$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: CBHxEmN3iMqcFZt07zG8UKIFfMqruUX/5uqkHl/Qmgo= Subject key identifier: F8:04:8A:66:52:E2:19:16:62:FD:0B:C4:8B:DB:C9:54:27:4B:C3:9D Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 060D Signing time: Fri 22 Aug 2025 23:01:44 +0000 Manifest this update: Fri 22 Aug 2025 23:01:43 +0000 Manifest next update: Fri 29 Aug 2025 23:01:43 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: nn7fZcbcdkJjT6KaKNr/IHkoMJK8hozg+KL8ZIKtoVQ=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Aug 22 23:01:43 2025 GMT Not After : Aug 29 23:01:43 2025 GMT Subject: CN=68a8f6d8-077e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:95:47:d7:a6:71:40:6b:7b:9e:2d:39:45:25: 41:07:4c:07:c9:95:70:d5:f2:82:ee:18:24:a1:92: 5a:36:02:e0:ff:f2:37:dd:35:3b:b7:56:1e:44:3e: 1a:f9:52:9f:a9:1c:a0:b1:ed:20:1b:46:aa:68:22: 4a:08:8c:12:33:39:9b:ec:ba:24:2c:ad:34:11:27: 13:bb:a6:e2:ac:08:dd:da:76:be:85:37:10:4e:b2: b8:93:34:d5:53:37:48:5a:a9:96:c7:81:5c:07:10: 6f:8c:80:12:d5:76:49:5a:b1:d4:06:70:60:85:0f: 9b:1b:6d:c9:0d:f1:c3:d1:27:b3:79:31:38:4f:0f: 6d:66:a6:ff:4a:ae:32:24:c3:01:71:4e:ac:a0:a4: 4d:26:c5:e5:0a:c0:f4:72:5f:1f:e3:1c:d5:8d:a4: 3d:33:e7:fa:d6:20:d1:8c:3c:22:9c:5e:ea:9c:ef: cb:12:ce:d1:45:6c:5d:ab:2e:12:4b:fc:12:a5:af: cf:73:cc:fd:fd:c9:a9:eb:18:af:56:eb:a2:12:65: d7:44:d7:b8:14:d2:f3:a2:f0:ee:41:d9:c7:89:3f: 73:9a:2c:7b:63:fa:1a:63:3a:cc:a2:3e:e3:ea:8c: 41:65:be:b4:3f:b4:bd:49:4d:ab:f5:91:a8:c8:2a: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:04:8A:66:52:E2:19:16:62:FD:0B:C4:8B:DB:C9:54:27:4B:C3:9D X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:86:c5:d4:bb:51:63:80:9a:f0:f3:dd:43:8c:18:3c:90:97: fd:1d:8a:54:8e:ab:20:20:21:dc:67:49:d8:11:f0:58:5e:8f: 2b:3b:10:01:1b:64:c8:b9:e3:bf:39:8f:7e:28:84:fb:12:90: b3:bd:a3:fd:f3:1d:9f:c8:0e:b8:9b:ce:1e:b7:f3:bd:62:8e: 10:a3:16:24:c2:d2:53:a3:83:3d:b8:c1:7b:36:71:15:ba:00: 66:06:df:e6:b4:0d:7f:86:27:24:8b:39:b5:66:8e:2a:19:68: a1:39:a7:b8:49:ee:5b:76:c5:b6:30:fe:84:89:9d:ce:ea:64: f8:e4:45:0d:17:74:17:aa:de:26:c1:cb:7e:fb:7a:94:fa:3a: c9:89:6a:e1:8b:14:08:83:b4:37:7c:6f:d5:34:40:ef:02:c7: 26:98:07:fa:7c:3c:62:83:d8:6b:35:b3:90:e1:ff:bf:90:41: 0e:15:31:4d:31:70:b1:5f:37:15:57:19:6e:16:b1:98:24:20: 90:76:cd:11:5d:aa:74:ad:c2:27:76:bb:38:8d:e6:2c:ae:b2: dc:0d:61:2f:aa:03:10:bb:59:b5:30:e7:c6:08:6c:95:48:d4: a4:0d:32:3e:e2:1e:56:0a:fb:19:ec:77:0a:ab:38:2e:5d:05: 1f:b8:44:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwODIyMjMwMTQzWhcNMjUwODI5MjMwMTQzWjAYMRYwFAYD VQQDEw02OGE4ZjZkOC0wNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85VH16ZxQGt7ni05RSVBB0wHyZVw1fKC7hgkoZJaNgLg//I33TU7t1YeRD4a +VKfqRygse0gG0aqaCJKCIwSMzmb7LokLK00EScTu6birAjd2na+hTcQTrK4kzTV UzdIWqmWx4FcBxBvjIAS1XZJWrHUBnBghQ+bG23JDfHD0SezeTE4Tw9tZqb/Sq4y JMMBcU6soKRNJsXlCsD0cl8f4xzVjaQ9M+f61iDRjDwinF7qnO/LEs7RRWxdqy4S S/wSpa/Pc8z9/cmp6xivVuuiEmXXRNe4FNLzovDuQdnHiT9zmix7Y/oaYzrMoj7j 6oxBZb60P7S9SU2r9ZGoyCpMHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgEimZS 4hkWYv0LxIvbyVQnS8OdMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWhsXUu1FjgJrw891DjBg8kJf9HYpUjqsgICHcZ0nYEfBYXo8rOxAB G2TIueO/OY9+KIT7EpCzvaP98x2fyA64m84et/O9Yo4QoxYkwtJTo4M9uMF7NnEV ugBmBt/mtA1/hickizm1Zo4qGWihOae4Se5bdsW2MP6EiZ3O6mT45EUNF3QXqt4m wct++3qU+jrJiWrhixQIg7Q3fG/VNEDvAscmmAf6fDxig9hrNbOQ4f+/kEEOFTFN MXCxXzcVVxluFrGYJCCQds0RXap0rcIndrs4jeYsrrLcDWEvqgMQu1m1MOfGCGyV SNSkDTI+4h5WCvsZ7HcKqzguXQUfuERI -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:23 2025 by rpki-client