$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: y4MVH70r5KUVUmtHYjd+IzMUW4p3VXOTaS7syj9b9Pk= Subject key identifier: F5:D3:02:CB:C6:FB:62:B2:79:B0:D9:90:DB:5E:CA:1F:3F:F2:84:F7 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1980 Signing time: Fri 22 Aug 2025 17:42:11 +0000 Manifest this update: Fri 22 Aug 2025 17:42:11 +0000 Manifest next update: Fri 29 Aug 2025 17:42:11 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: 1D5TK/Pso+GogYJTRiAuLd8qMwegRDw3y3s2utB3Rfs=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Aug 22 17:42:11 2025 GMT Not After : Aug 29 17:42:11 2025 GMT Subject: CN=68a8abf3-118f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:a9:a3:78:22:27:98:5c:07:fb:1b:d7:10: 22:35:40:1b:b1:3f:5c:e3:a6:81:b0:97:72:cb:0f: b8:4a:aa:dd:59:b6:5d:23:f2:83:81:e8:f3:d5:3d: 8b:fc:f3:a8:b1:20:09:6f:c0:c3:47:d8:a8:9f:db: a1:2a:d2:63:f8:c9:3b:95:3a:3f:98:67:0f:b0:23: 55:2d:c8:14:c8:26:4c:46:85:66:2d:e0:bf:7c:84: 6d:ba:da:e8:a8:e3:ad:39:04:0a:eb:58:9d:9c:36: 2b:8d:f3:79:48:d4:a2:10:a1:0d:1c:ec:df:51:c6: ca:c3:3f:18:dc:83:49:93:49:9c:a4:eb:78:27:60: be:9e:24:55:cf:1a:df:a4:e3:af:ac:57:05:34:f9: 07:36:a9:6b:6a:13:99:79:b8:25:94:94:29:4c:f3: 1e:73:99:a0:e2:25:bd:4c:94:84:f6:a8:cf:f3:85: 46:74:73:5e:84:89:e8:11:a2:a3:f7:57:50:a1:19: 2a:92:3e:5f:a5:bc:1a:4d:ae:d6:99:62:54:1d:d6: 4d:c3:d4:a6:59:12:04:7e:1a:c9:15:d9:25:15:ee: 97:b1:f4:4c:a0:62:da:6e:7f:85:64:aa:32:85:d7: 93:83:86:4f:db:b1:02:c4:17:46:e4:c7:ce:aa:f3: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D3:02:CB:C6:FB:62:B2:79:B0:D9:90:DB:5E:CA:1F:3F:F2:84:F7 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:83:64:50:2e:ad:09:e3:0e:a1:a3:63:88:c9:ae:32:cd:f9: 91:89:7c:66:7a:dd:1e:ea:6b:e3:36:25:06:54:55:3b:d7:60: 51:c7:a7:e8:fa:cf:af:32:b4:81:c5:fc:60:65:8a:5f:d0:34: 07:a5:87:4d:b3:f7:16:31:a2:11:22:35:6e:af:d7:8c:67:62: d8:07:a3:f9:13:0f:b6:07:ac:78:05:bb:f3:ed:40:bb:15:ed: 74:6c:9f:59:37:37:27:d5:6e:9c:16:60:1f:1f:eb:39:fa:f6: 6d:8a:aa:d9:e6:22:d3:9e:91:9f:a5:7e:0d:16:5e:f0:1c:09: 78:68:89:48:90:21:ae:84:04:e4:45:a1:ab:1d:c6:3f:aa:ab: 1a:f0:fd:48:c3:bc:d2:89:e2:4b:bd:50:81:10:0a:5e:6f:06: 7b:d4:68:1f:11:7f:a4:75:31:91:9f:e8:ec:00:3f:90:64:4a: 1c:db:58:ef:b8:ad:1b:14:8b:42:84:ab:41:0a:1c:d9:2c:e4: 74:e2:3e:24:45:ec:58:81:08:9a:db:16:b3:af:f6:88:6d:fb: 2a:18:e3:1f:f8:6a:0c:11:96:29:ee:d3:0a:ab:00:99:62:1e: ac:98:92:1f:87:74:0a:a3:5e:20:d4:02:3b:84:f4:4a:b0:8d: 0e:ea:a9:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwODIyMTc0MjExWhcNMjUwODI5MTc0MjExWjAYMRYwFAYD VQQDEw02OGE4YWJmMy0xMThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWupo3giJ5hcB/sb1xAiNUAbsT9c46aBsJdyyw+4SqrdWbZdI/KDgejz1T2L /POosSAJb8DDR9ion9uhKtJj+Mk7lTo/mGcPsCNVLcgUyCZMRoVmLeC/fIRtutro qOOtOQQK61idnDYrjfN5SNSiEKENHOzfUcbKwz8Y3INJk0mcpOt4J2C+niRVzxrf pOOvrFcFNPkHNqlrahOZebgllJQpTPMec5mg4iW9TJSE9qjP84VGdHNehInoEaKj 91dQoRkqkj5fpbwaTa7WmWJUHdZNw9SmWRIEfhrJFdklFe6XsfRMoGLabn+FZKoy hdeTg4ZP27ECxBdG5MfOqvN49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXTAsvG +2KyebDZkNteyh8/8oT3MB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9g2RQLq0J4w6ho2OIya4yzfmRiXxmet0e6mvjNiUGVFU712BRx6fo +s+vMrSBxfxgZYpf0DQHpYdNs/cWMaIRIjVur9eMZ2LYB6P5Ew+2B6x4Bbvz7UC7 Fe10bJ9ZNzcn1W6cFmAfH+s5+vZtiqrZ5iLTnpGfpX4NFl7wHAl4aIlIkCGuhATk RaGrHcY/qqsa8P1Iw7zSieJLvVCBEApebwZ71GgfEX+kdTGRn+jsAD+QZEoc21jv uK0bFItChKtBChzZLOR04j4kRexYgQia2xazr/aIbfsqGOMf+GoMEZYp7tMKqwCZ Yh6smJIfh3QKo14g1AI7hPRKsI0O6qmk -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:42 2025 by rpki-client