw2Em zEoQuB4IYJwc9AX7+TwRoKJziDv2nYU1H762oKqdN9ojllVbJUDSJ7EuRX5MUznt bdYaEn9eWyZ+LbQVbtTmK6AIj0+ETFGHG7Q4AapAHXvjHXOAbIaVzrqn+Qcc9RU4 +LbPzbBL/bONcji8r9i6jh9gWcGPwQhyIRs7a3hN9Qs1vNnqqUFys88dS1apNvp+ osvdUhVMhofwzD8pmur1sm4uzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvxodCw P+4B3v4ItHERFK+dSsJIMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTk2xp+wrG4XO3zVychiCN2Q9r5+ZSa98wABp4L/KKZXTXLsVDQghE gNi8okvvtvJRRRZWWaMZnxYUAuwjCIprpBfbhA+I6rIuX7tCQcUzVlvMts7envto gXRWJrT8yaflwO0gJfUnfvKBHP65ZNyck5fKnrNYeiUyJQU1MGStPmdiXjcWLt/c rZvsoKRb0+wBl3zIzUqtRJcsLruimKBj1hgCgwuY4ispUtJYi24or8GJNhM9Nmym i4Cd9EVWrn7UF0OUNCFG1NmictUB/t0CAFwxJaU15EzSCNxVSLN3Nf3eXNFRve2k O1TmkTgf1qemQsToEsKwI30NrS/SmWmM -----END CERTIFICATE-----Generated at Sat May 31 16:46:55 2025 by rpki-client