$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: yicWYKD0JpCXUKdYXuMQD7MEs5yOvRannsN53uGGSJQ= Subject key identifier: DA:6D:E2:EF:9A:8E:65:8A:68:C1:80:C4:D4:7E:65:9A:A7:0F:C9:40 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01AE Signing time: Sat 23 Aug 2025 03:28:16 +0000 Manifest this update: Sat 23 Aug 2025 03:28:15 +0000 Manifest next update: Sat 30 Aug 2025 03:28:15 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: fnR3YjbsDVwMHWZX1pZ9F/iyZB21V38BNHLa8EIMcmo=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: wrNQzAuRQVjZjCzpBxMXn6kt4KShOSGQnoTCPEIgheQ=) 3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=) 4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: +d1sU0yUiz73D5euMUQlwAefx/2UEcW1zqA4TD64tDI=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: ATF/fdwZLaYvPHUpDvAt6YQCavrO94OcrrVt0+AB3Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Aug 23 03:28:15 2025 GMT Not After : Aug 30 03:28:15 2025 GMT Subject: CN=68a9354f-ffd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:52:74:4a:7a:c0:71:bd:f9:a4:00:1a:a9: 99:ff:5b:9d:47:08:65:4b:5e:d6:85:2c:71:f0:f1: 8a:a3:77:dd:7c:ff:97:6e:b7:bd:d5:4f:c2:17:74: 7f:fa:4c:c5:db:7b:be:7e:06:13:8f:58:98:d0:c9: 76:03:1d:42:24:f3:cb:76:01:f7:71:8f:86:4e:7b: 18:37:79:1a:3b:87:e0:c5:b7:f9:f1:67:2b:af:dd: fd:ed:89:ee:2a:fe:a2:8b:9f:0e:7e:15:19:18:9d: eb:e8:91:78:6f:76:e7:58:bd:b9:d5:e4:68:79:1c: 11:f1:33:80:a8:f5:3e:c8:b4:f5:fa:84:08:ca:c1: c7:75:b6:da:9d:5e:62:63:01:65:21:3b:41:06:44: 04:93:df:19:9a:2b:de:a3:09:0e:cf:fd:5a:a6:4a: 58:8b:1f:15:7d:32:54:2f:1a:d2:41:8f:3f:7d:7e: 88:68:85:97:36:96:7c:0d:b2:7f:08:16:96:d3:8a: b1:e5:4f:6d:f9:f3:88:61:52:26:73:9b:f7:25:e9: 47:24:b7:c1:a0:ea:d0:ee:b7:4c:d6:6a:b0:8e:95: 8c:92:ee:fc:3e:be:d1:af:e8:38:04:f8:f0:83:d0: 86:14:1d:97:d2:c3:65:7d:ea:95:47:26:71:f7:35: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6D:E2:EF:9A:8E:65:8A:68:C1:80:C4:D4:7E:65:9A:A7:0F:C9:40 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:36:b3:fd:c5:12:9c:2d:7e:e6:4b:3f:af:e8:bb:4c:0c:15: ba:bd:a9:c8:df:53:2d:2c:80:07:97:83:e9:d2:a2:d8:2f:00: dd:80:84:99:4f:f1:d7:52:11:fa:8c:bc:e5:5e:11:c3:b3:b4: 6b:f6:9f:ee:11:ce:86:b9:f6:bf:45:f9:d4:9a:ec:f0:85:d0: 84:cd:e9:61:68:dc:ac:a2:0e:0a:af:01:20:78:02:1e:b4:a0: 15:8c:4a:fb:49:d9:06:9c:e0:eb:2c:cc:aa:c8:a4:f1:f5:65: 73:d0:fc:0d:ca:60:1a:2f:e9:70:36:c9:7b:83:32:d2:7d:2b: e8:08:4d:a9:dd:f3:58:27:0f:f4:1f:c1:4b:96:51:ba:e8:0b: 51:01:dc:d4:da:30:c5:00:9b:ed:03:4a:76:32:a6:ea:17:f6: 62:9c:e9:0c:47:0b:fb:b3:b1:c5:79:45:45:d3:97:ad:a4:dd: f1:d5:3b:d7:6f:08:a9:25:98:22:37:97:3c:21:17:a1:a1:d0: 81:4a:26:34:ec:24:64:c3:ac:1d:ee:4c:38:b5:4a:72:43:f3: c0:2f:df:83:c9:a3:ef:c1:f7:b8:34:0e:15:81:0f:98:34:5a: da:bb:7d:0c:76:8f:3f:d5:40:a2:64:42:39:a3:d1:3e:51:56: ab:da:14:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUwODIzMDMyODE1WhcNMjUwODMwMDMyODE1WjAYMRYwFAYD VQQDEw02OGE5MzU0Zi1mZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEFSdEp6wHG9+aQAGqmZ/1udRwhlS17WhSxx8PGKo3fdfP+Xbre91U/CF3R/ +kzF23u+fgYTj1iY0Ml2Ax1CJPPLdgH3cY+GTnsYN3kaO4fgxbf58Wcrr9397Ynu Kv6ii58OfhUZGJ3r6JF4b3bnWL251eRoeRwR8TOAqPU+yLT1+oQIysHHdbbanV5i YwFlITtBBkQEk98ZmiveowkOz/1apkpYix8VfTJULxrSQY8/fX6IaIWXNpZ8DbJ/ CBaW04qx5U9t+fOIYVImc5v3JelHJLfBoOrQ7rdM1mqwjpWMku78Pr7Rr+g4BPjw g9CGFB2X0sNlfeqVRyZx9zW7gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpt4u+a jmWKaMGAxNR+ZZqnD8lAMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADNrP9xRKcLX7mSz+v6LtMDBW6vanI31MtLIAHl4Pp0qLYLwDdgISZ T/HXUhH6jLzlXhHDs7Rr9p/uEc6Gufa/RfnUmuzwhdCEzelhaNysog4KrwEgeAIe tKAVjEr7SdkGnODrLMyqyKTx9WVz0PwNymAaL+lwNsl7gzLSfSvoCE2p3fNYJw/0 H8FLllG66AtRAdzU2jDFAJvtA0p2MqbqF/ZinOkMRwv7s7HFeUVF05etpN3x1TvX bwipJZgiN5c8IRehodCBSiY07CRkw6wd7kw4tUpyQ/PAL9+DyaPvwfe4NA4VgQ+Y NFrau30Mdo8/1UCiZEI5o9E+UVar2hRR -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:11 2025 by rpki-client