$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: eNC2lwYq9nTpmuw8322QFYFGBP8fgjtmGczVm9VfWcU= Subject key identifier: 4E:5B:C7:F6:B2:DF:0A:FC:AD:CC:74:9D:0F:D9:2C:9A:F2:61:E0:1A Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0524 Signing time: Wed 02 Jul 2025 23:55:06 +0000 Manifest this update: Wed 02 Jul 2025 23:55:05 +0000 Manifest next update: Wed 09 Jul 2025 23:55:05 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: nj0tECs6L+S60DtgaXlGU12Mk0w9sBTq+hnDdqdtOwE=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Jul 2 23:55:05 2025 GMT Not After : Jul 9 23:55:05 2025 GMT Subject: CN=6865c6d9-1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:bc:02:3a:28:b3:8a:e6:21:ef:09:ac:be: ce:b5:da:5b:a2:4d:7d:b4:2b:43:34:b2:bf:ad:8a: 4b:b5:98:b2:9e:a1:d5:a0:0c:e2:0c:dd:d5:be:37: 11:70:df:4c:28:37:83:14:38:46:69:14:63:e6:1e: bb:f2:0f:b7:48:8f:b2:74:59:ad:6c:ba:67:ec:1d: 37:2d:3f:e5:84:03:f3:6a:74:4f:ee:95:03:c9:9b: 42:39:37:e8:5f:75:bb:84:91:83:85:1f:f0:b1:30: df:1c:3a:1c:8f:b7:bf:e4:80:c8:9d:5c:3c:2f:03: fe:a0:7b:44:36:1a:f8:81:80:dc:9d:99:e1:0f:0f: 9e:bb:d0:7d:eb:21:39:ff:79:ae:bb:22:1d:55:3a: fd:81:07:ab:a1:21:16:22:0e:66:ce:be:90:88:e1: 26:26:01:91:bc:58:6c:70:85:85:71:bf:bc:65:e8: 72:8a:27:68:57:c8:32:35:47:a2:ae:a6:b2:78:55: 9f:73:ee:b9:15:86:9e:0b:db:85:7e:0a:24:ca:26: 77:02:50:61:8e:19:f4:cc:9d:af:4c:79:e9:6e:0e: f5:6a:0b:2d:08:11:ba:3b:51:41:66:c3:cf:d5:da: 2c:54:21:50:47:94:97:9a:ef:ab:79:b2:db:fc:35: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5B:C7:F6:B2:DF:0A:FC:AD:CC:74:9D:0F:D9:2C:9A:F2:61:E0:1A X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f3:ad:74:29:4f:bb:e2:86:af:e2:6a:33:99:c2:60:de:df: 03:6a:67:e7:9d:19:67:f8:ff:46:90:87:d8:10:4a:34:9b:da: 67:60:fd:94:29:ad:f9:fb:aa:e8:74:6c:06:a4:ae:81:67:89: f4:a5:76:7a:4c:9b:5b:dc:38:40:3f:18:b1:84:b8:00:f2:a6: 47:c0:73:45:98:2c:32:ac:a9:35:47:9f:9f:92:43:59:5e:a6: 07:6c:a8:94:67:7c:e3:f8:72:e4:ef:c5:79:bd:f3:d7:cc:03: a9:50:10:4c:50:9b:89:ef:60:7e:87:41:af:c4:81:eb:52:e1: 7c:95:07:e3:92:8e:65:40:01:8d:70:91:b6:e4:5a:0b:b9:5b: 8d:56:a8:19:4a:29:b6:9c:e6:af:d1:6c:5c:35:8d:da:94:98: fa:30:4c:c4:70:3c:1b:46:4e:f5:cc:f9:e1:c5:a2:30:a4:36: bc:7f:a9:a7:f5:0b:75:66:16:cd:7c:8c:93:80:ad:d2:55:a4: 4f:75:e4:43:25:0d:ce:b3:96:cc:f5:fb:4c:ad:99:c2:33:af: fd:9b:c9:27:69:65:81:e9:c3:94:b5:35:c6:c4:5b:15:c3:68: 41:eb:2a:4c:20:fc:0e:b8:76:c6:ac:4c:e8:2d:5c:bf:ae:27: b0:27:95:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjUwNzAyMjM1NTA1WhcNMjUwNzA5MjM1NTA1WjAYMRYwFAYD VQQDEw02ODY1YzZkOS0xNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Fu8Ajoos4rmIe8JrL7Otdpbok19tCtDNLK/rYpLtZiynqHVoAziDN3VvjcR cN9MKDeDFDhGaRRj5h678g+3SI+ydFmtbLpn7B03LT/lhAPzanRP7pUDyZtCOTfo X3W7hJGDhR/wsTDfHDocj7e/5IDInVw8LwP+oHtENhr4gYDcnZnhDw+eu9B96yE5 /3muuyIdVTr9gQeroSEWIg5mzr6QiOEmJgGRvFhscIWFcb+8ZehyiidoV8gyNUei rqayeFWfc+65FYaeC9uFfgokyiZ3AlBhjhn0zJ2vTHnpbg71agstCBG6O1FBZsPP 1dosVCFQR5SXmu+rebLb/DU70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5bx/ay 3wr8rcx0nQ/ZLJryYeAaMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV8610KU+74oav4mozmcJg3t8DamfnnRln+P9GkIfYEEo0m9pnYP2U Ka35+6rodGwGpK6BZ4n0pXZ6TJtb3DhAPxixhLgA8qZHwHNFmCwyrKk1R5+fkkNZ XqYHbKiUZ3zj+HLk78V5vfPXzAOpUBBMUJuJ72B+h0GvxIHrUuF8lQfjko5lQAGN cJG25FoLuVuNVqgZSim2nOav0WxcNY3alJj6MEzEcDwbRk71zPnhxaIwpDa8f6mn 9Qt1ZhbNfIyTgK3SVaRPdeRDJQ3Os5bM9ftMrZnCM6/9m8knaWWB6cOUtTXGxFsV w2hB6ypMIPwOuHbGrEzoLVy/riewJ5X9 -----END CERTIFICATE-----Generated at Fri Jul 4 06:28:03 2025 by rpki-client