$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: AgJ3OgsdG2ISZuydANH6CI+UkaScjJ1FmmqMjQvgnDc= Subject key identifier: BC:B8:07:6E:CD:CF:B7:A4:2D:18:FF:83:8E:23:3B:07:D2:9D:B4:87 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02F0 Signing time: Sat 09 Aug 2025 01:49:48 +0000 Manifest this update: Sat 09 Aug 2025 01:49:48 +0000 Manifest next update: Sat 16 Aug 2025 01:49:48 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: RTiQGDB25G2LXdsQ1xKGZg34rb9g1vjM/lf/7dDR/GM=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Aug 9 01:49:48 2025 GMT Not After : Aug 16 01:49:48 2025 GMT Subject: CN=6896a93c-b487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:a0:cc:d0:36:fd:ed:43:28:c2:f0:ac:a9: 1c:b6:84:76:ca:4b:8a:6a:2d:a4:b6:99:71:ec:71: 70:cd:a9:2d:04:59:b2:e9:7f:96:d1:f0:bc:04:bb: 5a:ec:83:02:31:66:d1:f2:7d:08:de:e9:4b:00:64: b4:b0:ce:f0:76:dd:97:5a:98:7d:e6:9f:b0:98:a3: 36:5c:9c:9b:91:61:3a:19:c6:ac:17:a5:31:66:dd: 91:d8:5c:0a:f4:77:3b:79:d2:33:13:9e:60:98:d8: 28:38:40:fb:30:1a:03:49:15:b7:1d:0e:d3:b7:9c: a0:2e:a9:35:0f:d6:93:13:9e:01:d9:0e:b3:ef:51: 68:fd:9a:78:20:8f:3c:16:82:38:97:9c:11:f9:8a: cd:4e:2d:ab:5b:8f:ac:ed:80:6e:f7:c5:31:68:12: ec:9d:a3:64:d1:f3:ef:9a:3a:b2:d0:28:fe:46:32: 32:3b:3f:b6:80:c3:36:a5:6b:0d:82:4b:96:3c:42: 20:ba:cd:24:2d:84:79:d1:62:8f:1e:a7:fd:59:20: aa:4b:b6:01:27:f1:30:1b:78:c8:51:21:89:6e:00: 94:2c:50:4f:c1:6f:ef:75:64:53:55:d4:b1:c9:e1: ed:cd:55:5f:ae:54:3e:55:0c:33:5b:57:90:69:f7: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:07:6E:CD:CF:B7:A4:2D:18:FF:83:8E:23:3B:07:D2:9D:B4:87 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:db:0e:ac:1e:dd:b2:7e:41:cf:78:93:7e:b5:20:75:f3: f5:33:5f:21:48:b1:a2:ed:9e:88:c5:c0:01:e3:bb:b2:fb:72: b9:2a:b6:1f:06:10:b2:43:a4:bc:77:0a:eb:66:2d:7a:48:9a: 6e:49:87:b6:d4:27:85:1a:c4:68:14:0c:5a:a3:67:37:68:bd: c4:84:73:29:8d:e7:4a:70:77:32:9d:4c:85:19:81:b8:9e:6b: 78:4b:37:cc:6e:85:30:18:7f:db:8b:b6:62:34:1b:b1:97:42: a1:3a:91:22:f6:ca:9e:6c:cf:7f:eb:4e:29:a5:d9:61:68:45: bd:d7:9e:e6:fa:17:df:8f:1d:48:b3:f7:dd:92:c6:8c:e1:25: be:34:74:dc:86:a6:fb:57:52:20:4e:30:18:4a:69:b7:6d:03: 0c:c6:ee:14:08:26:55:2d:8a:d5:64:94:04:56:3b:13:1b:2f: f3:23:35:af:46:ea:34:1b:58:af:89:83:d1:d7:ae:09:be:9e: 0f:6c:13:b3:d9:38:93:3d:72:68:8f:6a:68:95:b8:40:ae:1f: a7:e9:f6:bb:8a:63:6c:d8:02:8e:ae:1a:16:ba:94:83:67:9a: ba:48:65:fa:f6:5b:4c:26:e7:9c:3f:f8:e8:02:24:87:13:69: 53:05:1f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwODA5MDE0OTQ4WhcNMjUwODE2MDE0OTQ4WjAYMRYwFAYD VQQDEw02ODk2YTkzYy1iNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5q6gzNA2/e1DKMLwrKkctoR2ykuKai2ktplx7HFwzaktBFmy6X+W0fC8BLta 7IMCMWbR8n0I3ulLAGS0sM7wdt2XWph95p+wmKM2XJybkWE6GcasF6UxZt2R2FwK 9Hc7edIzE55gmNgoOED7MBoDSRW3HQ7Tt5ygLqk1D9aTE54B2Q6z71Fo/Zp4II88 FoI4l5wR+YrNTi2rW4+s7YBu98UxaBLsnaNk0fPvmjqy0Cj+RjIyOz+2gMM2pWsN gkuWPEIgus0kLYR50WKPHqf9WSCqS7YBJ/EwG3jIUSGJbgCULFBPwW/vdWRTVdSx yeHtzVVfrlQ+VQwzW1eQafc4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy4B27N z7ekLRj/g44jOwfSnbSHMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaOdsOrB7dsn5Bz3iTfrUgdfP1M18hSLGi7Z6IxcAB47uy+3K5KrYf BhCyQ6S8dwrrZi16SJpuSYe21CeFGsRoFAxao2c3aL3EhHMpjedKcHcynUyFGYG4 nmt4SzfMboUwGH/bi7ZiNBuxl0KhOpEi9sqebM9/604ppdlhaEW9157m+hffjx1I s/fdksaM4SW+NHTchqb7V1IgTjAYSmm3bQMMxu4UCCZVLYrVZJQEVjsTGy/zIzWv Ruo0G1iviYPR164Jvp4PbBOz2TiTPXJoj2polbhArh+n6fa7imNs2AKOrhoWupSD Z5q6SGX69ltMJuecP/joAiSHE2lTBR/J -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:51 2025 by rpki-client