$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: 2GlnkbprpkHSiE888v0YMzNan9OoQxUzjKxKRIBfk24= Subject key identifier: B0:18:55:BD:99:60:E7:7D:0E:A2:89:4B:51:A0:17:E6:C6:18:7F:CD Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 0136 Signing time: Thu 03 Jul 2025 05:33:56 +0000 Manifest this update: Thu 03 Jul 2025 05:33:55 +0000 Manifest next update: Thu 10 Jul 2025 05:33:55 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: STYzwO+alsflfSpTi7iF1v+ka4NKtmkBUzPse3UogIo=) 2: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) 3: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 4: 7E8F60B8477711F0B5973842C4F9AE02.roa (hash: WQP1YAfMHPAVDDOkyjQEtv0lcVGgH8rf1IrCEtiCXz4=) 5: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Jul 3 05:33:55 2025 GMT Not After : Jul 10 05:33:55 2025 GMT Subject: CN=68661643-3b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:66:84:41:76:58:5e:ac:65:fb:81:a2:e3: 81:cd:04:6e:ef:4c:31:14:3b:f9:d4:58:b8:4a:05: cc:2c:df:78:ec:76:16:8e:98:62:9d:75:b0:91:15: ce:8d:96:be:e4:fa:14:f1:fd:be:8d:7f:f6:19:7a: 55:e3:61:9e:7f:1e:bc:5a:29:a6:15:02:3a:d8:f0: d4:3f:bd:58:ab:f4:4d:e4:c3:45:fe:67:50:09:53: fb:59:f9:15:30:ff:ad:86:e9:0e:14:01:7c:92:c2: 6d:c6:b7:6b:2e:b2:ca:93:b5:cf:c2:a3:43:1c:c7: 66:c3:c7:73:03:8b:e9:c9:b7:57:9a:9d:58:5e:dc: 1f:12:be:e3:1a:97:af:f1:6d:dd:e5:8f:08:7e:d6: ff:0e:68:d9:34:e4:e1:06:ac:0e:39:4e:95:b2:a8: d5:2d:8f:a5:ca:9b:ab:ee:ea:ff:3e:8d:1a:74:ef: 4a:a3:96:61:2e:14:fc:36:14:af:00:20:53:2f:3f: 2a:72:dc:b3:85:8a:dc:13:44:f6:bc:8d:30:e2:bc: a3:c0:67:d6:8b:37:7d:2f:6c:a2:5a:57:eb:f1:b4: 67:fa:2c:1d:38:3e:06:bf:4c:59:bf:df:bd:59:45: 6a:64:77:fd:72:87:72:dc:5a:ec:6d:ef:19:7a:6d: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:55:BD:99:60:E7:7D:0E:A2:89:4B:51:A0:17:E6:C6:18:7F:CD X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:24:f5:5e:98:77:59:51:69:b8:7c:da:4b:22:c6:00:2a:ee: 10:77:5e:d5:e7:91:65:20:04:2f:21:dc:e3:48:34:42:22:4c: 25:35:1e:19:fa:c2:ce:b3:fa:5b:11:f2:52:5b:55:97:fe:e6: da:88:82:e8:97:a1:b1:3b:72:ce:3f:0e:62:e0:8c:68:ed:07: 44:9b:72:bb:06:6e:b9:1e:f2:37:e9:17:2e:81:63:76:27:d8: cb:b0:96:18:7e:90:d0:3f:6d:90:71:c3:98:2b:03:2f:e3:fa: 0b:11:23:ab:15:37:c5:b5:95:82:36:a5:5c:07:e2:a0:3f:91: fb:ba:12:fe:44:99:35:4e:c9:ca:3b:a5:2c:6d:ee:e5:7e:a8: 82:98:cf:bd:21:4f:6e:b2:3b:84:24:a7:d1:d7:1d:92:47:50: b0:53:c0:ce:f0:f3:6d:b5:fc:7c:45:cc:da:0a:7c:4b:cd:16: d5:4e:42:b6:97:a8:ae:48:7b:17:09:f7:15:d6:2b:b0:06:6f: 60:b7:6e:b4:49:28:af:48:cc:2a:bd:3f:c7:ca:66:d1:ed:03: 0e:e8:0a:ef:e6:d9:ca:29:29:5b:8e:50:dd:aa:52:66:83:6a: 6f:23:8b:23:dc:44:66:40:29:27:e1:79:6c:6b:e6:3a:37:83: 85:bf:4d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwNzAzMDUzMzU1WhcNMjUwNzEwMDUzMzU1WjAYMRYwFAYD VQQDEw02ODY2MTY0My0zYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIhmhEF2WF6sZfuBouOBzQRu70wxFDv51Fi4SgXMLN947HYWjphinXWwkRXO jZa+5PoU8f2+jX/2GXpV42Gefx68WimmFQI62PDUP71Yq/RN5MNF/mdQCVP7WfkV MP+thukOFAF8ksJtxrdrLrLKk7XPwqNDHMdmw8dzA4vpybdXmp1YXtwfEr7jGpev 8W3d5Y8Iftb/DmjZNOThBqwOOU6VsqjVLY+lypur7ur/Po0adO9Ko5ZhLhT8NhSv ACBTLz8qctyzhYrcE0T2vI0w4ryjwGfWizd9L2yiWlfr8bRn+iwdOD4Gv0xZv9+9 WUVqZHf9cody3Frsbe8Zem0vpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAYVb2Z YOd9DqKJS1GgF+bGGH/NMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJPVemHdZUWm4fNpLIsYAKu4Qd17V55FlIAQvIdzjSDRCIkwlNR4Z +sLOs/pbEfJSW1WX/ubaiILol6GxO3LOPw5i4Ixo7QdEm3K7Bm65HvI36RcugWN2 J9jLsJYYfpDQP22QccOYKwMv4/oLESOrFTfFtZWCNqVcB+KgP5H7uhL+RJk1TsnK O6Usbe7lfqiCmM+9IU9usjuEJKfR1x2SR1CwU8DO8PNttfx8RczaCnxLzRbVTkK2 l6iuSHsXCfcV1iuwBm9gt260SSivSMwqvT/HymbR7QMO6Arv5tnKKSlbjlDdqlJm g2pvI4sj3ERmQCkn4Xlsa+Y6N4OFv00i -----END CERTIFICATE-----Generated at Thu Jul 3 11:04:15 2025 by rpki-client