$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: 4ZYzrq/8kJ+ZiQzH+jBNJmKYtAmekDaQ6qRIfkYyE00= Subject key identifier: C1:E3:66:27:A6:FB:B2:05:03:B3:96:8B:17:30:AB:CE:03:A7:A9:4D Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 21CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 21B3 Signing time: Fri 22 Aug 2025 15:57:09 +0000 Manifest this update: Fri 22 Aug 2025 15:57:08 +0000 Manifest next update: Fri 29 Aug 2025 15:57:08 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: Tt4f7c38laYY3U8ABhUZMrhXTtqT7nDewdMSLkMGKC0=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: xq1A/DwEya72JUauXcCDXoZyXlE8M2olRWGCrYUUkIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8652 (0x21cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: Aug 22 15:57:08 2025 GMT Not After : Aug 29 15:57:08 2025 GMT Subject: CN=68a89354-2a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:05:d4:05:09:1e:68:9a:48:c2:28:08:4e: 4c:73:34:dc:16:c5:36:9b:02:72:6c:e6:07:fa:33: a1:9a:01:ea:ca:97:08:13:cd:e7:2b:a1:dd:26:bc: 0f:44:7e:6a:af:1b:3e:19:bc:16:a1:63:36:6d:15: f2:2d:a7:47:6e:84:fc:c0:5a:9e:c7:95:68:4c:11: 79:01:99:06:9b:46:88:3f:89:39:85:0d:93:04:f3: ca:0b:d7:7c:2b:35:2a:c6:cd:f5:c3:01:86:b4:57: 66:fd:d5:0c:27:7a:af:5a:17:0f:e9:01:8b:50:e2: 88:bd:59:ce:f9:29:1d:55:64:77:91:b3:fa:8f:58: 8b:77:3b:02:08:6e:fa:30:48:99:31:c6:79:16:5f: bd:51:f3:45:bd:93:93:00:3a:13:2a:94:28:bb:4c: 15:50:06:8a:6c:d7:93:fb:3c:fb:2d:79:8a:a7:3a: 18:fd:4b:28:eb:fe:01:d4:4e:a9:1b:41:a5:c1:df: af:2f:e7:de:16:0b:a6:46:e9:61:03:c4:63:2b:5c: f6:6a:04:a2:c5:47:90:4e:23:8a:a7:41:69:07:c4: bb:94:14:2a:e4:f4:75:e1:df:fc:ac:48:26:99:fa: ec:f5:f1:0c:8f:2a:52:94:82:c7:6a:1b:0f:bf:9a: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:66:27:A6:FB:B2:05:03:B3:96:8B:17:30:AB:CE:03:A7:A9:4D X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:37:31:25:78:c3:fb:7c:0e:f6:ff:54:3e:37:4c:30:42:df: 3c:93:50:8c:dc:0d:5e:6d:35:3d:12:5c:79:ac:6f:69:6e:cd: 99:bb:df:62:4e:3f:de:b7:48:c2:17:94:b9:93:e4:ed:eb:95: 8d:dd:94:a4:1e:d7:25:9c:9e:8b:a7:d4:89:3b:bb:37:17:9f: 21:0d:a1:a0:db:f4:c4:4e:d7:bb:4d:96:56:e6:f3:69:b3:bb: 00:e9:5d:79:0c:8f:21:04:cc:4d:8b:11:a4:84:91:3c:40:50: a5:94:b5:76:00:37:06:cd:7a:cf:f0:ee:08:e3:c5:78:39:a7: 13:04:90:31:06:61:73:99:9a:00:1a:29:8c:f0:e6:55:89:9d: a3:ad:4f:d9:ad:af:bf:73:99:a6:fa:9c:ee:d3:c5:b8:2f:38: 1d:0c:d7:bb:8e:31:76:10:8d:78:69:2e:45:68:37:ae:a2:41: 37:09:95:8b:ba:6f:6e:cf:25:f9:01:65:cb:e6:f1:6c:ce:a6: 72:48:0e:d2:dc:e3:da:ef:fc:a3:2f:89:ae:2d:42:a1:e4:11: d0:a8:7c:92:83:65:0a:5e:18:e2:ea:68:4f:a1:ba:b6:98:b5: 7d:c7:1f:7d:eb:53:0e:16:4c:ad:50:8f:6e:99:7d:43:68:31: 8a:c1:2e:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjUwODIyMTU1NzA4WhcNMjUwODI5MTU1NzA4WjAYMRYwFAYD VQQDEw02OGE4OTM1NC0yYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkfoF1AUJHmiaSMIoCE5MczTcFsU2mwJybOYH+jOhmgHqypcIE83nK6HdJrwP RH5qrxs+GbwWoWM2bRXyLadHboT8wFqex5VoTBF5AZkGm0aIP4k5hQ2TBPPKC9d8 KzUqxs31wwGGtFdm/dUMJ3qvWhcP6QGLUOKIvVnO+SkdVWR3kbP6j1iLdzsCCG76 MEiZMcZ5Fl+9UfNFvZOTADoTKpQou0wVUAaKbNeT+zz7LXmKpzoY/Uso6/4B1E6p G0Glwd+vL+feFgumRulhA8RjK1z2agSixUeQTiOKp0FpB8S7lBQq5PR14d/8rEgm mfrs9fEMjypSlILHahsPv5rRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHjZiem +7IFA7OWixcwq84Dp6lNMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8NzEleMP7fA72/1Q+N0wwQt88k1CM3A1ebTU9Elx5rG9pbs2Zu99i Tj/et0jCF5S5k+Tt65WN3ZSkHtclnJ6Lp9SJO7s3F58hDaGg2/TETte7TZZW5vNp s7sA6V15DI8hBMxNixGkhJE8QFCllLV2ADcGzXrP8O4I48V4OacTBJAxBmFzmZoA GimM8OZViZ2jrU/Zra+/c5mm+pzu08W4LzgdDNe7jjF2EI14aS5FaDeuokE3CZWL um9uzyX5AWXL5vFszqZySA7S3OPa7/yjL4muLUKh5BHQqHySg2UKXhji6mhPobq2 mLV9xx9961MOFkytUI9umX1DaDGKwS4V -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:08 2025 by rpki-client