$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: mLK/U1SOcZ4PBGQhdtCZPenzfEBk9TdLqUN6t53N2pI= Subject key identifier: 8E:5D:E3:C7:E4:5A:86:AC:97:3D:47:99:24:B3:26:20:99:A6:47:F4 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0159 Signing time: Sat 23 Aug 2025 04:12:21 +0000 Manifest this update: Sat 23 Aug 2025 04:12:21 +0000 Manifest next update: Sat 30 Aug 2025 04:12:21 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: iOCxQFyle+3jvSc9QnhRN6uVSsaIubJRrAASKRDTPTI=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Aug 23 04:12:21 2025 GMT Not After : Aug 30 04:12:21 2025 GMT Subject: CN=68a93fa5-9783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cf:a2:61:f4:a5:3f:d0:0a:cc:8b:e5:91:56: cb:f2:a3:57:2d:92:1f:97:3b:c4:9d:34:f2:06:b5: 08:86:43:be:8a:13:68:9e:68:61:e3:75:8f:aa:20: 2a:92:3e:eb:0e:0d:b0:09:49:7d:19:2b:74:91:3a: 14:2e:26:e6:60:07:26:04:e6:84:87:a6:93:af:25: df:62:da:ab:89:75:4b:8f:73:6e:88:66:ae:8b:e1: ab:9c:07:5a:d8:3d:e6:2a:29:57:6f:e3:65:0e:57: 64:18:76:d2:09:b8:7e:78:bc:40:bc:fe:33:86:6e: 25:57:e7:d1:42:70:16:e8:19:f7:96:b7:85:fb:d3: 37:2f:32:89:af:58:17:3c:fd:fe:ff:09:e0:78:ac: 34:d1:47:eb:5c:d4:b9:76:04:fe:dc:31:55:34:9a: 29:ee:8e:98:a0:5f:6d:ec:ef:5d:28:01:d1:cd:21: b9:06:f3:b7:5a:7a:cc:da:c8:6b:a7:80:cf:f0:23: d4:2d:f2:83:87:af:0b:84:52:a2:09:d8:b5:33:70: 57:1f:fc:3d:03:31:c9:e0:23:fc:58:97:8e:41:b3: 5c:81:83:6a:a1:9b:e5:1a:f2:6d:6d:cb:2d:e3:2a: c9:73:ff:b5:1c:5a:31:e2:26:c6:5c:e2:4b:e1:9d: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:E3:C7:E4:5A:86:AC:97:3D:47:99:24:B3:26:20:99:A6:47:F4 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f3:6d:81:dd:c9:7f:60:f6:f1:e5:ab:cf:39:33:12:38:5e: db:bc:3e:08:19:4e:7d:f1:dd:97:23:15:ca:6f:30:35:80:23: 0e:87:f8:82:e0:d4:96:c8:03:1d:bb:0f:2c:e2:00:3d:9d:da: 45:cc:d9:73:0e:76:98:b1:cc:0d:51:f6:95:2b:14:05:a3:78: f5:be:b8:38:bf:68:6c:6e:81:23:50:07:3b:d5:01:83:5c:66: e7:4b:de:8a:4e:75:84:57:2e:2b:1a:b5:1a:b5:e6:99:6e:92: 4b:2d:ab:90:68:a5:88:76:b1:94:a6:de:2e:b1:5d:40:a9:23: 47:80:33:3c:13:0a:1d:aa:c8:53:56:68:ce:08:15:d8:ad:21: 29:1d:90:e3:6b:6f:fc:78:f6:24:68:89:c0:66:d6:bf:44:47: 4b:a7:b8:c5:f6:e7:30:c1:49:b0:6a:41:0f:47:ff:06:9e:a1: 80:b5:47:46:d5:4d:bb:24:c4:c5:87:47:39:50:90:e5:ba:dd: 72:88:3d:8a:55:a5:5b:93:bd:27:a1:01:0e:f8:61:2c:70:74: 91:b0:43:c9:2b:00:12:ab:d7:a1:1e:a3:d3:5e:8c:02:ff:88: aa:0b:09:ae:b4:d1:7d:36:a9:44:1c:6b:f7:27:6e:4c:68:51: 9b:cd:ce:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUwODIzMDQxMjIxWhcNMjUwODMwMDQxMjIxWjAYMRYwFAYD VQQDEw02OGE5M2ZhNS05NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9s+iYfSlP9AKzIvlkVbL8qNXLZIflzvEnTTyBrUIhkO+ihNonmhh43WPqiAq kj7rDg2wCUl9GSt0kToULibmYAcmBOaEh6aTryXfYtqriXVLj3NuiGaui+GrnAda 2D3mKilXb+NlDldkGHbSCbh+eLxAvP4zhm4lV+fRQnAW6Bn3lreF+9M3LzKJr1gX PP3+/wngeKw00UfrXNS5dgT+3DFVNJop7o6YoF9t7O9dKAHRzSG5BvO3WnrM2shr p4DP8CPULfKDh68LhFKiCdi1M3BXH/w9AzHJ4CP8WJeOQbNcgYNqoZvlGvJtbcst 4yrJc/+1HFox4ibGXOJL4Z3XlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5d48fk Woaslz1HmSSzJiCZpkf0MB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0822B3cl/YPbx5avPOTMSOF7bvD4IGU598d2XIxXKbzA1gCMOh/iC 4NSWyAMduw8s4gA9ndpFzNlzDnaYscwNUfaVKxQFo3j1vrg4v2hsboEjUAc71QGD XGbnS96KTnWEVy4rGrUateaZbpJLLauQaKWIdrGUpt4usV1AqSNHgDM8EwodqshT VmjOCBXYrSEpHZDja2/8ePYkaInAZta/REdLp7jF9ucwwUmwakEPR/8GnqGAtUdG 1U27JMTFh0c5UJDlut1yiD2KVaVbk70noQEO+GEscHSRsEPJKwASq9ehHqPTXowC /4iqCwmutNF9NqlEHGv3J25MaFGbzc4t -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:34 2025 by rpki-client