$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: 3RVeRT/9inzmI/Q1k8jMA3+bFVnUo16WkrRpAYH50b8= Subject key identifier: B5:FC:55:48:2A:72:1B:99:62:2E:98:84:B3:30:C3:74:DD:C0:84:42 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: E4 Signing time: Sat 23 Aug 2025 05:33:51 +0000 Manifest this update: Sat 23 Aug 2025 05:33:51 +0000 Manifest next update: Sat 30 Aug 2025 05:33:51 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: oAEr+u7Z3n4ENgL4gaTzPBI+uQjUGh9l7UsAudtFHyw=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: UR1/D+V/HfsARytm1z1u12yu/ZwctEFat0Uu8xOAKlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Aug 23 05:33:51 2025 GMT Not After : Aug 30 05:33:51 2025 GMT Subject: CN=68a952bf-7b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:a8:a2:18:8a:67:73:79:23:b4:b9:86:be: fd:54:5f:e8:88:ff:42:25:c9:fc:bd:6d:aa:1d:1b: 05:be:b0:73:5a:0e:56:d4:ec:f3:29:ee:f1:1e:96: ab:fa:2a:57:fa:29:65:28:6e:96:86:d7:7a:c9:8a: 21:33:4c:11:b4:6c:80:b3:eb:1c:51:e2:45:93:2e: 91:be:c9:a5:e4:85:83:2f:ea:b0:ae:d3:cf:45:ab: 2b:ef:a2:5e:fd:36:06:15:ad:ff:c6:68:67:e2:db: 8b:1f:4f:e9:17:5e:c1:61:91:f7:5b:0b:6f:ab:1b: 56:bd:86:20:dd:ae:87:cf:04:b4:ba:61:fc:38:e8: 2d:df:19:b5:03:72:d7:06:00:9d:c5:24:40:4b:b8: 50:87:f0:90:6b:2a:8c:d3:7a:e6:9a:90:06:f6:82: 6f:a0:8a:52:4d:65:ac:78:bd:a8:8e:a3:37:22:40: c8:fb:f8:ac:cb:40:05:b7:01:46:b3:3f:c6:84:7a: b4:43:74:5c:83:37:10:0c:17:61:44:59:a2:55:c4: f2:ed:6b:cd:c7:1e:65:51:9b:49:8e:6d:72:7f:4d: 99:aa:89:be:f7:2a:f8:8a:73:2b:c2:8b:cf:e5:85: 32:33:17:35:77:c7:96:53:28:80:0a:d6:b7:a2:17: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FC:55:48:2A:72:1B:99:62:2E:98:84:B3:30:C3:74:DD:C0:84:42 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:45:d3:2c:37:23:e8:c6:d2:90:35:8c:47:99:fa:4a:12:dc: 91:7c:35:55:97:f1:39:eb:bb:d4:3e:ff:99:f0:27:93:4a:b6: f1:b1:60:cf:4e:c4:12:2d:90:af:82:6f:ad:f6:4b:ea:5c:71: 2c:e3:29:fa:c6:d8:4d:75:5c:45:1d:85:a2:81:82:b3:25:ca: 5c:9a:78:b0:76:2a:0e:b4:02:35:12:aa:23:d8:84:20:fb:d3: 18:31:96:3a:f2:e2:b2:c7:7f:c4:24:62:8c:98:46:dd:fb:6c: 30:4c:d7:36:aa:15:e5:75:69:34:1e:48:8c:69:38:36:41:b9: 6b:5c:b0:48:df:02:19:dd:ee:f3:5d:64:41:e4:c3:26:ee:0d: b1:e6:2f:0d:25:f7:56:e4:a8:13:b9:df:5f:fe:51:bf:9b:8b: ab:6d:52:d7:ab:a6:a2:fc:c9:b1:11:e5:78:2e:3f:9a:1a:c2: 47:50:0a:b5:9d:4a:be:4d:75:a1:0f:f4:e8:92:32:30:ee:3f: 6c:44:33:0c:d3:2b:c3:e0:05:34:16:b0:a5:52:d9:2f:37:7b: 57:68:d7:4f:55:5e:fa:23:88:82:e2:e7:af:db:f4:13:1a:61: ce:81:6e:28:43:b5:a1:b7:d8:3d:95:5a:e9:ae:30:2e:33:1b: b4:14:5b:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUwODIzMDUzMzUxWhcNMjUwODMwMDUzMzUxWjAYMRYwFAYD VQQDEw02OGE5NTJiZi03YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDOoohiKZ3N5I7S5hr79VF/oiP9CJcn8vW2qHRsFvrBzWg5W1OzzKe7xHpar +ipX+illKG6Whtd6yYohM0wRtGyAs+scUeJFky6Rvsml5IWDL+qwrtPPRasr76Je /TYGFa3/xmhn4tuLH0/pF17BYZH3WwtvqxtWvYYg3a6HzwS0umH8OOgt3xm1A3LX BgCdxSRAS7hQh/CQayqM03rmmpAG9oJvoIpSTWWseL2ojqM3IkDI+/isy0AFtwFG sz/GhHq0Q3RcgzcQDBdhRFmiVcTy7WvNxx5lUZtJjm1yf02Zqom+9yr4inMrwovP 5YUyMxc1d8eWUyiACta3ohcf/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX8VUgq chuZYi6YhLMww3TdwIRCMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsRdMsNyPoxtKQNYxHmfpKEtyRfDVVl/E567vUPv+Z8CeTSrbxsWDP TsQSLZCvgm+t9kvqXHEs4yn6xthNdVxFHYWigYKzJcpcmniwdioOtAI1Eqoj2IQg +9MYMZY68uKyx3/EJGKMmEbd+2wwTNc2qhXldWk0HkiMaTg2QblrXLBI3wIZ3e7z XWRB5MMm7g2x5i8NJfdW5KgTud9f/lG/m4urbVLXq6ai/MmxEeV4Lj+aGsJHUAq1 nUq+TXWhD/TokjIw7j9sRDMM0yvD4AU0FrClUtkvN3tXaNdPVV76I4iC4uev2/QT GmHOgW4oQ7Wht9g9lVrprjAuMxu0FFuv -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:28 2025 by rpki-client