$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: tMoOUuMvFYGpHPaJz+H3m7bDTHMyibWLF34db3oklgk= Subject key identifier: DB:45:86:89:A5:F4:9B:A3:17:B8:54:FC:37:C9:98:FB:2A:DC:28:28 Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 0750 Signing time: Fri 22 Aug 2025 21:49:08 +0000 Manifest this update: Fri 22 Aug 2025 21:49:07 +0000 Manifest next update: Fri 29 Aug 2025 21:49:07 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: vOFZ8oiOb8bjyL+7pO6J/BZw79srWTXO247I/koSaxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: Aug 22 21:49:07 2025 GMT Not After : Aug 29 21:49:07 2025 GMT Subject: CN=68a8e5d3-4457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:78:59:0a:3e:d6:38:ec:03:de:34:67:7f: 52:89:2c:61:6d:99:c6:f3:85:e2:86:c4:e7:6e:79: e7:04:dd:fc:51:19:0a:03:91:72:21:83:83:62:dd: b9:64:cd:77:94:7c:de:a1:d6:4e:c0:b7:78:6d:aa: 8e:5d:02:f0:ff:da:49:7c:74:9f:17:97:c5:51:f2: 4c:38:b2:e2:a8:a0:c1:59:a3:dc:45:b2:82:14:55: 1a:5a:71:f9:c5:e6:63:ff:4a:e0:8c:0a:dc:a8:df: 78:f7:9e:68:d1:e2:ae:60:26:b4:84:eb:15:65:1b: 1e:b2:8f:e9:ef:2d:e2:c1:28:36:24:f8:0e:f1:f5: 2b:56:fe:3c:b4:de:61:56:ac:25:b9:d1:21:2d:48: 68:9e:c6:6c:b8:62:20:cb:3c:79:3e:65:f7:9d:f8: 22:f2:33:3b:79:28:3b:77:a6:12:e0:8a:66:13:10: 51:3a:78:ee:d3:1c:62:03:34:f8:03:50:68:02:87: 13:db:cf:0c:b6:30:61:36:0b:80:56:a2:fd:48:94: 04:d9:4d:01:85:5e:56:01:aa:19:97:0a:db:87:69: c3:26:08:0d:6a:e7:61:cb:13:96:34:90:8a:37:92: e5:d1:12:f2:3a:ba:23:f8:2d:8d:d8:50:5d:6c:5f: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:45:86:89:A5:F4:9B:A3:17:B8:54:FC:37:C9:98:FB:2A:DC:28:28 X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:68:c9:ee:d2:70:ef:ef:38:7f:c8:99:59:bc:a0:2c:fc:78: 8d:66:31:15:1f:f1:ed:e7:0c:38:fe:54:44:ca:6d:6e:b7:eb: ce:a4:61:18:c2:ff:c5:73:48:9d:10:5e:df:e4:10:b6:45:75: e7:36:7e:dd:29:cf:9d:17:fd:6a:f7:f7:a3:0b:d6:39:ac:40: 4b:52:73:b7:56:9a:8d:45:4b:8b:17:7d:04:6c:42:60:95:2b: e9:d8:fe:5a:a8:21:b9:68:09:19:5e:82:14:50:c2:b8:d5:52: 54:1f:c3:7c:f5:18:f3:d7:57:de:e1:4b:0a:db:66:bc:50:a0: cb:f5:da:33:de:3f:e1:93:0b:e6:42:e7:3f:c8:e9:6d:2e:79: 13:16:43:85:f6:72:b3:93:e1:31:0b:bd:4f:f9:04:68:31:4c: d0:8d:08:61:2d:ca:a5:4f:fb:c2:23:7b:66:d9:b6:e3:7f:ed: b2:84:dc:d5:9f:9f:86:39:39:1b:08:a8:04:b4:bc:f2:a4:a0: 83:88:02:04:76:07:89:c6:41:71:c1:d0:f7:9f:68:c8:cc:e1: 18:8d:af:ac:e9:ef:ba:ea:49:24:70:89:ec:fa:73:e3:cd:a0: 9f:01:26:4c:2c:4c:50:28:a4:1f:be:05:15:dd:61:26:ec:96: e5:9f:a7:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUwODIyMjE0OTA3WhcNMjUwODI5MjE0OTA3WjAYMRYwFAYD VQQDEw02OGE4ZTVkMy00NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIx4WQo+1jjsA940Z39SiSxhbZnG84XihsTnbnnnBN38URkKA5FyIYODYt25 ZM13lHzeodZOwLd4baqOXQLw/9pJfHSfF5fFUfJMOLLiqKDBWaPcRbKCFFUaWnH5 xeZj/0rgjArcqN94955o0eKuYCa0hOsVZRseso/p7y3iwSg2JPgO8fUrVv48tN5h VqwludEhLUhonsZsuGIgyzx5PmX3nfgi8jM7eSg7d6YS4IpmExBROnju0xxiAzT4 A1BoAocT288MtjBhNguAVqL9SJQE2U0BhV5WAaoZlwrbh2nDJggNaudhyxOWNJCK N5Ll0RLyOroj+C2N2FBdbF/klwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtFhoml 9JujF7hU/DfJmPsq3CgoMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgaMnu0nDv7zh/yJlZvKAs/HiNZjEVH/Ht5ww4/lREym1ut+vOpGEY wv/Fc0idEF7f5BC2RXXnNn7dKc+dF/1q9/ejC9Y5rEBLUnO3VpqNRUuLF30EbEJg lSvp2P5aqCG5aAkZXoIUUMK41VJUH8N89Rjz11fe4UsK22a8UKDL9doz3j/hkwvm Quc/yOltLnkTFkOF9nKzk+ExC71P+QRoMUzQjQhhLcqlT/vCI3tm2bbjf+2yhNzV n5+GOTkbCKgEtLzypKCDiAIEdgeJxkFxwdD3n2jIzOEYja+s6e+66kkkcIns+nPj zaCfASZMLExQKKQfvgUV3WEm7Jbln6db -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:18 2025 by rpki-client