$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: JHYa3lwxmx8W2vRr44UQ5PNEBrhhJ+Wl//R5lM+iSvo= Subject key identifier: 80:2A:72:DA:46:90:43:FC:EE:E4:D4:E8:18:F6:C7:30:89:40:53:0B Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:19:42 +0000 Manifest this update: Sat 23 Aug 2025 08:19:42 +0000 Manifest next update: Sat 30 Aug 2025 08:19:42 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: rfATengchoS0v9xt/lMZOPUdl4WE3eRpidcHEMcn5fw=) 2: 2DB602706DE511F0B0D13E21C4F9AE02.roa (hash: xplHdQzRmeC1vA5Qxhl/QWUYcgFXGAc5Lm3iGDrg6/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Aug 23 08:19:42 2025 GMT Not After : Aug 30 08:19:42 2025 GMT Subject: CN=68a9799e-9efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:c9:e0:47:87:14:b2:36:9f:10:d3:1c:fa: 3f:1b:5f:f5:20:86:ba:a0:92:b9:6f:ac:c0:11:c8: 5c:64:e4:34:60:62:cf:0c:af:96:1f:15:d7:70:fa: 6c:cd:c5:06:d9:89:cb:13:94:f8:57:e3:96:c4:ff: 79:de:96:e0:f5:c8:c2:8e:5c:68:1d:82:01:b8:77: 37:29:82:c0:cf:bb:94:36:bc:9e:1d:65:71:da:b5: 2b:42:f7:db:b5:ee:05:ec:6f:50:98:80:74:8a:0b: 60:f4:c1:cb:e9:1f:29:41:f1:5f:46:88:69:f8:d3: 2c:69:fe:1f:ed:fd:e7:90:77:5b:f7:7d:ce:f0:9e: 43:ad:22:df:51:9a:d0:dd:61:d3:99:4c:4f:09:a3: 4d:7f:db:6c:aa:1d:b7:fc:40:a2:a6:cb:95:a2:ec: 0b:19:b6:41:e0:e9:e5:63:2f:09:e8:19:9f:c2:5a: 7e:d3:ea:d2:de:6a:52:2e:6f:bc:6c:6a:c9:23:73: 5a:20:27:60:55:08:e8:7d:c0:f8:fb:e3:e5:79:f4: 1f:c9:57:28:cf:2e:92:d9:11:60:33:1f:16:da:46: e3:a9:3a:8f:2b:82:5c:a6:18:69:b2:f8:4a:95:ed: 5e:17:0e:e6:2b:b4:b2:f2:df:54:82:59:b9:5c:9b: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2A:72:DA:46:90:43:FC:EE:E4:D4:E8:18:F6:C7:30:89:40:53:0B X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:67:13:ce:55:bd:1e:4c:03:33:ba:28:84:17:88:11:29:c0: 03:b1:3d:26:50:31:a1:22:2d:51:2b:81:bb:b3:1f:0e:d4:57: cb:90:8b:58:68:00:cc:50:9e:ba:c8:ee:21:2b:21:f4:fe:42: 4c:2f:b9:71:1c:2d:b0:e9:48:2f:eb:7d:af:c0:e3:ba:5a:29: 4e:59:bb:a2:c5:93:df:ae:af:b2:1b:d1:b5:e9:bf:6e:b6:4c: 0a:0b:af:93:7c:aa:3c:cf:aa:d1:bd:4b:a2:76:de:41:29:9e: a3:ad:f2:7f:1d:13:c2:04:73:aa:1c:48:b1:18:2e:84:a7:18: 8f:a9:a9:63:32:ca:10:e2:e0:50:41:65:07:68:16:2a:48:76: 4f:0a:d7:08:61:78:d3:0a:ac:a5:d2:ea:c4:e1:cc:b4:88:76: 8d:e4:dd:6c:53:94:e4:71:b7:ce:ea:be:d4:fc:66:6e:af:b9: bb:cf:ac:f4:50:d6:90:7a:b2:8b:cd:81:b1:cf:85:6f:ef:11: 6d:b4:4a:e0:55:c0:97:f5:96:d7:55:17:e6:87:8c:b2:de:80: 31:50:64:ea:cf:5c:4e:b2:58:52:14:71:9e:b8:e3:48:cd:29: b6:30:a2:ef:09:28:53:8b:88:34:bf:95:17:da:0f:63:36:3d: a3:da:9b:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTA4MjMwODE5NDJaFw0yNTA4MzAwODE5NDJaMBgxFjAUBgNV BAMTDTY4YTk3OTllLTllZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqKsngR4cUsjafENMc+j8bX/UghrqgkrlvrMARyFxk5DRgYs8Mr5YfFddw+mzN xQbZicsTlPhX45bE/3neluD1yMKOXGgdggG4dzcpgsDPu5Q2vJ4dZXHatStC99u1 7gXsb1CYgHSKC2D0wcvpHylB8V9GiGn40yxp/h/t/eeQd1v3fc7wnkOtIt9RmtDd YdOZTE8Jo01/22yqHbf8QKKmy5Wi7AsZtkHg6eVjLwnoGZ/CWn7T6tLealIub7xs askjc1ogJ2BVCOh9wPj74+V59B/JVyjPLpLZEWAzHxbaRuOpOo8rglymGGmy+EqV 7V4XDuYrtLLy31SCWblcm2ShAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgCpy2kaQ Q/zu5NToGPbHMIlAUwswHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABdnE85VvR5MAzO6KIQXiBEpwAOxPSZQMaEiLVErgbuzHw7UV8uQi1ho AMxQnrrI7iErIfT+QkwvuXEcLbDpSC/rfa/A47paKU5Zu6LFk9+ur7Ib0bXpv262 TAoLr5N8qjzPqtG9S6J23kEpnqOt8n8dE8IEc6ocSLEYLoSnGI+pqWMyyhDi4FBB ZQdoFipIdk8K1whheNMKrKXS6sThzLSIdo3k3WxTlORxt87qvtT8Zm6vubvPrPRQ 1pB6sovNgbHPhW/vEW20SuBVwJf1ltdVF+aHjLLegDFQZOrPXE6yWFIUcZ6440jN KbYwou8JKFOLiDS/lRfaD2M2PaPam5c= -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:00 2025 by rpki-client