$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: LItBUCMwJzu9bg2+qtWXY/u+gwzxYx6HVwl5BFrpfsQ= Subject key identifier: 1E:C0:11:D7:16:A8:48:E2:18:B4:65:10:BA:51:8E:20:45:E5:37:D3 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 3532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 34F2 Signing time: Fri 22 Aug 2025 14:16:51 +0000 Manifest this update: Fri 22 Aug 2025 14:16:51 +0000 Manifest next update: Fri 29 Aug 2025 14:16:51 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: 8GEWgaqLcoZ7GTdQ3j3IAXCs0EHY4PV7ZhmXkkCf9w0=) 2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=) 4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Aug 22 14:16:51 2025 GMT Not After : Aug 29 14:16:51 2025 GMT Subject: CN=68a87bd3-fafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2d:c4:01:6a:20:0c:41:d9:7f:09:67:93:7b: 2e:27:86:01:ec:4a:55:fa:d3:f4:9a:17:d1:36:b9: 49:bc:73:eb:5a:e4:bc:95:0a:04:30:30:42:7d:70: da:1d:f4:a4:36:e5:b9:bf:92:bb:77:ce:44:4c:96: 0d:d0:42:3a:3e:e0:03:a4:55:76:4c:30:d8:49:ed: 62:6f:e0:83:f6:81:aa:0d:3a:94:d7:0d:3d:d0:91: b0:cb:46:3a:31:a6:12:a2:26:b2:02:3c:05:25:6a: 60:f4:aa:08:62:d0:68:1b:be:9d:39:b2:36:34:27: 78:ad:a1:5f:5e:06:af:00:d8:46:e2:74:01:60:92: f2:13:f2:6d:2b:b2:18:05:43:05:00:4d:c4:5d:1d: f0:d1:2e:d6:4b:2d:ba:d2:3b:bc:e3:5e:24:8f:74: 68:18:10:f5:6d:70:db:5b:78:c7:23:48:97:9e:58: f4:ef:7c:ec:93:3e:1a:29:2b:2c:bc:05:fb:5a:c5: 16:9c:78:5d:65:ff:30:01:61:1c:d3:19:5d:12:8e: d1:cf:c1:df:e2:51:63:a8:e5:e2:bc:ba:2f:b0:c6: 7e:b7:04:92:1c:50:83:e5:56:fc:16:ad:e9:47:23: 7b:28:cc:97:27:0a:44:73:62:d5:57:83:52:57:32: bc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C0:11:D7:16:A8:48:E2:18:B4:65:10:BA:51:8E:20:45:E5:37:D3 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:38:5f:48:c2:4b:69:3d:d2:d8:ed:4a:7f:71:92:93:3a:8d: b2:af:41:62:c1:12:5f:d3:e5:8f:8a:26:03:4d:23:9b:22:c3: f2:3f:e9:b0:66:59:59:18:9a:d8:86:9b:42:88:07:8f:b3:d8: a5:90:d7:16:41:c0:17:22:48:b2:dc:e8:da:c0:9e:11:ce:ae: 2a:23:a1:ae:32:5c:d3:08:d0:11:ae:79:69:70:92:2b:be:9f: 3e:0d:c1:95:58:82:01:09:42:58:ed:24:11:95:51:34:c8:66: 2e:2c:15:83:85:f4:d5:86:18:29:05:65:26:73:4a:31:30:d7: 20:44:14:42:9c:60:a6:80:a3:e7:fe:70:bc:fa:f9:49:90:f8: 59:f5:c6:92:41:56:12:de:b4:ea:9e:79:80:bd:12:75:14:b6: 85:8d:0d:d3:64:59:17:42:a0:30:d0:5f:92:42:b6:7f:de:5e: e6:f0:f3:af:b4:7b:c8:54:e3:8c:6d:23:85:71:08:d9:30:30: 7e:e5:53:a5:ec:3e:28:97:4e:71:62:c5:30:ed:26:29:ef:b9: 8b:0d:bf:2d:31:ce:6f:98:7b:bd:d9:dc:b8:99:25:a7:43:5b: b5:82:28:aa:eb:05:fd:16:8f:38:31:65:b8:08:c3:ff:63:25: 03:25:9a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjUwODIyMTQxNjUxWhcNMjUwODI5MTQxNjUxWjAYMRYwFAYD VQQDEw02OGE4N2JkMy1mYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+C3EAWogDEHZfwlnk3suJ4YB7EpV+tP0mhfRNrlJvHPrWuS8lQoEMDBCfXDa HfSkNuW5v5K7d85ETJYN0EI6PuADpFV2TDDYSe1ib+CD9oGqDTqU1w090JGwy0Y6 MaYSoiayAjwFJWpg9KoIYtBoG76dObI2NCd4raFfXgavANhG4nQBYJLyE/JtK7IY BUMFAE3EXR3w0S7WSy260ju8414kj3RoGBD1bXDbW3jHI0iXnlj073zskz4aKSss vAX7WsUWnHhdZf8wAWEc0xldEo7Rz8Hf4lFjqOXivLovsMZ+twSSHFCD5Vb8Fq3p RyN7KMyXJwpEc2LVV4NSVzK82wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7AEdcW qEjiGLRlELpRjiBF5TfTMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaOF9IwktpPdLY7Up/cZKTOo2yr0FiwRJf0+WPiiYDTSObIsPyP+mw ZllZGJrYhptCiAePs9ilkNcWQcAXIkiy3OjawJ4Rzq4qI6GuMlzTCNARrnlpcJIr vp8+DcGVWIIBCUJY7SQRlVE0yGYuLBWDhfTVhhgpBWUmc0oxMNcgRBRCnGCmgKPn /nC8+vlJkPhZ9caSQVYS3rTqnnmAvRJ1FLaFjQ3TZFkXQqAw0F+SQrZ/3l7m8POv tHvIVOOMbSOFcQjZMDB+5VOl7D4ol05xYsUw7SYp77mLDb8tMc5vmHu92dy4mSWn Q1u1giiq6wX9Fo84MWW4CMP/YyUDJZp4 -----END CERTIFICATE-----Generated at Sun Aug 24 06:44:08 2025 by rpki-client