$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: hBfr4KSMBpAkR+XOxfqAHimo6lqjSduvDpRx9pAPzB8= Subject key identifier: 4E:BA:8F:DA:94:81:2B:46:00:FC:D9:69:BD:0A:8E:26:01:89:5D:45 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 01AD Signing time: Sat 23 Aug 2025 03:25:43 +0000 Manifest this update: Sat 23 Aug 2025 03:25:42 +0000 Manifest next update: Sat 30 Aug 2025 03:25:42 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: aHyNPSJ+7WBpf9p4G9mgYM3ZSTlEij+lf326DV5zriE=) 2: 8A795CC866E711F0985D0751C4F9AE02.roa (hash: g1KuNxkFHwwpiwP+Lzl39JbGpSxNeMuhi4yzpFrKJZU=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Aug 23 03:25:42 2025 GMT Not After : Aug 30 03:25:42 2025 GMT Subject: CN=68a934b7-bf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:af:e4:2c:80:f5:71:57:3c:28:09:b7:d9:51: d2:69:0e:c4:6d:4d:e7:53:80:a2:3c:7d:6a:4a:d4: 93:43:da:78:f1:e9:a3:8b:6e:a4:06:4d:08:46:55: 4d:6e:f4:e1:fa:e0:f6:bc:cc:1d:ad:32:cd:f7:f8: a5:7d:7f:21:1b:38:5d:59:2e:88:de:06:17:17:98: 96:7b:7c:c1:65:f9:07:eb:59:4b:24:ab:ad:76:d5: ce:68:e5:bd:a7:b0:09:42:01:05:4c:a2:de:f5:8b: 9a:af:ac:60:5b:bd:5e:49:35:3d:93:91:86:5f:5b: c9:90:ba:f8:f8:9a:9d:92:1b:f3:fb:26:c7:25:54: 03:c4:0f:8c:15:46:dd:ba:4c:20:03:38:63:19:60: 80:f5:23:b2:7d:37:88:3c:f2:67:34:a8:90:ec:77: b8:ea:82:8b:1e:57:1d:53:dc:bc:97:05:04:60:4e: bd:5a:83:71:bb:e6:ec:0d:36:1e:eb:3a:d7:c2:c9: 9b:7f:cc:6d:f8:3e:cb:60:e4:21:b1:31:b9:8d:47: 7e:20:d4:32:98:7f:2b:de:d4:51:b9:1d:9d:3f:f4: bb:1d:32:53:4a:55:4d:45:f1:89:26:52:b8:a5:1a: b8:89:8c:05:3d:a2:b9:a9:04:af:22:c5:d8:d0:c6: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:8F:DA:94:81:2B:46:00:FC:D9:69:BD:0A:8E:26:01:89:5D:45 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:90:cb:dc:e5:2f:cc:ef:96:23:1d:ca:08:96:e0:9a:63:d3: ab:da:82:30:d7:39:df:c5:e4:3b:12:45:2d:83:b1:0d:a7:1e: 4c:45:50:9c:b0:47:8a:62:13:39:27:2d:c6:bf:66:f5:e0:03: 73:a9:df:20:21:92:c3:d0:57:aa:d6:4f:d9:a8:61:c2:84:08: 52:23:40:3c:a7:4c:5b:86:1f:6f:3f:f8:55:c5:a8:45:c9:c1: ed:1a:8e:df:3c:9d:d0:79:98:fc:cd:46:55:0c:a6:af:41:e2: 81:56:cc:a1:59:1b:91:9b:1e:ca:29:eb:25:ea:82:67:e5:c9: 9a:a0:0d:64:98:1d:2d:00:56:6b:a7:cd:63:08:02:ed:a8:ae: 75:31:df:8d:c3:64:11:ee:d1:8f:7f:8a:30:29:d9:0e:8a:57: ba:c9:f6:69:99:c6:52:a8:47:eb:72:60:40:4f:af:06:fa:ff: 71:7d:9f:d0:3b:05:c1:bf:7d:63:23:9b:f2:a6:42:fa:90:a0: 25:d1:68:d3:18:76:3b:23:b3:b9:a6:95:4e:80:09:10:f8:cb: 73:4e:f2:40:73:57:9d:46:18:64:7f:67:b4:cc:fc:e2:09:87: 82:3f:9d:da:ec:8f:c3:f6:d4:71:0e:56:2f:6b:6a:9b:15:ee: 66:99:82:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwODIzMDMyNTQyWhcNMjUwODMwMDMyNTQyWjAYMRYwFAYD VQQDEw02OGE5MzRiNy1iZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+q/kLID1cVc8KAm32VHSaQ7EbU3nU4CiPH1qStSTQ9p48emji26kBk0IRlVN bvTh+uD2vMwdrTLN9/ilfX8hGzhdWS6I3gYXF5iWe3zBZfkH61lLJKutdtXOaOW9 p7AJQgEFTKLe9Yuar6xgW71eSTU9k5GGX1vJkLr4+Jqdkhvz+ybHJVQDxA+MFUbd ukwgAzhjGWCA9SOyfTeIPPJnNKiQ7He46oKLHlcdU9y8lwUEYE69WoNxu+bsDTYe 6zrXwsmbf8xt+D7LYOQhsTG5jUd+INQymH8r3tRRuR2dP/S7HTJTSlVNRfGJJlK4 pRq4iYwFPaK5qQSvIsXY0MboVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE66j9qU gStGAPzZab0KjiYBiV1FMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAakMvc5S/M75YjHcoIluCaY9Or2oIw1znfxeQ7EkUtg7ENpx5MRVCc sEeKYhM5Jy3Gv2b14ANzqd8gIZLD0Feq1k/ZqGHChAhSI0A8p0xbhh9vP/hVxahF ycHtGo7fPJ3QeZj8zUZVDKavQeKBVsyhWRuRmx7KKesl6oJn5cmaoA1kmB0tAFZr p81jCALtqK51Md+Nw2QR7tGPf4owKdkOile6yfZpmcZSqEfrcmBAT68G+v9xfZ/Q OwXBv31jI5vypkL6kKAl0WjTGHY7I7O5ppVOgAkQ+MtzTvJAc1edRhhkf2e0zPzi CYeCP53a7I/D9tRxDlYva2qbFe5mmYIg -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:17 2025 by rpki-client