$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: 2MdO+5UFPWrd83XYvE5qGtcF6AI5PHIH96CMn2MgwXI= Subject key identifier: 61:DE:6B:7B:EC:C8:B2:18:7B:A6:C6:AA:DB:51:7C:F8:8B:61:6F:F8 Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0A9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0A8E Signing time: Fri 22 Aug 2025 19:43:50 +0000 Manifest this update: Fri 22 Aug 2025 19:43:49 +0000 Manifest next update: Fri 29 Aug 2025 19:43:49 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: R+vT1omnya2t+nwhBrmdmSVaEJMZZc8q86jaAQyi2jw=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2719 (0xa9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Aug 22 19:43:49 2025 GMT Not After : Aug 29 19:43:49 2025 GMT Subject: CN=68a8c876-9021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:f1:3a:21:c1:80:01:a4:8a:99:b2:84:c3: bf:0d:92:ff:76:be:b4:34:32:9c:7d:7f:4f:3e:81: dd:1d:bf:df:f6:9f:42:48:8d:be:4a:8d:e7:fa:52: 6d:e0:c2:e7:d5:12:25:95:9b:7c:77:9b:dd:12:30: 7c:10:5e:49:b1:2a:d9:39:86:92:cf:af:b0:6a:0f: 29:21:2f:95:a6:9e:f3:57:f5:d7:29:da:93:8a:fb: f0:59:85:b2:e3:05:54:ce:21:39:1e:66:a9:ae:7b: 6a:1e:d4:2c:bb:70:61:15:d6:82:25:ea:bf:46:c2: 17:46:ad:78:ae:4e:b4:21:a2:81:1e:3e:36:5d:bc: 63:a3:45:55:04:39:4d:11:d5:c6:03:60:95:95:ec: 60:91:7a:23:3d:3a:97:34:c7:e0:87:14:c4:7f:9a: b8:fc:40:ac:b3:37:59:d7:0c:a2:1b:af:91:84:d8: 4e:e1:39:b6:3a:59:f0:c8:cd:58:05:1d:5a:36:72: a1:85:6b:08:12:8c:fc:a7:12:ae:70:9c:3a:4b:31: 42:57:dc:2c:c1:b6:92:5f:6a:06:4e:99:ab:e9:1b: 7f:35:fb:64:26:c1:a5:80:bf:54:9b:b9:03:8f:e5: 8c:5e:24:62:ff:81:0b:3b:ec:27:8a:01:a7:27:f3: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:6B:7B:EC:C8:B2:18:7B:A6:C6:AA:DB:51:7C:F8:8B:61:6F:F8 X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e5:f5:82:7b:2c:86:ba:23:cc:3a:d3:ad:a5:c8:4f:9d:61: 8b:a2:1b:e2:0e:4a:85:42:3e:b9:96:c2:74:52:fe:99:4c:55: 48:d9:fd:7c:59:09:15:43:53:3c:d2:6a:cb:55:a8:00:66:dd: e6:6f:67:32:77:06:15:4f:fc:93:6b:10:a4:48:c8:d7:50:a5: f1:fd:fb:d5:48:e5:c9:d6:1d:5b:a0:ce:76:9d:e4:a0:c6:20: 86:e3:12:39:ad:4b:42:4c:ee:59:ab:e2:38:70:07:9f:c4:29: b7:ad:b0:5d:63:62:98:18:35:c7:75:d9:41:fa:09:2d:11:4b: 95:af:bb:a1:3e:78:77:bb:1a:86:31:59:07:44:5a:7b:64:c5: 29:6e:7e:69:bf:a1:a3:49:ee:59:c2:2e:34:fd:1d:c1:51:75: bd:b3:7b:26:8b:66:15:75:14:bb:e7:4d:fe:1e:fe:fa:16:3d: 20:ba:6d:38:84:18:7f:07:b4:a6:4f:e7:d5:fd:b1:35:68:f6: 87:e5:e3:a1:56:c0:49:0f:75:58:a1:36:db:9f:67:8a:d6:4c: 4c:6d:89:04:e8:26:a8:ae:91:87:50:b9:48:68:b1:bc:f6:d5: 60:6c:4a:e3:5c:34:9e:d8:3b:cc:bc:22:a3:f2:38:63:99:06: cb:01:de:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUwODIyMTk0MzQ5WhcNMjUwODI5MTk0MzQ5WjAYMRYwFAYD VQQDEw02OGE4Yzg3Ni05MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufjxOiHBgAGkipmyhMO/DZL/dr60NDKcfX9PPoHdHb/f9p9CSI2+So3n+lJt 4MLn1RIllZt8d5vdEjB8EF5JsSrZOYaSz6+wag8pIS+Vpp7zV/XXKdqTivvwWYWy 4wVUziE5HmaprntqHtQsu3BhFdaCJeq/RsIXRq14rk60IaKBHj42Xbxjo0VVBDlN EdXGA2CVlexgkXojPTqXNMfghxTEf5q4/ECsszdZ1wyiG6+RhNhO4Tm2OlnwyM1Y BR1aNnKhhWsIEoz8pxKucJw6SzFCV9wswbaSX2oGTpmr6Rt/NftkJsGlgL9Um7kD j+WMXiRi/4ELO+wnigGnJ/MrKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHea3vs yLIYe6bGqttRfPiLYW/4MB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5fWCeyyGuiPMOtOtpchPnWGLohviDkqFQj65lsJ0Uv6ZTFVI2f18 WQkVQ1M80mrLVagAZt3mb2cydwYVT/yTaxCkSMjXUKXx/fvVSOXJ1h1boM52neSg xiCG4xI5rUtCTO5Zq+I4cAefxCm3rbBdY2KYGDXHddlB+gktEUuVr7uhPnh3uxqG MVkHRFp7ZMUpbn5pv6GjSe5Zwi40/R3BUXW9s3smi2YVdRS7503+Hv76Fj0gum04 hBh/B7SmT+fV/bE1aPaH5eOhVsBJD3VYoTbbn2eK1kxMbYkE6CaorpGHULlIaLG8 9tVgbErjXDSe2DvMvCKj8jhjmQbLAd4m -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:09 2025 by rpki-client