$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json) Hash identifier: nBRC8uLjmJr5wjWgiCv2ChDnph0TiQDuX+JT5nQLOz4= Subject key identifier: 92:6C:30:5D:FF:68:5B:22:AA:55:74:F5:2E:C5:57:1E:32:60:4E:1B Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft Manifest number: 80 Signing time: Sat 23 Aug 2025 06:57:34 +0000 Manifest this update: Sat 23 Aug 2025 06:57:34 +0000 Manifest next update: Sat 30 Aug 2025 06:57:34 +0000 Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: WTzNsNUkKWbAsiTHiSpN1M7IDNkb4Y7m/ICYbH3l/J0=) 2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Validity Not Before: Aug 23 06:57:34 2025 GMT Not After : Aug 30 06:57:34 2025 GMT Subject: CN=68a9665e-5671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1b:d7:34:d2:24:d6:e9:b4:b4:d1:cf:7c:ad: a8:eb:cf:90:7a:98:8f:1a:ac:96:ad:5f:3f:7c:5c: 6b:4a:b9:f4:ec:b7:b5:07:14:81:cd:f5:2a:6f:50: e0:d1:95:ba:f8:17:00:45:dd:fc:d4:58:2e:f5:1d: a4:c3:f0:f0:19:e5:14:8a:4f:f0:c0:b2:0b:11:45: 4a:5e:db:f4:ac:ae:55:66:7e:d4:6a:1f:6b:fa:90: 07:b5:88:f5:2f:ef:64:1f:f3:b5:c8:0d:84:e2:53: 72:17:61:bc:7b:9f:45:75:0a:de:d2:33:58:8e:e4: 61:a0:48:51:72:f6:7d:57:5b:e9:0b:22:7a:f8:a7: 83:3e:e8:3c:62:68:97:56:ce:4c:70:c9:9b:65:03: 56:1a:41:9a:aa:ab:03:14:88:cd:5a:84:0b:58:60: 88:bd:a8:35:72:3f:67:57:83:90:29:4e:f7:04:67: 17:b1:20:86:2a:75:3a:26:a6:60:a2:93:54:a2:4b: 16:91:6d:40:0e:5e:9c:95:2e:8d:0f:29:aa:15:67: 52:ff:92:a1:9d:82:2d:ce:47:c1:ec:4e:85:4b:33: 3c:ce:59:17:f0:72:3b:2d:3e:e8:fb:3a:59:9c:da: aa:27:14:bc:30:cd:f3:a9:90:a8:c9:24:67:5e:d0: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6C:30:5D:FF:68:5B:22:AA:55:74:F5:2E:C5:57:1E:32:60:4E:1B X509v3 Authority Key Identifier: keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f9:d9:45:ad:01:a1:4e:dd:0b:fb:d3:55:55:dd:29:b7:c7: 26:1c:50:df:01:5f:28:e4:07:8c:a8:d0:8f:99:a0:c3:69:f7: c4:9d:7a:2c:b6:ba:8d:f4:70:c4:56:94:57:d7:0b:12:7e:72: ff:74:89:5f:17:93:d3:00:cd:a1:cb:4e:7c:eb:fb:51:95:d0: 2f:3f:89:4d:2a:6e:ff:42:b9:78:f4:6b:68:d3:0c:c8:22:af: 7b:71:d7:27:50:b0:3e:9e:04:cd:4d:bd:ea:32:0a:97:0d:85: c3:72:52:3f:a5:44:79:db:d1:31:e6:95:e2:00:fa:43:af:ac: 33:6e:a1:f8:ff:d4:c9:3e:bd:1f:1a:74:23:89:77:38:6b:52: 3d:ee:9e:92:ad:53:60:84:74:84:f4:da:65:d0:eb:cd:ea:b6: 38:71:bd:74:fb:a1:3c:75:90:a5:c9:40:c1:c5:5c:a1:df:52: 8f:f4:12:41:0b:50:43:b8:2d:97:5f:11:90:6a:43:9e:a6:73: 2c:5a:34:4b:47:0e:21:b0:c9:6e:a9:3b:21:3b:6c:81:a3:d4: 92:69:73:53:17:bd:44:83:32:31:d6:78:d4:09:7b:4f:c7:6b: af:99:e9:e4:e6:54:17:75:9e:8f:16:86:e0:b3:36:2a:b1:ef: 30:12:c0:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDRGOUVGRDQzQkE3OUEzNDk0NTUxMDlEQjIwMDg0NUE4 OTA4Q0RDNUMwHhcNMjUwODIzMDY1NzM0WhcNMjUwODMwMDY1NzM0WjAYMRYwFAYD VQQDEw02OGE5NjY1ZS01NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BvXNNIk1um0tNHPfK2o68+QepiPGqyWrV8/fFxrSrn07Le1BxSBzfUqb1Dg 0ZW6+BcARd381Fgu9R2kw/DwGeUUik/wwLILEUVKXtv0rK5VZn7Uah9r+pAHtYj1 L+9kH/O1yA2E4lNyF2G8e59FdQre0jNYjuRhoEhRcvZ9V1vpCyJ6+KeDPug8YmiX Vs5McMmbZQNWGkGaqqsDFIjNWoQLWGCIvag1cj9nV4OQKU73BGcXsSCGKnU6JqZg opNUoksWkW1ADl6clS6NDymqFWdS/5KhnYItzkfB7E6FSzM8zlkX8HI7LT7o+zpZ nNqqJxS8MM3zqZCoySRnXtBgDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJsMF3/ aFsiqlV09S7FVx4yYE4bMB8GA1UdIwQYMBaAFE+e/UO6eaNJRVEJ2yAIRaiQjNxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8yRjcyMkE5OEMz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9UNTc5UTdwNW8wbEZVUW5iSUFoRnFKQ00z RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8yRjcyMkE5OEMzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9UNTc5UTdwNW8w bEZVUW5iSUFoRnFKQ00zRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4+dlFrQGhTt0L+9NVVd0pt8cmHFDfAV8o5AeMqNCPmaDDaffEnXos trqN9HDEVpRX1wsSfnL/dIlfF5PTAM2hy0586/tRldAvP4lNKm7/Qrl49Gto0wzI Iq97cdcnULA+ngTNTb3qMgqXDYXDclI/pUR529Ex5pXiAPpDr6wzbqH4/9TJPr0f GnQjiXc4a1I97p6SrVNghHSE9Npl0OvN6rY4cb10+6E8dZClyUDBxVyh31KP9BJB C1BDuC2XXxGQakOepnMsWjRLRw4hsMluqTshO2yBo9SSaXNTF71EgzIx1njUCXtP x2uvmenk5lQXdZ6PFobgszYqse8wEsCc -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:02 2025 by rpki-client