$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json) Hash identifier: +A2ck5rvpAuif64XpEcX5q1ks0tXsaOCcMKQlXgzTNE= Subject key identifier: 7E:64:39:0B:2B:13:F7:08:CA:57:0A:CA:F6:C7:1D:18:86:C5:06:20 Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:15:15 +0000 Manifest this update: Sat 23 Aug 2025 08:15:14 +0000 Manifest next update: Sat 30 Aug 2025 08:15:14 +0000 Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: WWRypCb1A9kFWJiPZVhxdbQKTXpksPaRX2OZ4ertZ0I=) 2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: n1d9JBQkYzZszHXWzHvHiVJmG5oLenIhoEtEgvVSpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Validity Not Before: Aug 23 08:15:14 2025 GMT Not After : Aug 30 08:15:14 2025 GMT Subject: CN=68a97892-480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:cf:16:07:9d:a2:28:fc:75:ec:d1:64:ad: ca:dc:4e:13:17:93:d7:26:4d:de:3f:71:ab:48:b2: cc:fe:5d:b9:cb:7d:fe:e1:ea:4d:55:eb:62:a4:8f: a1:6b:c8:6a:50:3e:49:51:bd:d3:4a:07:18:09:ec: 91:26:15:0e:99:d9:d4:3e:12:f7:3f:4a:69:7e:4c: 20:5f:31:4e:ba:01:ce:17:82:27:fa:19:65:c2:c3: 92:59:8d:2c:31:33:c0:3e:1a:4c:86:aa:55:59:96: c4:53:1a:39:5e:ee:5a:7b:80:b2:6f:d7:71:1c:92: aa:e7:4e:fa:77:99:37:ad:02:e3:6b:3c:ec:63:1b: f0:77:49:79:a5:3f:22:e0:5a:71:a4:8c:1c:fc:f8: d7:77:30:10:6f:9c:da:c0:57:c9:12:6d:40:bb:5d: 5e:ca:3d:a0:0b:0c:e7:cc:37:a3:6b:bd:43:e6:d6: b7:84:99:83:3e:90:d1:90:33:07:2b:c7:bd:91:37: f5:ed:0f:01:7d:83:a9:f9:15:b2:5e:82:12:dd:84: 8b:2e:68:cc:af:15:e5:b6:74:c0:25:6f:bb:33:2a: 06:15:4f:a9:0e:5c:08:f2:4c:cb:f7:b5:08:0e:4b: 0f:35:ab:53:a6:34:44:55:6f:ae:0c:2d:9f:25:80: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:64:39:0B:2B:13:F7:08:CA:57:0A:CA:F6:C7:1D:18:86:C5:06:20 X509v3 Authority Key Identifier: keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8d:c7:c9:04:29:6f:c4:b9:f2:8b:bc:5c:7c:2e:c5:ac:f7: d1:53:97:25:fb:43:b9:f9:7d:25:d7:ab:c5:26:0c:f9:2a:6c: 1d:47:24:73:d7:a6:3e:4e:4f:b3:1a:2b:d1:bf:7b:46:ae:4c: e5:15:0d:45:ee:9c:08:5a:c1:0e:ca:f6:97:09:63:1d:25:b1: e1:3f:f1:7a:95:2f:15:b2:72:db:6e:2d:46:9d:70:73:f7:ac: e1:c8:1d:9b:91:a5:5e:88:1d:17:6b:f3:45:1c:43:90:fa:85: d5:5a:d4:7f:fc:ce:c8:2d:e2:3c:a1:1b:f0:df:7d:7d:12:b5: a9:9d:75:a1:6b:aa:15:1b:45:af:91:5c:9c:ca:d6:7f:3f:6c: 7f:12:b4:59:e8:4d:df:43:43:f8:a4:71:c3:2e:37:eb:b7:ff: fa:d4:57:bd:ff:21:0c:29:5b:49:30:bf:fd:c9:ec:3c:cf:d0: 62:71:0e:ba:df:08:b8:03:c4:c5:3a:15:98:dc:08:44:7b:de: d5:56:10:f0:1b:58:63:5e:a8:a9:ed:46:9e:1e:2a:72:01:a8: fb:dc:70:a6:02:1e:5b:32:f6:32:79:05:68:48:35:bb:23:64: 32:b2:6f:50:44:61:08:e7:65:34:62:7f:5a:29:eb:47:f0:90: eb:8a:1e:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoNEQ4RjU4MEM4RjU3NTk0NjdEQjhFQTBGMDhDMzExQTk2 RDNCM0ZCQjAeFw0yNTA4MjMwODE1MTRaFw0yNTA4MzAwODE1MTRaMBgxFjAUBgNV BAMTDTY4YTk3ODkyLTQ4MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYv88WB52iKPx17NFkrcrcThMXk9cmTd4/catIssz+XbnLff7h6k1V62Kkj6Fr yGpQPklRvdNKBxgJ7JEmFQ6Z2dQ+Evc/Sml+TCBfMU66Ac4Xgif6GWXCw5JZjSwx M8A+GkyGqlVZlsRTGjle7lp7gLJv13EckqrnTvp3mTetAuNrPOxjG/B3SXmlPyLg WnGkjBz8+Nd3MBBvnNrAV8kSbUC7XV7KPaALDOfMN6NrvUPm1reEmYM+kNGQMwcr x72RN/XtDwF9g6n5FbJeghLdhIsuaMyvFeW2dMAlb7szKgYVT6kOXAjyTMv3tQgO Sw81q1OmNERVb64MLZ8lgIpVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfmQ5CysT 9wjKVwrK9scdGIbFBiAwHwYDVR0jBBgwFoAUTY9YDI9XWUZ9uOoPCMMRqW07P7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzVCQjA3NDNDNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1VaOXVPb1BDTU1ScVcwN1A3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFk5WURJOVhXVVo5dU9vUENNTVJxVzA3UDdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzVCQjA3NDNDNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1Va OXVPb1BDTU1ScVcwN1A3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEeNx8kEKW/EufKLvFx8LsWs99FTlyX7Q7n5fSXXq8UmDPkqbB1HJHPX pj5OT7MaK9G/e0auTOUVDUXunAhawQ7K9pcJYx0lseE/8XqVLxWycttuLUadcHP3 rOHIHZuRpV6IHRdr80UcQ5D6hdVa1H/8zsgt4jyhG/DffX0StamddaFrqhUbRa+R XJzK1n8/bH8StFnoTd9DQ/ikccMuN+u3//rUV73/IQwpW0kwv/3J7DzP0GJxDrrf CLgDxMU6FZjcCER73tVWEPAbWGNeqKntRp4eKnIBqPvccKYCHlsy9jJ5BWhINbsj ZDKyb1BEYQjnZTRif1op60fwkOuKHm8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:48 2025 by rpki-client