$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: wfCXREpGrYbvBmB07Mg69A/ZYLPfDpxiOA5zkgCfVp8= Subject key identifier: 8A:05:53:BB:B8:62:3E:B5:41:B5:04:56:D8:CA:D1:A3:89:93:C3:4E Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 0762 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 0757 Signing time: Sat 28 Jun 2025 21:16:54 +0000 Manifest this update: Sat 28 Jun 2025 21:16:54 +0000 Manifest next update: Sat 05 Jul 2025 21:16:54 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: Gm2+Q0m3lOq4Iq3o+1o/Aszn9yT0L1FI7SN0ZymGCLk=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: l0d5U/HukOAxqR+/ThmuC5REmFDut/5BnvDM1762AlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1890 (0x762) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Jun 28 21:16:54 2025 GMT Not After : Jul 5 21:16:54 2025 GMT Subject: CN=68605bc6-ac79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:ff:07:b8:3d:3a:01:49:dd:1a:16:b8:0e: 38:91:d4:72:09:ea:87:ea:0f:f0:1e:9e:57:b9:4d: 04:5f:bf:4e:4f:f5:50:3f:0f:e1:37:e4:5d:0b:27: d7:9a:55:9c:18:e2:3d:4b:76:c6:89:04:76:5b:f8: 11:9e:51:25:08:8d:9c:65:54:e5:7d:47:08:be:13: c0:5d:45:3d:7a:9b:5a:90:65:c3:43:fc:03:2b:ab: 3b:ab:ec:73:de:de:8e:56:ad:a7:f2:be:f2:56:59: 67:6e:5b:20:53:c6:8b:ee:c4:ba:a8:ec:40:df:34: 4d:a5:31:b0:1c:3a:bb:9a:53:78:30:e7:6b:d3:31: 7c:34:d5:16:74:ce:d3:ae:d1:ff:5f:bc:f7:ca:79: 21:61:03:15:d8:2f:d7:bb:28:8c:7d:dc:bf:2d:4e: 8d:73:cc:2a:91:c9:48:81:f0:ad:e8:58:bd:4a:c2: b5:8e:c1:f6:34:fd:40:ad:25:0f:c3:76:a2:a4:11: cb:34:83:c4:d0:54:91:86:bb:ee:df:c2:f2:51:d3: 30:17:3f:de:09:0a:2c:17:ea:a1:6b:59:5a:4f:ae: e7:45:9b:ff:48:1a:68:97:50:95:94:e6:c7:42:f7: c4:dc:b3:6d:af:37:13:0a:7f:a5:ff:85:a5:5b:c3: 50:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:05:53:BB:B8:62:3E:B5:41:B5:04:56:D8:CA:D1:A3:89:93:C3:4E X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:36:aa:4e:9a:7c:ae:e6:d2:6a:27:0f:8c:cb:81:1d:b1:ec: c7:84:ad:6f:37:cb:96:50:90:0d:15:c0:5d:c1:86:45:6d:49: d4:3e:23:76:b0:4f:b3:70:52:a4:26:9b:8c:f5:60:fd:64:a7: a3:21:5b:b1:6e:19:87:5b:53:28:18:cc:84:f3:ad:5c:4b:ce: 09:73:1d:c0:a2:02:e9:78:ba:25:34:0c:3e:61:52:4f:f9:13: ec:01:69:fc:a2:43:8c:b4:ec:e1:7e:3a:de:77:9f:34:58:2b: c6:31:58:3c:7f:c7:21:df:4e:cf:06:39:3e:f1:1a:2c:fc:81: 2f:82:c9:82:aa:a0:44:32:0b:c6:3b:b4:2d:d9:00:6e:05:19: 39:a3:2e:87:0b:8a:e8:66:90:d2:9e:f3:54:16:b7:2d:7f:b7: b0:82:9f:f5:3e:ed:92:58:7c:b9:14:24:5f:a6:2b:bf:06:f2: 21:8b:99:b5:e3:2e:7b:79:14:7e:92:43:38:63:26:da:69:e2: 64:3c:78:ff:90:da:ad:39:e9:69:a2:7c:1e:c4:f0:c0:19:c1: 89:c1:cf:cb:01:ef:ee:7e:5c:80:9c:d0:6c:1f:b4:f6:14:b9: 60:c1:57:fb:dc:f0:12:ee:1d:ff:82:63:35:33:b5:e0:fb:a3: bc:8f:a2:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjUwNjI4MjExNjU0WhcNMjUwNzA1MjExNjU0WjAYMRYwFAYD VQQDEw02ODYwNWJjNi1hYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02//B7g9OgFJ3RoWuA44kdRyCeqH6g/wHp5XuU0EX79OT/VQPw/hN+RdCyfX mlWcGOI9S3bGiQR2W/gRnlElCI2cZVTlfUcIvhPAXUU9eptakGXDQ/wDK6s7q+xz 3t6OVq2n8r7yVllnblsgU8aL7sS6qOxA3zRNpTGwHDq7mlN4MOdr0zF8NNUWdM7T rtH/X7z3ynkhYQMV2C/XuyiMfdy/LU6Nc8wqkclIgfCt6Fi9SsK1jsH2NP1ArSUP w3aipBHLNIPE0FSRhrvu38LyUdMwFz/eCQosF+qha1laT67nRZv/SBpol1CVlObH QvfE3LNtrzcTCn+l/4WlW8NQ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoFU7u4 Yj61QbUEVtjK0aOJk8NOMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiNqpOmnyu5tJqJw+My4EdsezHhK1vN8uWUJANFcBdwYZFbUnUPiN2 sE+zcFKkJpuM9WD9ZKejIVuxbhmHW1MoGMyE861cS84Jcx3AogLpeLolNAw+YVJP +RPsAWn8okOMtOzhfjred580WCvGMVg8f8ch307PBjk+8Ros/IEvgsmCqqBEMgvG O7Qt2QBuBRk5oy6HC4roZpDSnvNUFrctf7ewgp/1Pu2SWHy5FCRfpiu/BvIhi5m1 4y57eRR+kkM4YybaaeJkPHj/kNqtOelponwexPDAGcGJwc/LAe/uflyAnNBsH7T2 FLlgwVf73PAS7h3/gmM1M7Xg+6O8j6I7 -----END CERTIFICATE-----Generated at Mon Jun 30 14:55:00 2025 by rpki-client