$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: mocV9YtJqTP77Ehyjw+CeqW4JwlQ+YiWybNgVtTOsL4= Subject key identifier: DD:4D:8E:03:63:2B:9B:BA:B7:22:9B:BC:3D:93:EA:3C:60:C8:FF:F1 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 05E5 Signing time: Fri 22 Aug 2025 23:10:08 +0000 Manifest this update: Fri 22 Aug 2025 23:10:08 +0000 Manifest next update: Fri 29 Aug 2025 23:10:08 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: YO/j2D4xV+Xsf6zL8qmcO19PPlNqBazifzu7m4ODZ+Q=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Aug 22 23:10:08 2025 GMT Not After : Aug 29 23:10:08 2025 GMT Subject: CN=68a8f8d0-052f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:42:97:4c:5f:19:c5:c5:5f:95:ef:8a:04: 38:78:74:12:cf:5a:84:1d:1b:81:f3:0f:6e:7d:d8: 0e:7f:71:48:9a:ee:f7:56:78:e4:8b:d0:e7:02:90: 0a:c3:d4:6e:d8:63:f0:0b:9c:b0:3b:cc:90:80:c6: 62:d7:25:dd:bd:09:ed:24:26:f9:86:68:1a:24:45: ce:c1:ab:07:c4:b4:87:17:12:d5:66:47:34:17:16: 4a:dc:26:b3:f0:6d:ca:39:22:08:d5:d8:7b:67:3f: b5:74:7d:4d:52:93:54:65:70:ca:14:59:9c:8f:a4: a5:ab:1a:d7:31:95:c7:84:42:c3:e7:55:52:2b:f6: 88:e2:a7:55:94:ef:84:73:03:aa:77:ab:d8:95:a3: a7:cd:ef:68:2d:a7:96:31:7e:ce:f1:07:f1:54:34: 2a:9e:2e:f4:9e:cc:d9:a3:59:0a:80:a2:ad:f5:dc: 82:2c:36:30:e6:3e:45:20:3a:e2:75:26:d2:88:77: f2:58:ad:f3:a7:5a:43:1f:f4:6c:29:84:c2:82:6b: a4:f3:3d:d9:b5:ae:2c:e4:fb:93:dd:5f:9e:82:f9: b4:65:33:be:ab:7e:d9:0b:57:b8:fa:1c:b6:46:6f: 70:84:31:12:47:5b:46:22:98:6a:cf:b3:8a:16:94: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4D:8E:03:63:2B:9B:BA:B7:22:9B:BC:3D:93:EA:3C:60:C8:FF:F1 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:67:27:b6:d6:4b:30:54:93:c4:b8:87:39:f7:8e:8b:5d:c4: c3:81:50:1a:62:1f:ef:8d:a8:21:e0:af:4a:e3:f4:6b:2f:91: ed:ad:bb:1d:42:41:84:11:db:6b:52:ac:c4:d9:e5:b7:9d:b3: b9:67:64:b2:b6:d2:46:bd:69:a1:51:d3:1c:27:14:a7:67:25: 03:7d:60:d1:8c:89:39:99:9e:7a:63:d7:1e:ec:6c:19:3b:1e: 9a:98:ae:f5:fb:e4:ef:5a:96:e1:37:af:a9:f3:1a:35:d9:be: 28:18:fe:31:7f:b1:a8:d8:6b:03:51:12:41:46:ec:bc:f8:18: 26:89:5c:21:23:c1:2a:1a:85:e3:c1:93:45:d3:80:5a:ab:30: 19:f5:0b:31:bc:76:48:97:17:98:5a:6b:fa:7b:e8:c6:df:80: 38:13:f6:56:3c:67:58:64:42:02:bc:a5:d5:8d:cf:be:ec:dc: fe:25:95:f3:2d:7c:61:d0:73:c4:d9:6c:03:9c:2a:ee:40:0d: c5:85:2c:5a:85:36:ea:f9:be:78:c0:c1:0f:a9:16:0d:a7:ac: cb:eb:3d:97:73:37:d6:88:00:e0:d0:c6:a7:17:9c:06:b7:cf: 3c:de:c5:38:6a:0d:1c:03:ec:49:c8:0c:c9:11:27:30:cf:85: c6:3c:6a:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUwODIyMjMxMDA4WhcNMjUwODI5MjMxMDA4WjAYMRYwFAYD VQQDEw02OGE4ZjhkMC0wNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIVCl0xfGcXFX5XvigQ4eHQSz1qEHRuB8w9ufdgOf3FImu73Vnjki9DnApAK w9Ru2GPwC5ywO8yQgMZi1yXdvQntJCb5hmgaJEXOwasHxLSHFxLVZkc0FxZK3Caz 8G3KOSII1dh7Zz+1dH1NUpNUZXDKFFmcj6SlqxrXMZXHhELD51VSK/aI4qdVlO+E cwOqd6vYlaOnze9oLaeWMX7O8QfxVDQqni70nszZo1kKgKKt9dyCLDYw5j5FIDri dSbSiHfyWK3zp1pDH/RsKYTCgmuk8z3Zta4s5PuT3V+egvm0ZTO+q37ZC1e4+hy2 Rm9whDESR1tGIphqz7OKFpRcLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1NjgNj K5u6tyKbvD2T6jxgyP/xMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeZye21kswVJPEuIc5946LXcTDgVAaYh/vjagh4K9K4/RrL5Htrbsd QkGEEdtrUqzE2eW3nbO5Z2SyttJGvWmhUdMcJxSnZyUDfWDRjIk5mZ56Y9ce7GwZ Ox6amK71++TvWpbhN6+p8xo12b4oGP4xf7Go2GsDURJBRuy8+BgmiVwhI8EqGoXj wZNF04BaqzAZ9QsxvHZIlxeYWmv6e+jG34A4E/ZWPGdYZEICvKXVjc++7Nz+JZXz LXxh0HPE2WwDnCruQA3FhSxahTbq+b54wMEPqRYNp6zL6z2XczfWiADg0ManF5wG t8883sU4ag0cA+xJyAzJEScwz4XGPGr9 -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:20 2025 by rpki-client