$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: HseJAjKw2zPykylCNsdd0lIuf5yeCXDoacAVp6KOrLY= Subject key identifier: A9:0A:05:FD:75:6F:0F:1A:DB:0E:52:8F:36:80:73:2E:63:63:31:DC Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 4E Signing time: Sat 23 Aug 2025 07:35:07 +0000 Manifest this update: Sat 23 Aug 2025 07:35:06 +0000 Manifest next update: Sat 30 Aug 2025 07:35:06 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: /x88frc3Ufy1CrdNXPsBHqF0kWHI3Ao+A1JCdMIKQ9M=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Aug 23 07:35:06 2025 GMT Not After : Aug 30 07:35:06 2025 GMT Subject: CN=68a96f2a-0d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:27:3e:d0:cd:85:d7:3e:57:85:5b:92:11:db: d2:22:6e:06:19:17:13:65:66:de:10:cd:46:4a:f7: ac:02:c2:31:91:90:59:5a:d1:de:d4:44:c7:88:78: 9e:f7:20:41:4e:27:31:22:68:47:80:aa:97:ac:20: b5:77:62:8f:da:3f:e7:71:4b:da:8b:fd:77:eb:d5: 61:91:11:80:9b:91:b6:51:c0:4c:19:13:c8:fc:48: e7:10:f2:0b:43:de:73:f0:82:ab:eb:a7:05:af:9f: 58:4d:ad:9d:82:da:12:64:0d:38:74:3a:49:eb:ba: 2a:5f:35:68:c7:75:4f:fd:22:a7:82:57:b0:8b:55: d5:13:6d:49:92:94:25:61:17:9f:b2:a3:09:a4:05: 86:ca:26:f1:a1:d6:9d:84:ca:b0:74:5d:03:d7:90: 55:90:d3:0f:e8:04:98:07:42:22:96:ce:42:58:08: 4f:11:01:98:21:e2:2e:37:37:10:4b:83:5a:fc:a0: ab:e5:00:1f:f9:62:42:57:e5:11:1e:d6:6d:62:e3: 93:8a:ab:cf:51:18:27:9c:b8:cb:ee:ab:81:aa:f7: 84:dc:a4:4a:ec:54:04:91:25:2f:df:17:ad:f8:0b: 47:2c:8d:b4:f3:81:96:3f:f7:fb:32:d2:07:91:f7: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:05:FD:75:6F:0F:1A:DB:0E:52:8F:36:80:73:2E:63:63:31:DC X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a8:83:7d:53:3a:df:78:fd:57:87:96:89:59:48:01:da:c4: dc:4f:38:41:01:f0:1b:ef:74:7b:96:e8:f5:ea:d2:0d:db:0a: e3:54:0f:61:be:bf:57:04:f5:95:a1:b9:fe:04:f4:92:ab:23: 38:d6:fa:aa:07:f8:5d:72:e0:c8:9b:ec:6e:bf:ca:9b:16:c2: ae:02:bc:c4:52:3c:8e:08:52:50:e8:d7:2a:43:bf:22:c2:99: 10:a4:8b:8c:1c:7e:b6:c0:02:ba:59:4b:20:f3:2d:c1:d6:7e: f4:e5:77:91:6e:b4:46:e0:f1:38:8b:42:f7:d8:2f:51:d6:de: 16:d9:64:72:54:a5:c5:b3:f0:84:fc:ab:fe:97:1e:d4:7f:b2: 0f:58:55:29:fe:b0:84:fa:3b:17:bd:d3:0a:41:15:ea:34:45: b6:f4:4c:7a:35:4d:04:84:13:0b:3e:53:11:c8:bf:59:c3:82: b7:55:52:8b:c4:89:7d:4f:74:5f:de:56:31:4f:9e:b4:7b:95: d6:89:df:45:5b:a5:cf:2a:fb:25:79:c1:0e:f0:31:9c:eb:1d: f1:e7:d8:db:66:14:6b:6f:bf:55:1a:7a:00:2c:8f:fd:1b:77: 29:ee:a2:ee:89:63:da:c6:35:2b:e5:cb:c6:37:c2:1a:4c:4c: 6f:fe:c3:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTA4MjMwNzM1MDZaFw0yNTA4MzAwNzM1MDZaMBgxFjAUBgNV BAMTDTY4YTk2ZjJhLTBkM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwJz7QzYXXPleFW5IR29IibgYZFxNlZt4QzUZK96wCwjGRkFla0d7URMeIeJ73 IEFOJzEiaEeAqpesILV3Yo/aP+dxS9qL/Xfr1WGREYCbkbZRwEwZE8j8SOcQ8gtD 3nPwgqvrpwWvn1hNrZ2C2hJkDTh0OknruipfNWjHdU/9IqeCV7CLVdUTbUmSlCVh F5+yowmkBYbKJvGh1p2EyrB0XQPXkFWQ0w/oBJgHQiKWzkJYCE8RAZgh4i43NxBL g1r8oKvlAB/5YkJX5REe1m1i45OKq89RGCecuMvuq4Gq94TcpErsVASRJS/fF634 C0csjbTzgZY/9/sy0geR92sXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqQoF/XVv DxrbDlKPNoBzLmNjMdwwHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmog31TOt94/VeHlolZSAHaxNxPOEEB8BvvdHuW6PXq0g3bCuNUD2G+ v1cE9ZWhuf4E9JKrIzjW+qoH+F1y4Mib7G6/ypsWwq4CvMRSPI4IUlDo1ypDvyLC mRCki4wcfrbAArpZSyDzLcHWfvTld5FutEbg8TiLQvfYL1HW3hbZZHJUpcWz8IT8 q/6XHtR/sg9YVSn+sIT6Oxe90wpBFeo0Rbb0THo1TQSEEws+UxHIv1nDgrdVUovE iX1PdF/eVjFPnrR7ldaJ30Vbpc8q+yV5wQ7wMZzrHfHn2NtmFGtvv1UaegAsj/0b dynuou6JY9rGNSvly8Y3whpMTG/+wzI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:42 2025 by rpki-client