$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: 2weDfOZWoVl0eWRMNOe6KhWmCLHt85Yw6nGduFpwdyU= Subject key identifier: FC:DC:32:FB:D4:91:7B:59:F1:6D:BD:5F:65:41:03:DB:FA:D1:D0:D7 Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 04:11:58 +0000 Manifest this update: Sat 23 Aug 2025 04:11:57 +0000 Manifest next update: Sat 30 Aug 2025 04:11:57 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: WoE/L9pGiWpc8WV0XclNHe43jx2gAbXXWxaUn72xE+0=) 2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=) 3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: Aug 23 04:11:57 2025 GMT Not After : Aug 30 04:11:57 2025 GMT Subject: CN=68a93f8e-8e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:9f:03:2f:38:46:5b:b5:77:10:d9:4b:68: f7:d9:cc:02:b8:f1:55:e2:59:2c:09:bd:d1:47:b6: 03:e9:13:4e:9c:ff:f1:78:98:81:dc:aa:41:4f:96: f4:64:15:6f:ee:f1:49:50:cb:93:32:fe:6e:bd:20: 64:a2:8f:c6:ed:dd:07:f9:4e:30:f5:60:63:e9:05: b5:f1:51:16:23:fb:23:7c:dc:64:9a:44:19:c0:d3: 09:c2:0b:89:fe:31:f2:0c:ce:58:04:ea:0c:0c:e6: ac:0c:10:96:69:e7:c4:a8:53:84:b3:23:73:42:3b: 10:49:23:de:af:b2:33:37:ec:73:95:ca:8b:f4:b7: a3:13:7d:08:7c:c0:4f:ba:a2:3c:98:12:49:8f:94: 35:30:8e:5c:db:4a:1e:09:ab:67:d6:0f:29:53:d3: c4:5c:40:7b:a2:3f:78:90:98:61:be:c1:94:d4:5e: 01:a5:c0:7d:63:b7:72:c8:0a:f2:f4:df:35:93:2a: 07:2a:d8:59:4c:10:e9:38:75:ed:14:9d:31:e6:d3: 62:7b:d3:fa:1b:12:6c:8a:66:1c:a0:ce:a5:ac:b1: 02:05:1d:50:ee:bf:2a:d9:bc:fd:8d:fa:57:37:15: 5f:54:f6:c7:92:d8:af:92:b4:b2:e1:9a:62:3d:26: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:32:FB:D4:91:7B:59:F1:6D:BD:5F:65:41:03:DB:FA:D1:D0:D7 X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:50:40:5e:9f:f6:7d:f8:19:15:cd:46:52:1a:2c:d1:9e:b6: a0:71:a6:fc:73:7c:91:f6:d0:a1:3e:70:1c:d7:b8:ca:8e:a7: f7:fa:f3:ac:96:d1:3c:6e:c4:58:3e:3f:72:db:d1:75:5d:fc: c7:b7:58:e6:89:03:d0:db:52:7b:a7:1c:70:b3:eb:2e:99:1f: 64:bc:18:dd:3c:33:b3:8c:e6:e9:35:7d:d1:be:fd:8d:9f:1c: 44:c4:2b:4f:e1:06:f3:e7:86:99:35:c9:65:a3:e2:08:74:3d: f5:b5:ed:78:38:ba:09:36:ae:d0:df:d6:a9:88:b0:f5:31:19: 5c:43:9c:a8:76:2a:62:79:e0:8e:e7:09:68:a4:00:0d:fc:fd: d4:a3:23:7d:11:10:47:75:5f:3a:4f:65:0d:a6:cf:5d:7a:56: c8:1c:4d:b4:b4:68:9c:d2:95:1d:7e:21:67:c1:16:ee:60:e4: 38:12:8e:77:1e:1d:dd:69:24:72:41:bc:e1:33:3b:51:29:63: fb:5d:d3:ab:26:41:a3:0c:27:ab:17:eb:2e:df:68:8b:96:4f: fc:2f:b1:c0:46:fc:f1:10:1b:c4:34:fa:63:a0:48:b0:2b:7e: 30:d2:a6:81:ef:39:57:f8:95:50:19:56:46:98:8f:05:2d:e7: 27:e5:3c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUwODIzMDQxMTU3WhcNMjUwODMwMDQxMTU3WjAYMRYwFAYD VQQDEw02OGE5M2Y4ZS04ZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4OfAy84Rlu1dxDZS2j32cwCuPFV4lksCb3RR7YD6RNOnP/xeJiB3KpBT5b0 ZBVv7vFJUMuTMv5uvSBkoo/G7d0H+U4w9WBj6QW18VEWI/sjfNxkmkQZwNMJwguJ /jHyDM5YBOoMDOasDBCWaefEqFOEsyNzQjsQSSPer7IzN+xzlcqL9LejE30IfMBP uqI8mBJJj5Q1MI5c20oeCatn1g8pU9PEXEB7oj94kJhhvsGU1F4BpcB9Y7dyyAry 9N81kyoHKthZTBDpOHXtFJ0x5tNie9P6GxJsimYcoM6lrLECBR1Q7r8q2bz9jfpX NxVfVPbHktivkrSy4ZpiPSb7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzcMvvU kXtZ8W29X2VBA9v60dDXMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUEBen/Z9+BkVzUZSGizRnragcab8c3yR9tChPnAc17jKjqf3+vOs ltE8bsRYPj9y29F1XfzHt1jmiQPQ21J7pxxws+sumR9kvBjdPDOzjObpNX3Rvv2N nxxExCtP4Qbz54aZNcllo+IIdD31te14OLoJNq7Q39apiLD1MRlcQ5yodipieeCO 5wlopAAN/P3UoyN9ERBHdV86T2UNps9delbIHE20tGic0pUdfiFnwRbuYOQ4Eo53 Hh3daSRyQbzhMztRKWP7XdOrJkGjDCerF+su32iLlk/8L7HARvzxEBvENPpjoEiw K34w0qaB7zlX+JVQGVZGmI8FLecn5Tyb -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:32 2025 by rpki-client