$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json) Hash identifier: JWqg6lVc2PwWpYdMcaB4Gd6Uf5EEoogA0jrL7qj8D8s= Subject key identifier: 12:B2:65:F5:E1:B2:85:73:1C:73:43:59:D4:6C:25:43:46:C6:18:DE Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft Manifest number: 89 Signing time: Thu 03 Jul 2025 06:43:13 +0000 Manifest this update: Thu 03 Jul 2025 06:43:12 +0000 Manifest next update: Thu 10 Jul 2025 06:43:12 +0000 Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: 835POqjDbpEy33WY6/9C28Cz0gO+7CBs6xnOoeGMqhk=) 2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: H6cM4D6HiFEzXOD3BJphw2tquQW1HD/n9sWWwx2nQbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Jul 3 06:43:12 2025 GMT Not After : Jul 10 06:43:12 2025 GMT Subject: CN=68662681-effd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:34:ca:a1:58:9e:fe:67:af:b8:6c:94:f7: c1:b0:ed:b9:cd:fb:e6:1c:aa:86:7a:6f:37:22:dd: 2d:c9:41:84:0b:90:1f:76:73:9d:c7:33:af:d1:a9: 1b:d3:85:b8:be:76:c2:c9:cd:96:c1:67:a4:13:5d: b1:d0:70:c0:5b:cd:90:2b:71:76:d8:d8:b2:5a:2b: 53:d9:f4:c9:a6:a0:13:bb:7f:48:0d:17:05:d5:36: 51:47:14:05:92:b5:de:d3:2c:d7:75:78:82:28:30: ef:43:26:dc:f8:12:ea:0c:af:0d:25:4d:d1:5d:d7: 34:fb:1c:29:06:b6:f6:f6:7f:a0:67:ad:c5:c5:50: 50:e4:ae:de:66:e4:07:bf:25:ca:6b:80:63:93:1a: 1d:e1:c2:99:c2:87:5e:e8:76:69:2e:e0:bd:8f:5d: 49:93:b1:84:bf:23:eb:92:3f:a8:7f:47:5c:da:8f: 7b:8f:44:9f:63:2c:31:7e:4e:dd:51:a9:cd:30:0e: 49:02:15:26:5a:a3:7f:0c:01:84:34:53:42:76:d1: 5f:11:52:f4:9e:16:14:0f:87:f6:f6:bc:e0:ac:a6: ba:48:77:34:6a:e3:0c:8c:fe:c2:71:92:42:bb:6d: 9f:67:7d:a8:19:55:c4:9b:bd:da:c2:7c:ed:f6:52: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B2:65:F5:E1:B2:85:73:1C:73:43:59:D4:6C:25:43:46:C6:18:DE X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b8:9f:62:9d:c9:c5:9b:0b:fe:e7:de:36:b4:99:20:8d:b9: 48:fa:93:ff:8a:46:b9:3c:54:7a:99:60:27:46:17:cb:9d:14: ef:79:e2:4d:91:a2:94:ad:ac:ad:a1:88:1f:a5:91:af:67:ea: 97:46:6a:6c:1f:1d:12:0f:5f:1e:df:90:18:91:13:94:47:98: 20:d0:91:9f:d1:03:d3:d0:42:be:48:98:b6:55:56:61:75:b2: e4:0a:4f:da:85:38:75:9d:6f:db:bd:33:27:3f:95:b5:bb:b3: 6c:2d:7d:d9:c2:1c:14:76:af:6d:fe:8e:d4:08:65:a2:ec:f1: 23:94:7d:62:24:d5:09:8c:f7:68:92:0f:62:6b:1c:d6:64:52: 13:c7:98:bc:88:4c:b1:5b:4d:a4:f6:9a:c1:66:9d:2d:e5:5b: 56:6d:6f:2e:c6:4f:13:b3:4a:b9:9d:b7:4b:55:8f:e1:1d:6e: ef:5d:68:34:2e:af:03:f0:57:8c:ed:63:c8:52:99:b7:7d:2d: 0e:ba:a3:7e:c0:bf:88:28:33:67:c0:64:22:57:9b:a2:94:d9: 66:19:1c:80:13:31:a1:f6:f9:4c:2b:d4:1a:d0:17:c8:68:b1: fb:92:15:fc:47:0c:b3:9d:e9:ff:ac:46:5a:44:fb:2f:55:1c: 09:36:21:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKEI1RDk1NTk3N0FEQTQ2ODNBQzVCNTlDMjU4MThCNDQz ODFDMjRGRTYwHhcNMjUwNzAzMDY0MzEyWhcNMjUwNzEwMDY0MzEyWjAYMRYwFAYD VQQDEw02ODY2MjY4MS1lZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQU0yqFYnv5nr7hslPfBsO25zfvmHKqGem83It0tyUGEC5AfdnOdxzOv0akb 04W4vnbCyc2WwWekE12x0HDAW82QK3F22NiyWitT2fTJpqATu39IDRcF1TZRRxQF krXe0yzXdXiCKDDvQybc+BLqDK8NJU3RXdc0+xwpBrb29n+gZ63FxVBQ5K7eZuQH vyXKa4Bjkxod4cKZwode6HZpLuC9j11Jk7GEvyPrkj+of0dc2o97j0SfYywxfk7d UanNMA5JAhUmWqN/DAGENFNCdtFfEVL0nhYUD4f29rzgrKa6SHc0auMMjP7CcZJC u22fZ32oGVXEm73awnzt9lIfiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKyZfXh soVzHHNDWdRsJUNGxhjeMB8GA1UdIwQYMBaAFLXZVZd62kaDrFtZwlgYtEOBwk/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy85QTU4QzM4QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJvT3NXMW5DV0JpMFE0SENU LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1QtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy85QTU4QzM4QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJv T3NXMW5DV0JpMFE0SENULVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyuJ9incnFmwv+5942tJkgjblI+pP/ika5PFR6mWAnRhfLnRTveeJN kaKUraytoYgfpZGvZ+qXRmpsHx0SD18e35AYkROUR5gg0JGf0QPT0EK+SJi2VVZh dbLkCk/ahTh1nW/bvTMnP5W1u7NsLX3ZwhwUdq9t/o7UCGWi7PEjlH1iJNUJjPdo kg9iaxzWZFITx5i8iEyxW02k9prBZp0t5VtWbW8uxk8Ts0q5nbdLVY/hHW7vXWg0 Lq8D8FeM7WPIUpm3fS0OuqN+wL+IKDNnwGQiV5uilNlmGRyAEzGh9vlMK9Qa0BfI aLH7khX8Rwyznen/rEZaRPsvVRwJNiEJ -----END CERTIFICATE-----Generated at Fri Jul 4 11:54:44 2025 by rpki-client