$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json) Hash identifier: 0Rob7kYth25Tzwtgzjrj9eeMxv4hWRZ2G3jsxD7J9xs= Subject key identifier: D7:AE:C5:B1:3B:9D:FF:EA:7B:C2:8D:5C:3D:82:59:B2:35:E5:E6:3C Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft Manifest number: 0172 Signing time: Mon 11 Aug 2025 03:56:31 +0000 Manifest this update: Mon 11 Aug 2025 03:56:30 +0000 Manifest next update: Mon 18 Aug 2025 03:56:30 +0000 Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: QaI1OGYPQgjElhl3q5yUHaG0fN/0xG3WYEeWukIFV80=) 2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: c8xC2gX2VG0WPWJTP0Tr0I6LdHRsTfIm5z3hVzO25VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06 Validity Not Before: Aug 11 03:56:30 2025 GMT Not After : Aug 18 03:56:30 2025 GMT Subject: CN=689969ee-8eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:24:61:08:2a:da:7b:7c:e2:56:33:ae:68:14: 06:25:9b:8a:50:dc:8b:72:1d:6c:b7:87:22:95:97: fa:0e:ff:70:2d:b7:20:21:59:76:40:78:5f:c4:5c: 06:7d:83:e7:2e:8d:58:a6:32:0c:89:d8:98:e5:2c: 5f:09:2d:dc:35:eb:ce:34:49:0d:1d:24:35:fd:a1: 26:ae:37:d6:de:b4:d6:94:9b:54:6a:4c:9a:a9:82: 63:9e:cf:7a:e7:ed:95:dd:72:da:6d:6e:e8:48:da: fc:ae:2c:7a:4a:a5:75:2b:20:5c:11:26:41:f5:eb: e7:07:27:a1:4a:18:e6:a4:a5:f1:31:e9:e1:7e:b1: 57:1d:ed:f8:e6:f0:65:bb:82:77:41:69:62:1c:21: 04:d5:4a:b4:b8:dc:a2:0b:99:db:80:62:ef:7d:c5: 35:fd:64:08:23:67:2e:af:92:96:72:2e:15:db:6d: 96:a3:ba:68:7e:0f:67:c1:2a:72:9d:d9:61:fd:56: 82:00:55:60:36:cb:7e:a4:5d:27:53:b8:39:b3:e9: 89:c8:01:ba:34:29:ca:e2:9e:60:ca:3f:51:a4:33: e0:05:d0:69:e7:c7:f0:89:92:73:52:09:2b:b4:15: 4b:ac:18:40:a7:50:38:69:2e:1d:79:23:fb:96:0c: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AE:C5:B1:3B:9D:FF:EA:7B:C2:8D:5C:3D:82:59:B2:35:E5:E6:3C X509v3 Authority Key Identifier: keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4c:19:7b:4e:3c:7c:f5:9d:93:e7:51:cb:f9:40:91:5d:4b: 50:26:96:87:43:5b:de:ba:21:14:1a:fe:d1:36:22:9a:8b:96: 64:ff:73:dc:90:b1:cb:fa:9b:3d:3f:30:ee:a0:31:dc:21:ac: ee:38:aa:d4:b4:8b:ec:80:8b:70:80:2e:27:d7:0d:a6:c1:b3: a0:04:f4:d7:c8:30:c7:67:1a:0f:6f:cc:ab:61:30:a3:e8:98: b9:e4:b8:4f:d9:e6:8c:19:8d:44:9e:37:af:b6:c0:fc:78:54: 0d:0b:e2:4f:e9:9e:54:a6:ec:01:a1:3d:e5:15:c2:15:db:ef: eb:24:77:55:fb:a4:19:23:f5:33:0c:81:aa:c6:d1:05:8a:79: 73:a3:8d:dd:c3:d2:49:23:b3:69:5c:d2:25:46:80:5f:fb:9f: cb:fd:4f:da:c5:9f:00:06:ba:ef:9e:81:a1:42:86:31:99:0a: 9a:e0:97:5f:68:7c:11:9a:df:ba:e9:86:e8:73:04:3a:7a:44: 1a:18:f7:c7:14:14:6a:3f:9d:c7:93:ec:ef:8b:b1:1e:81:05: 0a:c8:fa:1f:c2:8c:27:c6:38:b3:ac:d5:0a:c9:47:ee:dd:d6: 10:88:7a:21:2d:20:31:b7:e9:3b:dc:d9:02:24:24:79:a4:4b: 9b:83:d0:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE OTVDQjBGMDYwHhcNMjUwODExMDM1NjMwWhcNMjUwODE4MDM1NjMwWjAYMRYwFAYD VQQDEw02ODk5NjllZS04ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yRhCCrae3ziVjOuaBQGJZuKUNyLch1st4cilZf6Dv9wLbcgIVl2QHhfxFwG fYPnLo1YpjIMidiY5SxfCS3cNevONEkNHSQ1/aEmrjfW3rTWlJtUakyaqYJjns96 5+2V3XLabW7oSNr8rix6SqV1KyBcESZB9evnByehShjmpKXxMenhfrFXHe345vBl u4J3QWliHCEE1Uq0uNyiC5nbgGLvfcU1/WQII2cur5KWci4V222Wo7pofg9nwSpy ndlh/VaCAFVgNst+pF0nU7g5s+mJyAG6NCnK4p5gyj9RpDPgBdBp58fwiZJzUgkr tBVLrBhAp1A4aS4deSP7lgzYBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeuxbE7 nf/qe8KNXD2CWbI15eY8MB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2 MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTBl7Tjx89Z2T51HL+UCRXUtQJpaHQ1veuiEUGv7RNiKai5Zk/3Pc kLHL+ps9PzDuoDHcIazuOKrUtIvsgItwgC4n1w2mwbOgBPTXyDDHZxoPb8yrYTCj 6Ji55LhP2eaMGY1EnjevtsD8eFQNC+JP6Z5UpuwBoT3lFcIV2+/rJHdV+6QZI/Uz DIGqxtEFinlzo43dw9JJI7NpXNIlRoBf+5/L/U/axZ8ABrrvnoGhQoYxmQqa4Jdf aHwRmt+66YbocwQ6ekQaGPfHFBRqP53Hk+zvi7EegQUKyPofwownxjizrNUKyUfu 3dYQiHohLSAxt+k73NkCJCR5pEubg9DQ -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:06 2025 by rpki-client