$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: AIb8oCE8Bj2vc3IS3IZvihUKx4zqkYWZtjAHdofAhAQ= Subject key identifier: 94:FE:A2:F7:82:46:94:4E:91:CC:E8:E5:29:BE:75:A9:50:F3:72:B4 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B31 Signing time: Fri 22 Aug 2025 19:20:58 +0000 Manifest this update: Fri 22 Aug 2025 19:20:58 +0000 Manifest next update: Fri 29 Aug 2025 19:20:58 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: aL3yXlLIbCMODRiOIz8LOqDnMk087GWddJI7Ab5vTO8=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Aug 22 19:20:58 2025 GMT Not After : Aug 29 19:20:58 2025 GMT Subject: CN=68a8c31a-a207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:8f:ef:8b:a6:8a:7e:04:04:8c:d3:32:78: 9d:ca:8c:fd:41:c7:0b:27:b0:df:9c:11:0a:4a:69: 0d:69:37:7f:25:0a:e6:b4:66:42:69:54:d4:15:e3: 50:31:55:86:cf:ba:1d:33:55:5f:6a:9d:1a:99:c5: 20:67:78:46:1e:79:eb:b7:91:7c:cf:c6:0d:96:21: 9f:04:97:5c:60:ad:69:9a:e5:b0:90:8d:44:5f:76: 00:80:b0:3a:1d:7d:b6:4b:d0:f1:0b:59:9d:86:5e: 16:70:7a:b2:94:4e:a4:07:47:7a:57:17:fb:9e:88: 21:2a:e6:5a:6f:9b:66:ff:6f:48:95:33:2a:90:5a: bc:ac:54:9d:25:e1:d2:49:c4:b2:78:c0:b1:e1:b9: a7:be:cd:d2:b3:9d:e6:76:cb:35:0b:aa:07:3a:fc: 11:69:a1:80:39:c3:c5:32:64:64:8b:99:07:58:d1: da:62:db:98:33:0a:d4:7d:98:43:1f:12:f6:60:20: fd:7b:b2:ee:5d:fc:8b:a1:e7:79:10:5a:18:c2:20: a6:1d:69:c0:a5:e2:33:9c:5f:d4:8e:2a:06:07:ff: 29:fc:16:8d:6e:f8:0d:08:77:81:0a:3c:fd:01:bb: 5f:7d:3f:4f:e8:eb:31:36:58:a3:59:78:71:32:94: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:A2:F7:82:46:94:4E:91:CC:E8:E5:29:BE:75:A9:50:F3:72:B4 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:e3:29:fa:46:9c:3d:9c:34:fd:41:14:97:92:19:a4:52: 51:3f:27:9f:11:98:98:47:fb:ed:d9:48:50:cf:46:7c:66:e9: 85:b4:f7:64:b1:7a:d7:9c:27:a2:88:ba:3d:13:9b:aa:50:54: aa:cf:10:7e:61:6d:2a:79:6b:c7:2e:80:ef:e6:46:e6:9c:d6: f1:36:e8:23:2e:ca:0e:d2:cd:20:70:5e:a4:53:bf:80:69:e3: 76:5e:9b:ab:8d:5f:04:3f:f9:2c:7a:d6:b5:d6:68:ba:26:a6: 9f:f9:96:6c:27:2d:05:a1:2c:db:86:36:84:06:9b:3d:fa:bc: 85:12:b7:d6:a2:80:b6:a1:0e:d2:80:1b:b6:b3:6d:e3:76:b1: 27:4c:e5:3f:2b:2b:d0:60:57:de:10:da:b0:92:42:9b:58:dd: de:fb:43:5e:a4:10:95:bd:27:f7:95:4f:c4:ea:7f:fc:a3:6e: 94:bc:81:1c:30:59:40:ef:c9:d4:d9:8f:22:72:b2:10:9c:e5: 1d:57:1e:60:05:e6:ba:c0:ad:d0:30:c8:52:eb:3c:88:64:61: 32:4c:63:eb:e3:0f:d7:1b:b3:75:e6:d2:36:29:1e:71:bf:46: b7:15:29:e5:ca:e5:86:d3:31:b2:32:0e:1c:63:bb:b3:21:8d: 13:8f:11:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUwODIyMTkyMDU4WhcNMjUwODI5MTkyMDU4WjAYMRYwFAYD VQQDEw02OGE4YzMxYS1hMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PqP74umin4EBIzTMnidyoz9QccLJ7DfnBEKSmkNaTd/JQrmtGZCaVTUFeNQ MVWGz7odM1Vfap0amcUgZ3hGHnnrt5F8z8YNliGfBJdcYK1pmuWwkI1EX3YAgLA6 HX22S9DxC1mdhl4WcHqylE6kB0d6Vxf7noghKuZab5tm/29IlTMqkFq8rFSdJeHS ScSyeMCx4bmnvs3Ss53mdss1C6oHOvwRaaGAOcPFMmRki5kHWNHaYtuYMwrUfZhD HxL2YCD9e7LuXfyLoed5EFoYwiCmHWnApeIznF/UjioGB/8p/BaNbvgNCHeBCjz9 AbtffT9P6OsxNlijWXhxMpQwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT+oveC RpROkczo5Sm+dalQ83K0MB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWTOMp+kacPZw0/UEUl5IZpFJRPyefEZiYR/vt2UhQz0Z8ZumFtPdk sXrXnCeiiLo9E5uqUFSqzxB+YW0qeWvHLoDv5kbmnNbxNugjLsoO0s0gcF6kU7+A aeN2XpurjV8EP/kseta11mi6Jqaf+ZZsJy0FoSzbhjaEBps9+ryFErfWooC2oQ7S gBu2s23jdrEnTOU/KyvQYFfeENqwkkKbWN3e+0NepBCVvSf3lU/E6n/8o26UvIEc MFlA78nU2Y8icrIQnOUdVx5gBea6wK3QMMhS6zyIZGEyTGPr4w/XG7N15tI2KR5x v0a3FSnlyuWG0zGyMg4cY7uzIY0TjxHk -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:07 2025 by rpki-client