$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft File: tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json) Hash identifier: +GIfgvnR0aF46+MbIcQNWit4J4/2vfom0EpDCJ6milk= Subject key identifier: 54:93:31:D5:FA:79:AB:51:3F:A0:6B:78:27:C7:9B:5A:6F:F9:62:AB Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:48:37 +0000 Manifest this update: Sat 23 Aug 2025 07:48:37 +0000 Manifest next update: Sat 30 Aug 2025 07:48:37 +0000 Files and hashes: 1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: i0lbOUn1qkb4HUHbtUCrg4amWRBKHEx4dmGVwj+n9kY=) 2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Validity Not Before: Aug 23 07:48:37 2025 GMT Not After : Aug 30 07:48:37 2025 GMT Subject: CN=68a97255-b04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:4a:bf:8a:47:21:88:8c:f5:8d:fc:4c:e7: 65:4a:d5:11:79:28:12:88:63:58:b3:40:51:e0:d0: 9a:56:5b:1a:03:af:fc:ba:e6:e7:1a:bc:65:01:1c: 69:d2:13:c1:98:a7:37:89:13:65:66:49:03:ce:e6: ea:d8:e2:42:39:ed:05:09:2a:96:9f:98:77:c4:08: cb:31:9a:6b:52:51:29:da:eb:ad:76:18:d2:a7:4b: 96:3e:73:b7:d5:d4:0d:75:96:54:47:72:97:8b:c4: 23:b3:04:de:cd:60:86:8a:b2:5e:03:67:a8:c7:2d: 46:6f:95:51:9c:2f:39:e4:2d:bc:e7:f6:06:d1:53: 6b:d7:ec:5b:22:86:b4:e6:77:9f:40:f0:44:54:44: ab:d5:bc:f2:a4:88:31:16:fa:7c:2d:64:fc:d5:8f: 09:e4:17:bd:86:68:a5:02:ad:5e:01:16:ae:72:15: 46:c7:f7:d0:40:a4:d0:b8:55:ee:c9:99:0e:e1:10: 49:02:24:d5:08:93:51:bf:ba:73:ea:6a:aa:8e:a2: 39:00:79:82:63:d2:c3:69:96:ba:d8:9d:44:65:8b: f4:d6:f5:da:1f:69:bf:20:8c:db:6e:a4:9c:2f:51: 98:7d:cb:3e:54:50:9b:32:c8:1c:e2:6b:a2:ee:c4: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:31:D5:FA:79:AB:51:3F:A0:6B:78:27:C7:9B:5A:6F:F9:62:AB X509v3 Authority Key Identifier: keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:15:1d:9e:06:ca:71:33:82:74:f8:52:ef:77:c9:3a:cb:11: 4e:dd:20:2b:12:aa:be:44:cf:bc:2c:9b:8f:97:93:f8:ea:a7: 77:c5:8f:f6:23:77:1b:31:ab:19:8a:ba:1d:b3:ad:3e:5d:d7: 03:6e:d0:a9:15:9b:99:56:f2:b7:a3:b0:66:08:9e:d5:8b:6f: 8c:86:5e:d1:dd:f6:83:18:76:70:25:bf:86:01:5e:b0:63:08: 8c:f3:28:4f:1f:8c:f8:32:a7:cd:81:2e:ba:e3:ea:2d:ce:d9: e8:d2:02:e2:23:cb:27:83:bc:60:6f:8d:8e:92:6f:1a:67:79: 05:d5:86:d1:9f:e6:a0:5a:52:d7:a8:6e:a7:2b:51:39:45:7b: 92:85:49:cc:41:b0:23:c5:fc:c0:3b:c3:12:33:20:fc:df:ab: ac:c1:09:04:78:f8:0a:67:2f:40:50:74:f4:ca:09:97:41:ea: a9:33:29:f4:6d:c7:46:af:f4:d2:5e:e7:41:a7:35:6a:36:96: c3:4e:d5:7f:f3:bc:a3:8e:8a:2f:7b:ed:9c:c1:41:33:3a:c6: d3:1a:9f:07:59:38:22:6b:83:17:4f:56:08:59:60:04:89:0f: 2c:f6:f8:d5:26:4b:75:37:3c:c0:d7:7f:4d:9b:33:ee:a5:81: 2e:75:c0:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5 REFGNEQ0RjAeFw0yNTA4MjMwNzQ4MzdaFw0yNTA4MzAwNzQ4MzdaMBgxFjAUBgNV BAMTDTY4YTk3MjU1LWIwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnP0q/ikchiIz1jfxM52VK1RF5KBKIY1izQFHg0JpWWxoDr/y65ucavGUBHGnS E8GYpzeJE2VmSQPO5urY4kI57QUJKpafmHfECMsxmmtSUSna6612GNKnS5Y+c7fV 1A11llRHcpeLxCOzBN7NYIaKsl4DZ6jHLUZvlVGcLznkLbzn9gbRU2vX7FsihrTm d59A8ERURKvVvPKkiDEW+nwtZPzVjwnkF72GaKUCrV4BFq5yFUbH99BApNC4Ve7J mQ7hEEkCJNUIk1G/unPqaqqOojkAeYJj0sNplrrYnURli/TW9dofab8gjNtupJwv UZh9yz5UUJsyyBzia6LuxH5tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVJMx1fp5 q1E/oGt4J8ebWm/5YqswHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3 UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgVHZ4GynEzgnT4Uu93yTrLEU7dICsSqr5Ez7wsm4+Xk/jqp3fFj/Yj dxsxqxmKuh2zrT5d1wNu0KkVm5lW8rejsGYIntWLb4yGXtHd9oMYdnAlv4YBXrBj CIzzKE8fjPgyp82BLrrj6i3O2ejSAuIjyyeDvGBvjY6SbxpneQXVhtGf5qBaUteo bqcrUTlFe5KFScxBsCPF/MA7wxIzIPzfq6zBCQR4+ApnL0BQdPTKCZdB6qkzKfRt x0av9NJe50GnNWo2lsNO1X/zvKOOii977ZzBQTM6xtManwdZOCJrgxdPVghZYASJ Dyz2+NUmS3U3PMDXf02bM+6lgS51wNA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:39 2025 by rpki-client