$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json) Hash identifier: LpjKTdmWr1noZduVw9Lm5xol3F5g/wJYZ9CAayH4K1k= Subject key identifier: 6A:AB:92:96:85:1A:F5:04:15:CF:BC:DC:03:76:DE:63:0A:2D:85:8C Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Certificate serial: 12AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft Manifest number: 12A3 Signing time: Wed 02 Jul 2025 17:15:59 +0000 Manifest this update: Wed 02 Jul 2025 17:15:59 +0000 Manifest next update: Wed 09 Jul 2025 17:15:59 +0000 Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: T6nBhdOHjiiBBgOXqxFPmgP4l96PwBRCT9n0lItd2SU=) 2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: n2FBgQHuh988fwkOcnAooQ/jXQmiLgbdWeucP9Cz7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4778 (0x12aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Validity Not Before: Jul 2 17:15:59 2025 GMT Not After : Jul 9 17:15:59 2025 GMT Subject: CN=6865694f-95f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:31:aa:40:13:b6:32:1e:f1:d9:59:4d:2e: 89:a3:34:e7:b7:c3:a7:42:5c:bf:d2:6f:14:d0:69: ec:67:e8:13:5e:01:3b:33:68:2a:4a:39:4b:81:3f: 37:a4:b3:09:b6:d8:1e:6c:8a:9a:f8:ef:57:b3:a9: 08:40:f1:82:d3:e8:3a:37:c6:90:fc:df:0b:76:a6: 26:f9:24:8e:1b:e4:51:76:6f:6d:db:34:30:52:de: 7d:33:63:e0:52:ed:0c:5d:af:07:a0:bf:8d:ab:72: 08:fb:45:57:8f:f2:b4:fa:16:27:6a:17:93:c2:88: 86:80:29:7e:7f:7a:8f:b0:c1:4e:73:91:49:4c:e8: f3:2e:89:f0:10:0e:44:92:fa:a3:b0:50:be:98:8c: f5:4e:b1:b0:15:1e:cf:6b:08:b1:c0:d1:81:52:be: 85:69:2c:bc:0a:52:b1:0d:63:fb:8d:a0:eb:21:58: f1:ab:9c:50:88:e8:b3:3e:c7:95:2b:36:f0:54:37: 9b:9a:db:4f:c4:2d:c9:cd:ea:28:9b:17:ab:42:81: 7a:04:a0:4a:ec:ff:16:f6:12:05:1a:34:fc:c4:79: bc:d8:a4:41:ed:1f:57:2e:ab:1f:a7:16:18:15:d8: 87:13:84:0d:16:42:12:2f:5a:c7:78:13:89:05:52: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AB:92:96:85:1A:F5:04:15:CF:BC:DC:03:76:DE:63:0A:2D:85:8C X509v3 Authority Key Identifier: keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fe:94:ba:3d:16:53:c3:e0:52:af:52:0b:a6:d5:c7:d5:0c: 13:00:c0:a6:3f:3d:7b:f7:69:d2:b5:b6:9f:f9:da:b9:cd:43: d3:c4:f3:f7:3f:9b:40:04:08:40:40:1c:50:11:ff:18:29:e6: 6a:05:8f:1a:4a:b7:54:04:0a:20:f9:cb:13:e1:a9:25:c7:01: b5:33:d3:3b:b6:ba:7b:b2:8f:71:c6:fb:d8:e2:7f:54:c8:75: cb:b6:d2:f6:54:73:35:b4:66:5f:d1:42:e5:d5:9e:ae:cd:58: 6c:a7:78:7a:6f:fd:e8:58:5e:b9:81:1f:67:62:aa:2a:d7:08: 40:40:ec:95:ef:ea:b9:e0:2b:32:60:17:4c:6b:0e:5f:0b:5a: 88:f8:69:1f:d3:95:4d:df:03:ed:2a:f8:ab:c9:46:a5:23:3b: fb:50:21:88:7d:7d:35:a3:15:39:9e:c4:07:0e:73:5a:8f:e5: 15:cf:d3:b1:2b:a1:b6:35:bc:5a:07:af:17:fa:f1:e1:39:a0: d4:45:e4:08:63:fc:23:05:c0:b8:84:1f:be:6c:2b:25:6b:26: 7c:eb:34:72:ff:3a:1d:e9:c6:cb:4f:47:b6:d9:45:62:6d:0e: 08:b7:9a:d4:cf:e4:f2:14:9a:f0:0c:be:e6:d6:1b:aa:e3:3c: d5:89:6c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2QzcxMTAvBgNVBAUTKEI2N0MyNDVFNEIyQkVFQUQyM0MxRjA1REQzMEZGOTA3 N0Q4N0I4RTYwHhcNMjUwNzAyMTcxNTU5WhcNMjUwNzA5MTcxNTU5WjAYMRYwFAYD VQQDEw02ODY1Njk0Zi05NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2kxqkATtjIe8dlZTS6JozTnt8OnQly/0m8U0GnsZ+gTXgE7M2gqSjlLgT83 pLMJttgebIqa+O9Xs6kIQPGC0+g6N8aQ/N8LdqYm+SSOG+RRdm9t2zQwUt59M2Pg Uu0MXa8HoL+Nq3II+0VXj/K0+hYnaheTwoiGgCl+f3qPsMFOc5FJTOjzLonwEA5E kvqjsFC+mIz1TrGwFR7PawixwNGBUr6FaSy8ClKxDWP7jaDrIVjxq5xQiOizPseV KzbwVDebmttPxC3JzeoomxerQoF6BKBK7P8W9hIFGjT8xHm82KRB7R9XLqsfpxYY FdiHE4QNFkISL1rHeBOJBVJ8IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqrkpaF GvUEFc+83AN23mMKLYWMMB8GA1UdIwQYMBaAFLZ8JF5LK+6tI8HwXdMP+Qd9h7jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZDNy9DODU2RDZDNEM2 QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdxMGp3ZkJkMHdfNUIzMkh1 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rud2tYa3NyN3EwandmQmQwd181QjMySHVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZDNy9DODU2RDZDNEM2QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdx MGp3ZkJkMHdfNUIzMkh1T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/pS6PRZTw+BSr1ILptXH1QwTAMCmPz1792nStbaf+dq5zUPTxPP3 P5tABAhAQBxQEf8YKeZqBY8aSrdUBAog+csT4aklxwG1M9M7trp7so9xxvvY4n9U yHXLttL2VHM1tGZf0ULl1Z6uzVhsp3h6b/3oWF65gR9nYqoq1whAQOyV7+q54Csy YBdMaw5fC1qI+Gkf05VN3wPtKviryUalIzv7UCGIfX01oxU5nsQHDnNaj+UVz9Ox K6G2NbxaB68X+vHhOaDUReQIY/wjBcC4hB++bCslayZ86zRy/zod6cbLT0e22UVi bQ4It5rUz+TyFJrwDL7m1huq4zzViWwO -----END CERTIFICATE-----Generated at Fri Jul 4 11:56:50 2025 by rpki-client