$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: UrCpBQTj3VcROZTZD4efBiLnZjahPHbtHPY6QUfC3LY= Subject key identifier: 7E:DE:76:C4:5C:40:F5:CF:4E:CD:E1:7F:30:2A:E6:0D:C4:B4:44:84 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0A3D Signing time: Fri 08 Aug 2025 20:02:26 +0000 Manifest this update: Fri 08 Aug 2025 20:02:25 +0000 Manifest next update: Fri 15 Aug 2025 20:02:25 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: ecqthE9paOtrqwuhKY9N8ae17fn9zGi8XR9HPRyOt1U=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Aug 8 20:02:25 2025 GMT Not After : Aug 15 20:02:25 2025 GMT Subject: CN=689657d2-9618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:12:23:8f:08:59:b9:ea:ac:35:13:87:b9: a5:67:86:19:c2:04:4d:e5:f2:fb:8d:ed:17:f4:8d: c5:4f:a5:85:d5:34:82:f5:a2:c8:15:be:b0:57:3b: 31:ca:07:73:ad:71:1c:c1:6d:da:3c:78:e7:96:7f: 3f:df:06:65:2b:5d:ab:f8:5e:50:61:28:1f:37:dc: 75:18:b6:eb:b8:3e:b3:42:b7:92:1b:30:80:5d:ca: ed:ab:f3:02:22:57:77:67:fb:73:cf:1f:56:ee:57: 4c:d6:60:57:a7:2d:ff:eb:4b:71:31:fb:dc:fa:c7: b4:df:2b:f5:b3:bb:24:38:16:92:25:04:02:60:10: 69:ed:0b:4b:62:fd:62:a0:9c:6e:cd:11:46:f7:58: fc:87:39:45:69:21:54:80:a3:ba:29:0c:64:ce:e8: 63:a6:77:59:54:e1:b6:8e:b9:0e:cd:40:5f:4c:3d: be:42:81:03:62:94:8e:5c:15:07:13:a7:02:18:cc: d2:4e:48:47:0e:33:5f:df:28:bf:84:aa:1b:a5:d0: c8:1c:24:55:33:5b:55:66:24:84:ed:b5:ab:5d:e6: 2c:b3:b5:f1:5d:b7:3c:ec:0f:c9:85:50:35:dd:ce: 8d:03:dc:48:cf:b8:8f:3e:09:03:7f:28:c9:6c:6a: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DE:76:C4:5C:40:F5:CF:4E:CD:E1:7F:30:2A:E6:0D:C4:B4:44:84 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:34:4d:da:a9:f0:f2:40:25:7a:43:58:3f:4f:48:01:25:92: 1d:9f:45:3f:99:e0:13:3b:75:ad:3c:c5:9f:57:9e:07:8d:35: 55:81:c0:cc:3c:72:b8:b2:b5:0c:0d:7f:a5:d0:99:5f:b1:8a: 77:9a:36:53:6a:5c:d6:fa:74:3b:94:3f:ea:20:73:0b:f2:31: 7f:71:2f:e8:f0:96:63:c2:43:e8:11:30:90:13:81:c1:bb:21: c0:38:85:69:44:d4:da:07:0a:41:88:38:a1:89:7b:d4:ff:78: 58:c5:c5:d0:90:01:dd:cd:64:7e:ad:fe:ff:f3:89:58:3c:b5: 6a:59:82:cb:4d:37:b4:6e:2f:d9:1c:52:d5:11:b9:e1:67:f9: 98:df:5e:9c:22:84:26:5c:90:1d:16:fa:0b:14:1b:7f:de:2c: 44:74:ad:63:0c:df:06:b4:4d:0b:85:44:f8:87:a5:9d:e4:1f: 27:52:a9:2a:07:2c:b2:2b:f6:c4:7c:2c:88:08:a4:c9:84:46: f0:62:a1:79:bc:b2:c0:e0:a2:44:93:15:c6:14:d1:63:13:00: 95:07:52:15:35:1a:3f:a9:c0:b2:5b:8d:44:af:81:0b:62:7c: 1d:1b:3f:de:18:7e:6f:fa:98:fd:73:25:9f:50:25:90:04:81: 39:40:e1:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwODA4MjAwMjI1WhcNMjUwODE1MjAwMjI1WjAYMRYwFAYD VQQDEw02ODk2NTdkMi05NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx88SI48IWbnqrDUTh7mlZ4YZwgRN5fL7je0X9I3FT6WF1TSC9aLIFb6wVzsx ygdzrXEcwW3aPHjnln8/3wZlK12r+F5QYSgfN9x1GLbruD6zQreSGzCAXcrtq/MC Ild3Z/tzzx9W7ldM1mBXpy3/60txMfvc+se03yv1s7skOBaSJQQCYBBp7QtLYv1i oJxuzRFG91j8hzlFaSFUgKO6KQxkzuhjpndZVOG2jrkOzUBfTD2+QoEDYpSOXBUH E6cCGMzSTkhHDjNf3yi/hKobpdDIHCRVM1tVZiSE7bWrXeYss7XxXbc87A/JhVA1 3c6NA9xIz7iPPgkDfyjJbGrmNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7edsRc QPXPTs3hfzAq5g3EtESEMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCNE3aqfDyQCV6Q1g/T0gBJZIdn0U/meATO3WtPMWfV54HjTVVgcDM PHK4srUMDX+l0JlfsYp3mjZTalzW+nQ7lD/qIHML8jF/cS/o8JZjwkPoETCQE4HB uyHAOIVpRNTaBwpBiDihiXvU/3hYxcXQkAHdzWR+rf7/84lYPLVqWYLLTTe0bi/Z HFLVEbnhZ/mY316cIoQmXJAdFvoLFBt/3ixEdK1jDN8GtE0LhUT4h6Wd5B8nUqkq ByyyK/bEfCyICKTJhEbwYqF5vLLA4KJEkxXGFNFjEwCVB1IVNRo/qcCyW41Er4EL YnwdGz/eGH5v+pj9cyWfUCWQBIE5QOEc -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:29 2025 by rpki-client