$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: 3fJBPIOd9OOyPV92Za6RXajXto0U69L6dquXzMHYbO4= Subject key identifier: 0C:1A:65:A8:12:3E:DF:37:AC:B1:14:79:77:2E:28:73:87:FF:49:6A Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 0162 Signing time: Sat 23 Aug 2025 05:14:03 +0000 Manifest this update: Sat 23 Aug 2025 05:14:03 +0000 Manifest next update: Sat 30 Aug 2025 05:14:03 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: 7+T7fJIJvCKkRtAewimFHFqH2xNAiBvm/Z5Kkjw7raA=) 2: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) 3: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) 4: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 5: B829D0325B1911F0B22D1D7EC4F9AE02.roa (hash: aZgJ0HtdFLW3z1O3m8iUNjI3ajFvG4JUkNQZr3Vclas=) 6: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Aug 23 05:14:03 2025 GMT Not After : Aug 30 05:14:03 2025 GMT Subject: CN=68a94e1b-1a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:45:de:77:fb:2c:03:ba:42:60:d7:a3:bb: 43:42:6e:6d:2f:3a:43:2b:fb:67:b7:69:74:5c:89: 19:40:33:71:20:5d:05:13:7f:ab:17:57:94:df:7c: fe:9d:f0:2d:90:9a:e8:6c:7c:fe:f6:af:db:a2:f0: 4b:7f:0f:6d:e5:b9:15:0c:d8:79:aa:fa:db:2e:00: 64:75:da:a8:c1:94:d3:ea:55:1a:a8:5d:dc:2e:fb: bc:6b:0c:1c:29:2e:9f:3f:5b:df:d5:21:dd:0c:78: 29:b3:37:ad:f0:74:b7:2f:5e:ab:1a:2a:67:09:95: 2b:61:b9:2c:7b:49:fc:6f:eb:b8:f3:40:80:1e:cd: 8a:5e:5a:4a:ba:28:14:47:54:78:7f:67:4f:ee:59: 53:b8:ac:22:7d:cb:46:ab:fb:11:b8:b0:25:6c:12: 46:69:39:6e:51:ea:9e:a3:a1:e2:a1:ee:9c:dd:05: 13:45:27:03:8e:a8:3b:a9:f0:b4:c0:53:39:69:a2: 8e:18:a8:31:ea:f4:64:0c:ed:78:69:d5:ef:8a:1e: 9a:8a:3e:7d:14:61:d6:60:52:3b:77:0d:ed:31:37: b5:24:78:de:d7:f1:5c:20:d8:22:aa:ba:20:bb:a2: ca:89:c1:85:61:5d:d0:2d:15:88:8b:78:aa:ec:d6: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1A:65:A8:12:3E:DF:37:AC:B1:14:79:77:2E:28:73:87:FF:49:6A X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4c:80:31:e8:4b:48:c9:cf:31:dd:d4:11:4e:a2:3e:8b:1b: 87:3f:49:49:80:22:9c:8d:15:22:72:cf:1d:c0:0d:c5:67:07: ef:3e:0a:b4:98:b3:62:7c:2d:58:31:82:c3:9a:9d:5a:e2:69: 14:96:b9:db:fd:c9:b1:b5:59:b0:fa:58:20:78:b4:18:fc:38: c2:ad:20:2c:f1:2e:b9:67:74:1d:43:77:96:ca:e3:9a:93:f7: 5a:19:8c:c5:1a:f1:ab:b2:a6:a4:0a:7b:c7:cc:10:a7:ea:e0: 3b:74:da:e9:0a:57:64:76:f2:a7:e8:6a:2d:cc:88:4c:8b:38: 86:1a:9b:e6:8d:41:ff:df:ee:fe:df:b5:9f:65:5d:02:cc:ca: fe:c3:45:2a:e4:0c:9e:9e:5b:16:41:b0:a7:4a:ac:fb:c1:f5: 32:74:4e:aa:69:56:79:bd:69:95:f1:88:e4:78:a3:8d:04:1b: a8:79:49:a0:9b:41:f1:91:c4:78:05:70:d5:1e:ce:4c:2a:ac: 29:1c:1d:a5:34:e5:e2:12:87:ce:48:b4:b3:d4:12:ca:c3:40: 86:6e:b7:c8:a4:d5:39:72:8f:4e:94:3e:ff:66:c6:97:7d:ec: f2:14:15:66:d2:88:e9:e2:2f:31:f5:3d:ef:a8:58:f2:a4:bb: 9b:fc:fb:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwODIzMDUxNDAzWhcNMjUwODMwMDUxNDAzWjAYMRYwFAYD VQQDEw02OGE5NGUxYi0xYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuutF3nf7LAO6QmDXo7tDQm5tLzpDK/tnt2l0XIkZQDNxIF0FE3+rF1eU33z+ nfAtkJrobHz+9q/bovBLfw9t5bkVDNh5qvrbLgBkddqowZTT6lUaqF3cLvu8awwc KS6fP1vf1SHdDHgpszet8HS3L16rGipnCZUrYbkse0n8b+u480CAHs2KXlpKuigU R1R4f2dP7llTuKwifctGq/sRuLAlbBJGaTluUeqeo6Hioe6c3QUTRScDjqg7qfC0 wFM5aaKOGKgx6vRkDO14adXvih6aij59FGHWYFI7dw3tMTe1JHje1/FcINgiqrog u6LKicGFYV3QLRWIi3iq7NaqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwaZagS Pt83rLEUeXcuKHOH/0lqMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFTIAx6EtIyc8x3dQRTqI+ixuHP0lJgCKcjRUics8dwA3FZwfvPgq0 mLNifC1YMYLDmp1a4mkUlrnb/cmxtVmw+lggeLQY/DjCrSAs8S65Z3QdQ3eWyuOa k/daGYzFGvGrsqakCnvHzBCn6uA7dNrpCldkdvKn6GotzIhMiziGGpvmjUH/3+7+ 37WfZV0CzMr+w0Uq5AyenlsWQbCnSqz7wfUydE6qaVZ5vWmV8YjkeKONBBuoeUmg m0HxkcR4BXDVHs5MKqwpHB2lNOXiEofOSLSz1BLKw0CGbrfIpNU5co9OlD7/ZsaX fezyFBVm0ojp4i8x9T3vqFjypLub/Ps/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:14 2025 by rpki-client