$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: m6E+v29JIpFYhrL+J/XMRaZ4jZIxrk+SGw7whp2pFm4= Subject key identifier: FC:55:12:59:4B:80:97:FB:7E:76:FE:9D:78:84:09:05:E6:48:0E:37 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 0386 Signing time: Sat 05 Jul 2025 01:23:09 +0000 Manifest this update: Sat 05 Jul 2025 01:23:08 +0000 Manifest next update: Sat 12 Jul 2025 01:23:08 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: M9PtOmuBD0t3r3HMa9D6vNP9a+B/rvsNU8bDlIAmYFc=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Jul 5 01:23:08 2025 GMT Not After : Jul 12 01:23:08 2025 GMT Subject: CN=68687e7c-2ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:cc:0d:e2:1d:9b:f8:80:9b:c7:23:7b:65: d5:d7:65:bb:63:31:8c:6d:0e:46:96:e0:1c:14:e3: 6e:48:a6:ac:81:64:85:de:3b:ce:ae:b1:8b:2d:fc: f0:1d:8f:72:1e:4c:d4:a6:1d:ba:49:4b:73:1b:fd: 14:f9:c0:c2:59:9b:30:49:4c:e7:d0:81:21:b6:d4: dc:20:13:83:36:f6:4d:f6:3e:b3:c7:93:3b:9c:93: 87:e9:79:99:4b:b5:f4:98:db:a1:03:62:74:29:32: 6c:cf:d1:a1:51:6f:9b:6c:e8:2d:02:ee:d2:8b:d2: 44:c8:4c:41:18:91:42:19:b7:63:65:61:33:0a:0c: 5a:e0:55:6e:85:fd:af:71:6b:4d:a5:27:84:a5:b0: a1:a5:4b:da:d6:ba:c4:2c:ca:8c:1e:a4:1c:c2:5d: a1:3d:da:74:ef:fd:87:d0:db:94:a2:19:8e:09:3d: 7c:56:6b:61:cb:9f:7b:e9:44:e2:66:b9:8e:36:c3: ac:6c:e4:9f:4a:3a:6d:c6:3b:e1:48:6b:80:11:0b: b7:7a:10:cd:7c:3a:30:cd:62:fa:6d:dc:1b:0b:ea: 02:c9:d9:13:c4:c0:f7:26:17:a8:2f:26:bc:d7:8b: c3:59:bb:63:98:5a:5f:f8:05:6b:3f:88:9e:b5:ae: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:55:12:59:4B:80:97:FB:7E:76:FE:9D:78:84:09:05:E6:48:0E:37 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:62:13:a0:98:1b:5c:b6:9f:4d:8c:9d:8a:e0:dd:86:19:2f: 91:2a:84:f2:e0:64:bf:c6:ff:62:74:50:7c:85:c7:94:2c:35: 64:20:9f:4e:1f:ef:71:d5:78:6a:8f:06:1a:3b:f3:53:6d:53: 6c:de:af:19:eb:27:b4:2f:b1:68:33:29:90:0d:bc:bc:15:d6: d9:d9:09:55:4e:be:74:27:47:4c:c7:48:c5:06:11:a2:5b:36: 54:96:75:91:d4:78:f4:7a:ee:7f:93:4f:30:ec:6c:4f:eb:24: 3c:f7:e5:ef:7b:b5:3d:af:1f:30:c5:69:eb:22:d0:ef:34:02: d5:b7:90:9e:57:8b:14:2e:ad:1d:7f:e6:9c:84:e0:3f:60:ec: 64:7a:95:a3:54:90:82:0a:ae:09:9d:32:ec:26:98:da:61:80: ca:72:89:f6:20:ec:b4:41:10:9c:14:d0:f9:ea:c6:8a:34:72: 7d:8b:37:93:43:e9:f8:cc:73:4e:9e:fb:4a:0a:af:1d:95:2e: 22:68:9c:e8:fc:89:be:8c:6b:c2:e3:05:26:99:cf:fc:61:13: 6d:a9:31:21:b4:0c:ec:90:75:3a:1d:77:7b:0a:f0:1f:17:48: c8:e5:1f:57:b3:c7:d6:b2:9c:65:b3:93:c8:69:bc:48:bc:79: a0:6f:5d:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwNzA1MDEyMzA4WhcNMjUwNzEyMDEyMzA4WjAYMRYwFAYD VQQDEw02ODY4N2U3Yy0yYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtczMDeIdm/iAm8cje2XV12W7YzGMbQ5GluAcFONuSKasgWSF3jvOrrGLLfzw HY9yHkzUph26SUtzG/0U+cDCWZswSUzn0IEhttTcIBODNvZN9j6zx5M7nJOH6XmZ S7X0mNuhA2J0KTJsz9GhUW+bbOgtAu7Si9JEyExBGJFCGbdjZWEzCgxa4FVuhf2v cWtNpSeEpbChpUva1rrELMqMHqQcwl2hPdp07/2H0NuUohmOCT18Vmthy5976UTi ZrmONsOsbOSfSjptxjvhSGuAEQu3ehDNfDowzWL6bdwbC+oCydkTxMD3JheoLya8 14vDWbtjmFpf+AVrP4ieta51mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxVEllL gJf7fnb+nXiECQXmSA43MB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAYhOgmBtctp9NjJ2K4N2GGS+RKoTy4GS/xv9idFB8hceULDVkIJ9O H+9x1XhqjwYaO/NTbVNs3q8Z6ye0L7FoMymQDby8FdbZ2QlVTr50J0dMx0jFBhGi WzZUlnWR1Hj0eu5/k08w7GxP6yQ89+Xve7U9rx8wxWnrItDvNALVt5CeV4sULq0d f+achOA/YOxkepWjVJCCCq4JnTLsJpjaYYDKcon2IOy0QRCcFND56saKNHJ9izeT Q+n4zHNOnvtKCq8dlS4iaJzo/Im+jGvC4wUmmc/8YRNtqTEhtAzskHU6HXd7CvAf F0jI5R9Xs8fWspxls5PIabxIvHmgb11p -----END CERTIFICATE-----Generated at Sun Jul 6 06:07:48 2025 by rpki-client