$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: PVc2sX0aeNZbHaMBqOnhWnm+sCXctIdlA1o6JI4RD0w= Subject key identifier: 4B:8A:7C:DD:F8:56:94:C2:33:B4:1C:27:6E:F1:B6:FB:AF:1D:88:28 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0F5A Signing time: Fri 22 Aug 2025 21:26:48 +0000 Manifest this update: Fri 22 Aug 2025 21:26:47 +0000 Manifest next update: Fri 29 Aug 2025 21:26:47 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: tKNfB7VVLM4usBN41bc8atjC/byGZ6XYIakmk0HJUYE=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Aug 22 21:26:47 2025 GMT Not After : Aug 29 21:26:47 2025 GMT Subject: CN=68a8e098-bfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:ad:75:cd:2c:f3:1c:61:f3:7c:ef:1b:69: 31:1f:12:8a:b4:e8:88:11:0d:df:28:7f:71:cf:fb: 09:8c:2f:a5:18:63:76:c2:10:f6:71:54:08:94:68: e4:23:89:f9:12:51:7f:b9:f5:ba:77:a9:51:f0:0e: 9f:20:0c:1f:18:80:ab:fc:ba:93:ad:91:7b:57:74: e4:b3:63:a4:62:1c:46:0a:59:c1:6e:f5:3e:1d:4f: b8:6c:4b:8d:f9:06:3d:6c:b7:c1:6d:bb:79:a4:b8: ee:9d:16:2d:f9:5a:07:50:39:04:cb:9c:5a:af:7d: be:ca:8e:d7:de:4e:b0:4c:4d:ef:01:a0:9d:cd:78: d1:2f:68:9e:03:b5:97:64:8d:89:5c:f1:8d:9f:87: 06:68:49:af:7d:c7:d3:dc:c0:4a:9c:4b:7d:da:11: de:ef:92:4f:87:36:c8:d8:16:c7:1e:fe:17:61:c3: 94:1e:a2:96:c9:57:98:c1:8d:43:3e:a6:ee:91:9d: 0f:8d:e0:2e:1b:d3:83:45:89:18:91:b1:2d:1d:ee: e9:4d:e6:71:d0:75:3b:ee:13:ba:5c:8e:0a:79:0c: 2f:3a:36:7a:ab:7e:f3:c5:65:60:22:e4:eb:97:ec: 5e:e6:f5:a1:00:0a:bf:d7:88:ee:f1:7b:97:3b:cb: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8A:7C:DD:F8:56:94:C2:33:B4:1C:27:6E:F1:B6:FB:AF:1D:88:28 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:50:a2:6e:ab:7f:c5:4d:38:b1:06:29:40:f9:4c:96:23:1a: 12:46:56:80:00:54:74:b6:b4:8b:87:02:9f:0f:7c:af:fe:09: e2:50:65:40:f4:4b:9c:e2:6a:5d:67:f5:37:1e:f5:67:61:16: b5:34:36:62:ac:a5:d8:fc:ad:7f:d1:5c:00:a6:0b:77:5e:87: 7f:0a:be:76:f4:31:b9:2f:80:d9:53:b4:3e:5c:7c:0b:1f:26: 80:ad:93:d5:d6:8d:b4:9e:75:95:0a:ce:43:49:15:b9:cb:60: 10:ad:db:8b:5b:7b:d3:34:a2:26:f0:23:9b:63:bd:5c:13:35: 4e:b9:a0:67:3d:5b:b5:2a:74:7d:67:94:e0:52:20:2f:7f:8f: 87:7b:87:62:fb:e5:be:37:ef:ec:85:33:40:04:2e:17:41:fe: 1b:93:60:1a:10:b8:6b:9e:ae:71:27:10:eb:46:2b:02:88:93: 07:a0:7b:60:ab:c8:c5:39:48:99:6b:a2:08:4e:0b:aa:ea:41: 15:1c:81:f8:98:82:d0:0a:4e:0c:ab:c3:97:3f:ee:f7:53:dc: cb:15:65:a5:db:d6:dc:62:7e:17:9e:60:6e:5f:46:de:03:ba: c7:f4:dd:7b:85:2d:b4:69:89:cc:0b:b7:5a:de:42:a9:64:7c: 87:30:75:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUwODIyMjEyNjQ3WhcNMjUwODI5MjEyNjQ3WjAYMRYwFAYD VQQDEw02OGE4ZTA5OC1iZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dCtdc0s8xxh83zvG2kxHxKKtOiIEQ3fKH9xz/sJjC+lGGN2whD2cVQIlGjk I4n5ElF/ufW6d6lR8A6fIAwfGICr/LqTrZF7V3Tks2OkYhxGClnBbvU+HU+4bEuN +QY9bLfBbbt5pLjunRYt+VoHUDkEy5xar32+yo7X3k6wTE3vAaCdzXjRL2ieA7WX ZI2JXPGNn4cGaEmvfcfT3MBKnEt92hHe75JPhzbI2BbHHv4XYcOUHqKWyVeYwY1D PqbukZ0PjeAuG9ODRYkYkbEtHe7pTeZx0HU77hO6XI4KeQwvOjZ6q37zxWVgIuTr l+xe5vWhAAq/14ju8XuXO8ti+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuKfN34 VpTCM7QcJ27xtvuvHYgoMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXUKJuq3/FTTixBilA+UyWIxoSRlaAAFR0trSLhwKfD3yv/gniUGVA 9Euc4mpdZ/U3HvVnYRa1NDZirKXY/K1/0VwApgt3Xod/Cr529DG5L4DZU7Q+XHwL HyaArZPV1o20nnWVCs5DSRW5y2AQrduLW3vTNKIm8CObY71cEzVOuaBnPVu1KnR9 Z5TgUiAvf4+He4di++W+N+/shTNABC4XQf4bk2AaELhrnq5xJxDrRisCiJMHoHtg q8jFOUiZa6IITguq6kEVHIH4mILQCk4Mq8OXP+73U9zLFWWl29bcYn4XnmBuX0be A7rH9N17hS20aYnMC7da3kKpZHyHMHUA -----END CERTIFICATE-----Generated at Sat Aug 23 21:02:17 2025 by rpki-client