$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft File: T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json) Hash identifier: u+nqhbJRvS/w7szdP3Mpa+h+gea3KgC3ZXj6G4VGRsY= Subject key identifier: D4:42:11:C7:90:7E:B7:75:60:FE:4F:83:7D:72:91:89:A9:37:FF:32 Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft Manifest number: 0398 Signing time: Tue 01 Jul 2025 01:25:02 +0000 Manifest this update: Tue 01 Jul 2025 01:25:02 +0000 Manifest next update: Tue 08 Jul 2025 01:25:02 +0000 Files and hashes: 1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: ex5241f9RyqeVH8u2AXSbyL3lAjEZ9lZGdkDp2X4iKA=) 2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: xWMMfEWphw+jGw6vFyTgUW/C6T4JCFAjmX3tY8qjIQU=) 3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: q9Ub/O/CxWNZ+a3hm7Iv+ArFH+XEypUPU6PVAyD6z+U=) 4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: JV8w5HTbgBjA5P018WfQWq636lJGXmUnJAVnuy5z5CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF Validity Not Before: Jul 1 01:25:02 2025 GMT Not After : Jul 8 01:25:02 2025 GMT Subject: CN=686338ee-5bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:48:d8:d7:95:a4:37:49:5a:9b:0a:fd:7e: ba:db:b0:a0:cf:10:75:43:99:b6:a3:af:5f:97:52: 14:c7:7f:7a:d7:e2:04:62:7b:13:af:8d:98:88:8c: 52:8d:d4:dc:20:8a:59:66:f7:31:25:de:1e:eb:c1: f6:ba:a0:0c:fd:3e:78:a5:61:d1:d6:89:7f:eb:81: 4a:15:be:1d:17:a5:39:b1:a6:ec:78:a1:8b:e5:c9: 6b:22:70:d8:ec:97:1f:4d:51:11:d5:04:78:dc:72: 48:45:b8:61:43:52:3a:a0:15:e8:d9:1e:d1:3a:be: 52:a4:fe:84:3b:9c:c4:07:de:2f:1c:a4:ec:f9:60: e3:4f:88:01:65:86:75:1f:95:8d:f9:1a:16:6c:2e: 0d:16:3e:98:4d:f0:d4:9b:98:40:ba:2d:f1:ab:0a: f1:d6:29:fb:b2:50:d0:aa:43:89:26:88:db:0d:24: eb:5d:1b:ba:48:94:28:b5:32:42:05:56:7e:76:23: 25:8f:f5:5f:67:3a:3b:bc:8c:b5:b7:d4:79:59:01: 59:1f:56:7d:e9:12:d4:63:eb:0a:01:9b:1c:1e:5b: 8e:3e:fc:8a:cd:34:40:94:d1:8f:72:1f:fe:dd:85: b3:af:ca:32:89:41:35:9c:28:0c:18:e7:4b:c6:cd: a5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:11:C7:90:7E:B7:75:60:FE:4F:83:7D:72:91:89:A9:37:FF:32 X509v3 Authority Key Identifier: keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3a:e6:cd:7e:70:d5:ee:e6:4d:f8:b8:76:b3:1b:9e:20:fa: 39:ba:61:1e:dd:4d:0b:86:61:61:3b:2f:33:59:7d:e4:b1:2c: e1:ad:bd:8e:7d:9a:3a:43:94:32:6c:11:f6:b6:ff:32:e7:d6: 34:e7:d0:fe:6b:5b:6b:07:b6:d1:1f:dd:95:d9:4e:2a:e9:d1: 0d:8f:48:0c:26:62:4d:f6:2d:63:0b:48:0e:1a:a4:0b:ae:1c: 6c:c0:fb:b1:2a:bb:8b:f9:14:67:f9:40:a2:1d:97:fd:2e:bc: fb:3b:98:c6:77:96:14:4b:8e:32:24:07:0d:b9:05:13:fd:ce: c4:a1:c6:2e:fc:08:db:2c:50:c0:04:29:2f:d6:e2:75:61:99: 7f:4e:98:c3:9f:68:88:8a:57:70:62:68:93:7a:06:f9:be:ef: cb:73:5a:e2:5d:27:91:b6:20:22:94:f7:1b:0a:63:8d:8a:80: ad:71:7b:e2:38:6e:c4:06:8b:19:1f:bf:af:a6:20:a8:1e:40: 8e:a1:6a:e4:05:51:d5:cb:86:51:e3:0f:1a:38:2e:f3:3e:66: 5c:61:d6:80:f4:c2:29:f1:aa:ac:e2:c1:25:11:dc:39:77:42: 37:ec:e9:67:3f:67:2c:c8:ea:32:4d:de:44:19:bd:5e:dd:d0: 01:93:e8:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxNEIxMTAvBgNVBAUTKDRGREU5NDkwRkYyRkYzRTlCRjkzQjQ5OEQ3NEYzMUY3 NUVBOUZDRkYwHhcNMjUwNzAxMDEyNTAyWhcNMjUwNzA4MDEyNTAyWjAYMRYwFAYD VQQDEw02ODYzMzhlZS01YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArehI2NeVpDdJWpsK/X6627CgzxB1Q5m2o69fl1IUx3961+IEYnsTr42YiIxS jdTcIIpZZvcxJd4e68H2uqAM/T54pWHR1ol/64FKFb4dF6U5sabseKGL5clrInDY 7JcfTVER1QR43HJIRbhhQ1I6oBXo2R7ROr5SpP6EO5zEB94vHKTs+WDjT4gBZYZ1 H5WN+RoWbC4NFj6YTfDUm5hAui3xqwrx1in7slDQqkOJJojbDSTrXRu6SJQotTJC BVZ+diMlj/VfZzo7vIy1t9R5WQFZH1Z96RLUY+sKAZscHluOPvyKzTRAlNGPch/+ 3YWzr8oyiUE1nCgMGOdLxs2l8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRCEceQ frd1YP5Pg31ykYmpN/8yMB8GA1UdIwQYMBaAFE/elJD/L/Ppv5O0mNdPMfdeqfz/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDE0Qi9EQzFFNzIxNEE0 RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgtbV9rN1NZMTA4eDkxNnBf UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5NlVrUDh2OC1tX2s3U1kxMDh4OTE2cF9QOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDE0Qi9EQzFFNzIxNEE0RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgt bV9rN1NZMTA4eDkxNnBfUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAOubNfnDV7uZN+Lh2sxueIPo5umEe3U0LhmFhOy8zWX3ksSzhrb2O fZo6Q5QybBH2tv8y59Y059D+a1trB7bRH92V2U4q6dENj0gMJmJN9i1jC0gOGqQL rhxswPuxKruL+RRn+UCiHZf9Lrz7O5jGd5YUS44yJAcNuQUT/c7EocYu/AjbLFDA BCkv1uJ1YZl/TpjDn2iIildwYmiTegb5vu/Lc1riXSeRtiAilPcbCmONioCtcXvi OG7EBosZH7+vpiCoHkCOoWrkBVHVy4ZR4w8aOC7zPmZcYdaA9MIp8aqs4sElEdw5 d0I37OlnP2csyOoyTd5EGb1e3dABk+it -----END CERTIFICATE-----Generated at Tue Jul 1 15:07:19 2025 by rpki-client