$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: gpQ7x3PL6cdJC+zMPUnPblDsA3hSS70Kca5SAVJzNiQ= Subject key identifier: 63:8F:E0:29:DB:F8:0D:B9:D0:2B:89:A4:EB:00:85:DC:83:56:58:85 Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 011E Signing time: Sat 23 Aug 2025 04:59:35 +0000 Manifest this update: Sat 23 Aug 2025 04:59:34 +0000 Manifest next update: Sat 30 Aug 2025 04:59:34 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: RTm1EFwdsS2gUNTgWqFGLBvYEL6KAemZWfBOjH3sHds=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Aug 23 04:59:34 2025 GMT Not After : Aug 30 04:59:34 2025 GMT Subject: CN=68a94ab6-9626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:8e:80:73:ab:e3:77:15:2e:b4:c4:95:66: 12:a3:85:d8:c7:7a:79:1c:4d:0e:01:45:85:aa:ef: 8f:b6:69:27:d9:39:41:a7:45:bb:04:c3:be:00:b7: 0e:5e:fb:f6:76:9c:78:33:8b:de:c3:ca:17:f4:ed: 57:86:89:bc:a6:f7:48:62:d3:e7:dd:75:81:9d:19: 7e:19:7d:2a:75:7b:67:e8:b4:fe:47:29:7b:6b:04: 72:9b:a6:7e:b7:5e:d6:f9:4b:26:a1:c1:ef:5b:b7: 51:2a:92:ce:38:88:5c:3e:bb:9f:55:fc:ae:7e:5f: a6:1f:0d:5b:bc:38:cb:35:20:d4:24:63:ec:63:00: 12:9e:fe:83:4c:2b:11:5f:08:45:d7:5b:c6:b8:d8: 7d:56:38:6c:4c:d1:07:8a:4e:96:a3:cb:9f:fb:63: 08:6d:c8:c1:65:ef:4d:c8:62:e1:7a:39:3c:7a:67: 55:1e:09:e9:19:1c:63:31:93:42:41:92:42:13:74: 69:53:7d:c0:de:a2:98:91:24:7a:d7:83:5f:10:42: a3:20:2a:73:a1:4b:8a:d8:e0:0a:a7:23:d4:a8:97: 1b:23:ed:b7:81:83:89:4a:5a:fe:9e:e6:93:41:4b: b0:9b:af:f7:a7:00:e3:49:be:a2:47:7d:6f:1c:72: 97:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8F:E0:29:DB:F8:0D:B9:D0:2B:89:A4:EB:00:85:DC:83:56:58:85 X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:94:23:17:3e:f7:5c:94:4a:ad:ea:c8:5f:a2:42:2b:80:b8: af:45:08:9d:38:4f:be:6a:d5:f8:39:56:c4:4a:f3:51:8b:94: bb:b9:63:2a:59:20:a7:12:ee:4f:1f:c8:8d:63:88:98:12:58: 5f:00:17:93:ee:95:f9:78:0c:e2:f0:70:8a:45:7c:10:f6:b9: 26:34:19:2e:00:1b:7f:e9:1a:37:21:b1:dd:b8:79:fc:7a:f5: 9b:7f:7c:b5:30:ce:f9:08:35:1e:5a:43:63:f1:aa:22:da:5d: 7a:24:c9:28:67:59:55:b0:b0:38:a7:8a:70:00:44:25:1d:5f: d0:5a:bd:40:66:3c:f1:f6:a1:4e:04:41:ee:96:ec:1d:cb:3d: ef:e8:1e:d1:79:c5:06:a9:03:d1:ce:f3:7a:67:08:04:81:f4: 7e:61:d7:be:8d:3f:6f:81:4b:f2:28:49:6a:56:30:00:ee:4d: 04:fc:f5:74:8b:a6:de:61:4d:20:28:c9:75:d6:43:06:58:34: a1:65:2d:85:39:8b:f8:c4:4f:28:26:db:ed:41:81:ef:ac:15: 0a:38:81:5b:bb:49:2e:fe:ca:3f:50:79:11:ec:7c:50:76:d6: 80:93:ed:0c:61:61:0d:84:23:cc:b5:70:18:c0:53:58:b8:be: b7:76:1d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjUwODIzMDQ1OTM0WhcNMjUwODMwMDQ1OTM0WjAYMRYwFAYD VQQDEw02OGE5NGFiNi05NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut6OgHOr43cVLrTElWYSo4XYx3p5HE0OAUWFqu+Ptmkn2TlBp0W7BMO+ALcO Xvv2dpx4M4vew8oX9O1Xhom8pvdIYtPn3XWBnRl+GX0qdXtn6LT+Ryl7awRym6Z+ t17W+UsmocHvW7dRKpLOOIhcPrufVfyufl+mHw1bvDjLNSDUJGPsYwASnv6DTCsR XwhF11vGuNh9VjhsTNEHik6Wo8uf+2MIbcjBZe9NyGLhejk8emdVHgnpGRxjMZNC QZJCE3RpU33A3qKYkSR614NfEEKjICpzoUuK2OAKpyPUqJcbI+23gYOJSlr+nuaT QUuwm6/3pwDjSb6iR31vHHKXRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOP4Cnb +A250CuJpOsAhdyDVliFMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVlCMXPvdclEqt6shfokIrgLivRQidOE++atX4OVbESvNRi5S7uWMq WSCnEu5PH8iNY4iYElhfABeT7pX5eAzi8HCKRXwQ9rkmNBkuABt/6Ro3IbHduHn8 evWbf3y1MM75CDUeWkNj8aoi2l16JMkoZ1lVsLA4p4pwAEQlHV/QWr1AZjzx9qFO BEHuluwdyz3v6B7RecUGqQPRzvN6ZwgEgfR+Yde+jT9vgUvyKElqVjAA7k0E/PV0 i6beYU0gKMl11kMGWDShZS2FOYv4xE8oJtvtQYHvrBUKOIFbu0ku/so/UHkR7HxQ dtaAk+0MYWENhCPMtXAYwFNYuL63dh00 -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:42 2025 by rpki-client