$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: 7agftzCev8EQdA0NeUFL0weWKipZB7drjFEtlvzF8Ss= Subject key identifier: 1C:43:AB:29:49:2C:BD:EE:B9:25:D8:7F:22:7A:65:E0:D8:BC:A0:77 Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 47 Signing time: Sat 09 Aug 2025 07:55:54 +0000 Manifest this update: Sat 09 Aug 2025 07:55:53 +0000 Manifest next update: Sat 16 Aug 2025 07:55:53 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: Q27hJhGz4uJJQ1NN4bgbBo8wVsXgmaYU/e7qIZi2GuM=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: OwduiWmYFtEig81kPfdDRhJbko4w3+s4usceEwZWT2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Aug 9 07:55:53 2025 GMT Not After : Aug 16 07:55:53 2025 GMT Subject: CN=6896ff0a-7c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:33:cf:cd:9c:00:fe:b9:99:3c:cb:c1:d9: b7:79:ef:0f:7a:30:c0:a3:00:e6:e8:4e:53:4a:27: 2c:c4:e8:3f:37:b7:7b:83:4d:93:55:04:b4:b8:54: 17:dc:f1:f2:98:7e:c9:de:e5:ad:ec:bb:22:ac:e1: 33:c4:e2:ce:cf:a0:a8:78:cb:03:ad:5f:71:93:2b: 0b:58:6d:38:08:12:85:8d:27:31:fc:4d:b2:be:36: 79:60:b3:b2:62:65:87:fd:e3:36:57:ed:d8:94:b2: 22:b3:e1:0a:10:68:bd:4c:e4:cb:1d:a5:18:a4:05: 42:cf:11:4b:d0:2a:0c:c4:9c:cc:e8:9c:dc:14:28: 45:e0:52:15:b7:99:45:ce:01:47:70:4e:4e:5b:d5: 95:f3:c8:a9:bb:f2:0f:1d:f9:ec:cd:5a:31:b1:de: 61:f9:8d:53:50:e2:2e:c9:d9:21:d8:a8:02:7f:6e: 85:16:31:2f:74:5d:78:19:a2:ab:66:74:a5:76:16: ea:15:ea:51:be:86:2c:ed:46:74:60:46:63:96:0e: 24:8d:e4:f4:32:ae:c0:d5:0e:1e:a4:06:c7:00:4f: bf:87:ad:74:f1:ba:dc:62:20:8a:b9:7d:ac:7d:df: c3:8d:af:87:08:dc:3b:d6:2c:83:ce:6a:5d:eb:3e: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:43:AB:29:49:2C:BD:EE:B9:25:D8:7F:22:7A:65:E0:D8:BC:A0:77 X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ea:d6:22:2b:26:3f:d9:aa:35:1d:7c:dc:1b:35:e7:0c:e7: 91:39:72:f6:1c:8e:24:5d:a2:93:c4:b4:84:9e:e5:2d:4c:df: 34:7b:11:19:12:0a:3a:3e:ec:17:9e:d8:b0:21:f8:ee:7f:6f: 67:2e:2d:15:78:7a:3d:b6:68:40:1b:7e:a2:b6:23:b5:8a:60: 26:37:11:f1:25:4c:9e:f0:e9:14:d7:c3:ed:4d:78:fc:42:0a: bf:ac:e1:af:30:87:49:0d:58:28:dd:45:a5:65:34:62:22:8f: fc:e9:e0:03:13:ba:36:04:1c:81:4d:a5:6d:9e:5f:b7:67:f4: 7a:07:b6:5a:eb:aa:04:3a:a2:b2:c3:4b:75:07:8e:15:3d:5f: f6:4c:c7:e9:e1:b3:0c:a3:01:e3:ff:e5:6d:3e:92:88:b7:77: 65:ce:67:40:f9:ea:40:ea:7b:86:46:ab:8b:ce:4b:dd:bf:4c: f1:fb:47:cb:d5:99:41:88:78:ad:36:2f:1b:79:ce:92:de:9f: 22:da:6d:ed:04:27:68:8e:04:b8:e8:3d:98:15:ed:4a:c9:12: 53:16:a4:3b:26:62:17:f1:45:34:71:be:68:56:33:86:8d:85: a4:9a:a6:13:6a:31:0b:f9:4b:58:24:0a:fd:a1:8d:56:f7:8d: 7b:95:ac:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTA4MDkwNzU1NTNaFw0yNTA4MTYwNzU1NTNaMBgxFjAUBgNV BAMTDTY4OTZmZjBhLTdjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvozPPzZwA/rmZPMvB2bd57w96MMCjAOboTlNKJyzE6D83t3uDTZNVBLS4VBfc 8fKYfsne5a3suyKs4TPE4s7PoKh4ywOtX3GTKwtYbTgIEoWNJzH8TbK+Nnlgs7Ji ZYf94zZX7diUsiKz4QoQaL1M5MsdpRikBULPEUvQKgzEnMzonNwUKEXgUhW3mUXO AUdwTk5b1ZXzyKm78g8d+ezNWjGx3mH5jVNQ4i7J2SHYqAJ/boUWMS90XXgZoqtm dKV2FuoV6lG+hiztRnRgRmOWDiSN5PQyrsDVDh6kBscAT7+HrXTxutxiIIq5fax9 38ONr4cI3DvWLIPOal3rPl4NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHEOrKUks ve65Jdh/Inpl4Ni8oHcwHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHq1iIrJj/ZqjUdfNwbNecM55E5cvYcjiRdopPEtISe5S1M3zR7ERkS Cjo+7Bee2LAh+O5/b2cuLRV4ej22aEAbfqK2I7WKYCY3EfElTJ7w6RTXw+1NePxC Cr+s4a8wh0kNWCjdRaVlNGIij/zp4AMTujYEHIFNpW2eX7dn9HoHtlrrqgQ6orLD S3UHjhU9X/ZMx+nhswyjAeP/5W0+koi3d2XOZ0D56kDqe4ZGq4vOS92/TPH7R8vV mUGIeK02Lxt5zpLenyLabe0EJ2iOBLjoPZgV7UrJElMWpDsmYhfxRTRxvmhWM4aN haSaphNqMQv5S1gkCv2hjVb3jXuVrNM= -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:33 2025 by rpki-client