$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: sY8VfWe4pXGLQoOlLbv+VxeFlTbgSbpwUbBySXCciQA= Subject key identifier: 3C:6F:EB:DB:00:E8:A8:F4:57:02:1C:F4:BE:75:E3:51:89:E2:30:39 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 34B6 Signing time: Fri 22 Aug 2025 15:08:50 +0000 Manifest this update: Fri 22 Aug 2025 15:08:50 +0000 Manifest next update: Fri 29 Aug 2025 15:08:50 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: uqV54F+bOiWVHeKnmLL8MynfiBSFe5eQx7auIiG7UWA=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Aug 22 15:08:50 2025 GMT Not After : Aug 29 15:08:50 2025 GMT Subject: CN=68a88802-05f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d0:4f:d5:d3:d4:3b:b7:55:eb:de:8d:1f:89: 88:9b:a5:c1:43:2b:d2:1d:17:99:6e:22:bc:6d:01: 77:13:53:df:2e:9e:dd:d2:9e:c8:ba:2f:b6:c7:2b: b0:52:c0:34:b0:ee:5f:87:10:72:81:61:b5:63:23: d1:c4:fb:dc:7b:65:f2:de:b3:34:13:46:87:e4:88: e7:f5:f5:89:35:b6:0d:29:57:8a:f7:06:0a:f5:07: a2:70:e3:e6:8d:87:7d:05:9e:d5:3b:f8:e2:5c:59: 61:9d:85:7b:60:a5:49:b6:d1:25:ac:89:8b:2c:3e: c9:b0:ea:9a:3b:ef:6d:6d:fe:35:d0:62:49:1b:8b: c9:6f:11:ce:c3:88:f6:6b:43:e6:2c:67:1c:d8:67: fb:6c:ed:af:cd:10:b5:e5:7b:7d:3f:cd:16:21:d6: a2:91:4e:70:25:b0:10:e7:cb:38:3c:67:02:b4:da: db:d0:bb:f6:24:7d:f9:30:d2:2e:32:67:49:fc:89: 7a:7f:3f:50:42:2f:29:ce:7b:01:88:51:98:cf:93: 90:26:af:9f:35:73:61:5d:6b:0f:ba:ea:b8:3f:b8: 43:59:b3:65:16:14:84:e5:1c:1a:dc:78:8b:6f:a0: 93:fc:22:b7:bf:d2:94:a2:3c:1c:46:f6:0c:4e:01: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:EB:DB:00:E8:A8:F4:57:02:1C:F4:BE:75:E3:51:89:E2:30:39 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:7d:34:f8:ad:d0:56:0e:3f:66:a7:9c:41:3a:2d:ab:c7: c5:de:fa:83:4a:5d:45:4d:b2:eb:58:e0:74:91:9b:70:fe:e9: 7d:cb:ab:43:32:d6:73:03:39:4d:bf:eb:f0:21:00:e4:b6:8e: b0:88:a0:56:e6:2a:ca:45:4f:c5:59:81:aa:73:07:56:71:b4: 2a:75:49:fe:62:56:e2:71:2f:95:6a:26:4d:1e:f7:fb:67:59: 84:a2:a1:7e:52:56:b0:a7:1a:fd:df:9f:91:51:30:33:5f:52: 83:f5:9c:7e:f4:bb:0a:5c:76:30:a8:80:44:e4:bc:47:4e:d3: c1:1d:50:19:1c:34:45:13:cd:db:8a:0b:87:62:4d:b8:39:37: 16:ac:35:8f:e4:3d:bf:e5:60:4e:3f:cd:0b:6f:22:f9:96:c8: e6:67:24:8a:fb:90:c2:a0:62:b8:21:68:db:da:15:fe:88:3c: 19:71:75:46:ad:6f:aa:db:5d:b9:8b:49:00:89:18:ce:73:38: 0e:fd:68:92:be:37:70:62:9c:66:90:3d:2c:0f:ae:fd:0b:50: d4:e6:b2:ff:ac:0d:72:ec:d4:d8:13:15:cd:ea:17:42:b2:9f: 64:50:3c:e2:78:3f:16:9b:87:2d:7a:36:ae:35:77:8f:8d:9f: 7b:96:ab:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUwODIyMTUwODUwWhcNMjUwODI5MTUwODUwWjAYMRYwFAYD VQQDEw02OGE4ODgwMi0wNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tBP1dPUO7dV696NH4mIm6XBQyvSHReZbiK8bQF3E1PfLp7d0p7Iui+2xyuw UsA0sO5fhxBygWG1YyPRxPvce2Xy3rM0E0aH5Ijn9fWJNbYNKVeK9wYK9QeicOPm jYd9BZ7VO/jiXFlhnYV7YKVJttElrImLLD7JsOqaO+9tbf410GJJG4vJbxHOw4j2 a0PmLGcc2Gf7bO2vzRC15Xt9P80WIdaikU5wJbAQ58s4PGcCtNrb0Lv2JH35MNIu MmdJ/Il6fz9QQi8pznsBiFGYz5OQJq+fNXNhXWsPuuq4P7hDWbNlFhSE5Rwa3HiL b6CT/CK3v9KUojwcRvYMTgEJaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxv69sA 6Kj0VwIc9L5141GJ4jA5MB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbPn00+K3QVg4/ZqecQTotq8fF3vqDSl1FTbLrWOB0kZtw/ul9y6tD MtZzAzlNv+vwIQDkto6wiKBW5irKRU/FWYGqcwdWcbQqdUn+YlbicS+VaiZNHvf7 Z1mEoqF+Ulawpxr935+RUTAzX1KD9Zx+9LsKXHYwqIBE5LxHTtPBHVAZHDRFE83b iguHYk24OTcWrDWP5D2/5WBOP80LbyL5lsjmZySK+5DCoGK4IWjb2hX+iDwZcXVG rW+q2125i0kAiRjOczgO/WiSvjdwYpxmkD0sD679C1DU5rL/rA1y7NTYExXN6hdC sp9kUDzieD8Wm4ctejauNXePjZ97lquk -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:44 2025 by rpki-client