$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: vsGjkYi0P1I0H+h/12qTUnk3ottb76S1aSUlLBHrkjI= Subject key identifier: 10:49:23:53:2F:DF:8A:D4:77:0E:4C:29:DF:DD:F8:C7:63:78:9A:6F Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 012F Signing time: Sat 23 Aug 2025 04:40:37 +0000 Manifest this update: Sat 23 Aug 2025 04:40:36 +0000 Manifest next update: Sat 30 Aug 2025 04:40:36 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: sK4I6W7MSyrKMYsiAU/7AomXKkrmjhv/Spm2XTlrry0=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Aug 23 04:40:36 2025 GMT Not After : Aug 30 04:40:36 2025 GMT Subject: CN=68a94644-a670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:3f:2b:19:37:09:b7:75:64:21:3a:0d:db: 70:92:80:87:52:da:69:d4:db:b0:58:89:8b:34:eb: 35:e3:df:76:2a:a4:df:a3:62:85:23:8c:e6:ae:b4: 8c:f1:f6:54:74:7b:c8:cb:6f:ce:4c:6c:e9:38:45: 10:3d:b3:bb:62:33:22:43:2e:5e:5d:3a:21:e8:36: a6:b2:fc:10:f6:b3:0f:2c:d7:d6:22:3a:01:9c:48: bb:28:cd:95:d9:df:b6:72:ad:af:19:6a:17:0a:8d: 33:f0:6d:eb:39:dd:ea:e9:4d:07:fe:24:83:3d:89: 39:b0:1e:6e:8a:51:62:82:f4:22:e8:cf:5c:20:c9: 8b:8a:e3:c2:dd:56:98:54:60:5e:1b:88:31:84:0b: fd:a4:e5:a8:39:eb:58:58:e7:4e:19:6f:3c:4a:61: 88:d9:86:5c:5d:a2:ca:55:10:ab:7f:8c:ab:22:58: 51:82:54:b1:b5:f9:66:3e:44:13:c3:72:3e:7a:82: fb:c7:d0:36:41:d4:ff:04:0b:eb:e9:ed:a6:3f:0a: ee:c0:6e:0a:82:0a:67:a0:6f:3a:1c:18:1c:50:a0: bc:ac:14:84:7c:fd:97:74:a6:f9:c5:7a:d5:57:92: ac:56:ae:e4:3a:7e:44:9b:01:20:6d:31:e6:67:c3: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:49:23:53:2F:DF:8A:D4:77:0E:4C:29:DF:DD:F8:C7:63:78:9A:6F X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:68:e8:80:c6:82:12:20:80:13:72:4a:67:92:86:15:ed:f7: cc:47:d4:a9:4a:85:e3:06:33:bf:0d:5b:54:9f:8b:ab:7f:71: 4d:f0:b2:25:1a:2a:b3:3f:45:40:5a:64:9a:e9:37:e9:21:fc: fa:3d:94:05:40:25:51:e1:9e:51:ca:de:04:b8:1f:1c:63:8c: 9b:82:96:62:31:5b:67:94:85:3e:f6:d8:40:5b:bb:be:9e:3d: d2:16:89:e2:62:37:5f:8f:8b:d5:1d:ac:e6:b0:bd:60:e7:b3: 26:76:51:ce:f4:79:22:55:bf:8c:9f:43:f6:12:b7:0b:9d:26: 9a:20:4e:a7:22:52:19:40:8b:81:43:99:01:1a:67:5e:82:e8: d1:f0:ec:64:1b:96:2f:f5:bc:1c:d2:28:72:28:81:78:ed:e7: 43:c7:06:78:36:46:33:68:f0:d7:d3:ba:4f:47:72:3f:4e:01: af:cf:aa:98:76:cd:6b:a8:6c:9c:6d:b9:f6:dc:23:c4:57:aa: e1:be:0c:05:56:3d:4e:11:53:a9:0f:8e:44:ff:16:7c:4c:6f: fe:7f:b0:7b:4d:0f:60:a0:99:db:a6:3d:9c:2d:a4:9a:0c:23: 6f:1f:ea:98:13:2f:44:95:e7:41:c7:cb:ba:9a:75:39:7f:67: 6a:c1:1a:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUwODIzMDQ0MDM2WhcNMjUwODMwMDQ0MDM2WjAYMRYwFAYD VQQDEw02OGE5NDY0NC1hNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH4/Kxk3Cbd1ZCE6DdtwkoCHUtpp1NuwWImLNOs14992KqTfo2KFI4zmrrSM 8fZUdHvIy2/OTGzpOEUQPbO7YjMiQy5eXToh6DamsvwQ9rMPLNfWIjoBnEi7KM2V 2d+2cq2vGWoXCo0z8G3rOd3q6U0H/iSDPYk5sB5uilFigvQi6M9cIMmLiuPC3VaY VGBeG4gxhAv9pOWoOetYWOdOGW88SmGI2YZcXaLKVRCrf4yrIlhRglSxtflmPkQT w3I+eoL7x9A2QdT/BAvr6e2mPwruwG4KggpnoG86HBgcUKC8rBSEfP2XdKb5xXrV V5KsVq7kOn5EmwEgbTHmZ8OtqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBJI1Mv 34rUdw5MKd/d+MdjeJpvMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLaOiAxoISIIATckpnkoYV7ffMR9SpSoXjBjO/DVtUn4urf3FN8LIl GiqzP0VAWmSa6TfpIfz6PZQFQCVR4Z5Ryt4EuB8cY4ybgpZiMVtnlIU+9thAW7u+ nj3SFoniYjdfj4vVHazmsL1g57MmdlHO9HkiVb+Mn0P2ErcLnSaaIE6nIlIZQIuB Q5kBGmdegujR8OxkG5Yv9bwc0ihyKIF47edDxwZ4NkYzaPDX07pPR3I/TgGvz6qY ds1rqGycbbn23CPEV6rhvgwFVj1OEVOpD45E/xZ8TG/+f7B7TQ9goJnbpj2cLaSa DCNvH+qYEy9EledBx8u6mnU5f2dqwRqM -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:12 2025 by rpki-client