$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: E4Q/XWe+RZeENhsgWVg9D9R80nBAPw+FvaLZLbS756s= Subject key identifier: 1A:20:45:71:EA:24:ED:98:03:24:00:DB:28:47:05:D2:32:C6:E3:4B Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 0428 Signing time: Sat 23 Aug 2025 00:38:46 +0000 Manifest this update: Sat 23 Aug 2025 00:38:45 +0000 Manifest next update: Sat 30 Aug 2025 00:38:45 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: 3dZ87TZHrqRymB10isIGUf7LtqBtYY1Txj77naAkkr8=) 2: 81E1EC606D3B11F0BDAB3A37C4F9AE02.roa (hash: IklsNcZMU61keTG/RlPGDM9ghDVa6JBLN2a2SdX6u1A=) 3: 9132838C6D3B11F08FAF5337C4F9AE02.roa (hash: A0B5Fh827t09j9A9jIoA5e7FS/oK5UGgKqUFdUr5wZ0=) 4: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Aug 23 00:38:45 2025 GMT Not After : Aug 30 00:38:45 2025 GMT Subject: CN=68a90d95-23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:d3:09:e1:6b:fc:66:68:f4:91:6b:38:9b: e1:f7:44:a5:4a:8a:24:e6:3b:cd:41:aa:65:ce:67: dc:2b:76:2d:e4:78:79:55:8c:ae:3b:40:07:2c:92: 39:41:32:9b:da:2d:92:5e:f1:4e:0b:c7:f1:4d:c8: 98:ff:db:33:48:9c:ff:98:62:f0:f9:8f:d0:72:63: 1b:3f:8f:79:69:e2:98:f6:f4:a1:f9:9a:91:ea:6b: f3:da:9e:3a:c0:f4:86:59:e4:b2:2d:f5:b1:81:86: a1:98:32:b3:76:6e:8f:55:ca:6f:1b:aa:73:bd:6e: 5c:52:36:fa:ac:1a:db:75:40:c3:88:cd:3b:80:62: 39:06:9a:cb:6e:81:20:5a:0c:28:2d:e9:7b:60:9a: 6c:4c:3c:89:82:e9:32:b3:3b:fd:42:23:b3:34:dd: 05:c8:6f:82:38:59:c5:db:c3:01:4f:65:70:6b:d3: 5a:9f:dc:a4:25:a1:dc:08:f9:21:14:cf:1e:bb:78: b0:66:f1:b5:78:67:ca:2b:1f:b2:c9:0d:30:6a:f4: c1:f5:9d:98:20:e1:53:05:58:f1:6f:e4:68:9e:a4: 18:62:4b:4f:7b:3c:9a:84:b5:1e:ce:c5:aa:7c:0a: 47:2c:2a:bd:72:1a:1c:d3:f3:b5:75:d4:3d:2a:8f: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:20:45:71:EA:24:ED:98:03:24:00:DB:28:47:05:D2:32:C6:E3:4B X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2e:b2:88:d7:27:ef:a1:23:4d:c4:29:1e:6c:97:93:ba:c2: 52:25:49:8a:85:c2:5d:b8:ad:d4:5f:83:b4:bb:c6:69:42:88: 39:b3:a2:f7:27:8a:0b:83:28:ce:39:de:9f:47:fe:99:e5:32: 4a:03:d6:1c:ff:92:a9:45:0e:8e:46:6d:2d:70:8a:ed:c1:10: e2:0e:80:c2:3b:3a:75:3e:a1:2a:89:2c:bc:0f:e4:59:8c:ce: 2b:21:8a:9b:09:da:ca:a0:24:85:18:26:c3:d8:58:8a:e9:f7: 16:f1:95:45:9e:f7:94:29:b3:be:c5:a8:4e:40:19:68:f5:56: 34:01:31:10:b2:f9:08:12:2f:01:27:4f:95:85:33:04:97:f3: 22:55:46:f1:f3:2a:95:2a:9e:b4:31:8d:74:81:32:95:ec:34: 47:da:53:bc:12:a3:3e:6a:37:f5:d9:c8:41:69:64:93:2d:82: f2:be:1e:a7:1f:41:92:e2:30:dc:69:17:2e:93:c3:30:fe:90: 9e:fc:d6:0b:07:c6:12:00:e1:50:34:e0:8e:9f:86:ba:67:62: b8:b9:75:bb:6f:5e:ad:20:f4:48:71:71:89:c9:7f:d4:d0:36: 7b:4f:17:7d:9d:a8:47:d8:5e:2e:ca:63:43:ad:75:05:04:42: 25:ab:3b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwODIzMDAzODQ1WhcNMjUwODMwMDAzODQ1WjAYMRYwFAYD VQQDEw02OGE5MGQ5NS0yM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubzTCeFr/GZo9JFrOJvh90SlSook5jvNQaplzmfcK3Yt5Hh5VYyuO0AHLJI5 QTKb2i2SXvFOC8fxTciY/9szSJz/mGLw+Y/QcmMbP495aeKY9vSh+ZqR6mvz2p46 wPSGWeSyLfWxgYahmDKzdm6PVcpvG6pzvW5cUjb6rBrbdUDDiM07gGI5BprLboEg WgwoLel7YJpsTDyJgukyszv9QiOzNN0FyG+COFnF28MBT2Vwa9Nan9ykJaHcCPkh FM8eu3iwZvG1eGfKKx+yyQ0wavTB9Z2YIOFTBVjxb+RonqQYYktPezyahLUezsWq fApHLCq9choc0/O1ddQ9Ko8RhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBogRXHq JO2YAyQA2yhHBdIyxuNLMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLLrKI1yfvoSNNxCkebJeTusJSJUmKhcJduK3UX4O0u8ZpQog5s6L3 J4oLgyjOOd6fR/6Z5TJKA9Yc/5KpRQ6ORm0tcIrtwRDiDoDCOzp1PqEqiSy8D+RZ jM4rIYqbCdrKoCSFGCbD2FiK6fcW8ZVFnveUKbO+xahOQBlo9VY0ATEQsvkIEi8B J0+VhTMEl/MiVUbx8yqVKp60MY10gTKV7DRH2lO8EqM+ajf12chBaWSTLYLyvh6n H0GS4jDcaRcuk8Mw/pCe/NYLB8YSAOFQNOCOn4a6Z2K4uXW7b16tIPRIcXGJyX/U 0DZ7Txd9nahH2F4uymNDrXUFBEIlqzsL -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:56 2025 by rpki-client