$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: 1WvB6MH9RdnmUpLTOPYvNWkyanvyWn0DksxazBfYSgI= Subject key identifier: A0:B5:12:6E:76:2F:BD:27:CC:8D:E1:25:82:2D:ED:B1:2B:0E:53:E4 Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 0973 Signing time: Fri 22 Aug 2025 20:17:01 +0000 Manifest this update: Fri 22 Aug 2025 20:17:01 +0000 Manifest next update: Fri 29 Aug 2025 20:17:01 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: vb5pQRAKdt/vGy56vW++vVeFdLNc6hL94FnHIA2It5Q=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: tZaPoTXH9PYuZmi5WQPi/UkCOHiXWsrwkIuE69EcCaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Aug 22 20:17:01 2025 GMT Not After : Aug 29 20:17:01 2025 GMT Subject: CN=68a8d03d-4413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:ed:57:f4:9c:65:df:f2:5b:2a:03:2f:52: a5:65:f2:7f:f4:7e:6c:73:e3:4c:51:0b:a8:be:7b: d7:4f:80:76:5e:aa:1e:70:87:e1:fc:e9:4a:e3:bb: a2:c9:66:af:00:f6:80:4d:23:07:a8:14:1f:a6:2a: 26:86:bf:47:f7:fd:f5:bb:3f:f0:f3:85:2b:c2:9c: 62:b1:1f:c9:d5:0e:59:9a:f9:d8:8b:2c:55:47:3f: ce:6e:72:8c:1f:0c:91:c9:a3:ff:d6:a3:f0:69:b7: 23:a5:39:dd:6e:4b:ff:9e:5b:aa:d2:e5:ac:3c:cb: 1a:2e:74:f6:b2:02:84:82:bf:dd:5d:b8:6f:44:78: 53:ad:ec:56:33:d1:cf:eb:3a:45:d8:a8:a8:a2:3f: c2:05:f4:77:95:74:2e:e7:3e:5b:fb:64:34:1a:0e: 5d:e7:b9:d9:e0:50:95:4b:c3:22:d2:b5:a7:f8:35: 7f:7f:0f:b2:d8:05:b7:f4:e1:6d:ef:33:86:ce:2e: 93:83:80:66:e8:74:fc:8f:22:46:27:bb:14:40:4b: 93:0b:88:6c:71:0b:d4:43:a8:bd:02:ca:63:88:cd: 76:ed:8e:db:ea:eb:87:e7:e1:aa:69:5f:b3:b8:6d: 4c:cd:5e:af:da:c0:6b:0c:ea:d9:81:29:37:e2:41: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B5:12:6E:76:2F:BD:27:CC:8D:E1:25:82:2D:ED:B1:2B:0E:53:E4 X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:b9:43:d2:e2:ed:fc:91:08:73:10:6d:a9:51:4f:3f:ee: 13:7d:74:33:a0:49:3e:34:c8:e8:47:a7:19:3b:aa:91:ec:7e: a2:e1:c0:75:6d:2a:74:60:f9:6f:6b:0a:bb:eb:63:cd:d0:25: 31:76:94:4b:59:7e:ab:90:41:61:02:77:4d:fb:28:6f:2b:84: 24:8a:42:84:36:b6:da:29:42:7c:ff:9c:25:c1:a5:07:63:b0: e0:32:fc:51:56:cf:31:bf:73:ac:3d:c1:10:f8:47:1c:be:67: f0:08:a2:31:07:57:80:a4:67:1c:b9:e1:a8:7e:7a:3c:36:db: 7a:2d:ae:6f:cb:5c:57:cf:79:b4:7a:cb:48:2c:ce:b9:f7:49: 9c:01:42:22:f9:69:2a:3c:24:63:ed:64:49:8a:9d:04:dc:7d: f1:69:7b:83:58:d7:30:c8:bd:a0:7b:ad:d0:a0:3a:1c:cb:1f: 8e:ee:b8:50:b5:27:31:2d:24:6b:da:95:cf:a5:25:70:d1:22: c8:90:ea:8c:f3:83:a3:58:e5:34:65:fe:84:82:db:27:83:34: 40:96:47:ec:2c:cf:93:31:5f:3d:9e:31:4d:fb:33:da:f1:ce: 77:e4:5a:a4:58:c5:d3:e2:77:80:1a:ec:5a:56:73:7b:97:be: 49:24:0a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjUwODIyMjAxNzAxWhcNMjUwODI5MjAxNzAxWjAYMRYwFAYD VQQDEw02OGE4ZDAzZC00NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTHtV/ScZd/yWyoDL1KlZfJ/9H5sc+NMUQuovnvXT4B2XqoecIfh/OlK47ui yWavAPaATSMHqBQfpiomhr9H9/31uz/w84UrwpxisR/J1Q5ZmvnYiyxVRz/ObnKM HwyRyaP/1qPwabcjpTndbkv/nluq0uWsPMsaLnT2sgKEgr/dXbhvRHhTrexWM9HP 6zpF2Kiooj/CBfR3lXQu5z5b+2Q0Gg5d57nZ4FCVS8Mi0rWn+DV/fw+y2AW39OFt 7zOGzi6Tg4Bm6HT8jyJGJ7sUQEuTC4hscQvUQ6i9AspjiM127Y7b6uuH5+GqaV+z uG1MzV6v2sBrDOrZgSk34kHdtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC1Em52 L70nzI3hJYIt7bErDlPkMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+blD0uLt/JEIcxBtqVFPP+4TfXQzoEk+NMjoR6cZO6qR7H6i4cB1 bSp0YPlvawq762PN0CUxdpRLWX6rkEFhAndN+yhvK4QkikKENrbaKUJ8/5wlwaUH Y7DgMvxRVs8xv3OsPcEQ+EccvmfwCKIxB1eApGccueGofno8Ntt6La5vy1xXz3m0 estILM6590mcAUIi+WkqPCRj7WRJip0E3H3xaXuDWNcwyL2ge63QoDocyx+O7rhQ tScxLSRr2pXPpSVw0SLIkOqM84OjWOU0Zf6EgtsngzRAlkfsLM+TMV89njFN+zPa 8c535FqkWMXT4neAGuxaVnN7l75JJAov -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:10 2025 by rpki-client