$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: I8MK162m6S6zMPsTIluXDcxWe97cl+vLBhRfdgm6nOU= Subject key identifier: C5:BC:B5:E2:4C:A5:2F:4A:42:AF:6A:D1:38:9D:4D:46:5F:B5:D9:A1 Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: 80 Signing time: Thu 07 Aug 2025 07:17:49 +0000 Manifest this update: Thu 07 Aug 2025 07:17:48 +0000 Manifest next update: Thu 14 Aug 2025 07:17:48 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: fjX6ACdOcZRdr0dOVDS6Tcd+R+A08ClipeUpEJ9dZas=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: pawwhpt8xl4Jm5tUlNLFvNNRwT1g8ks5JKIz2Wod4KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Aug 7 07:17:48 2025 GMT Not After : Aug 14 07:17:48 2025 GMT Subject: CN=6894531d-ab48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:04:36:fb:c1:4f:ea:17:a5:c1:fd:ee:51:48: 02:00:9e:71:d8:1b:3e:f1:98:8a:7c:5f:08:c1:67: 91:16:dd:00:d6:90:19:e6:ab:8c:14:39:ee:86:0d: 91:19:a5:5a:7f:5a:9b:e1:21:b2:b9:bc:81:d0:b9: 56:03:9a:dc:d7:d9:51:15:c3:1a:d2:cf:fe:f3:a7: 1d:15:3b:5d:12:a6:e9:06:a2:7e:c6:22:6d:b1:aa: 79:78:0c:20:51:79:a8:e8:bb:1d:b4:43:e1:b9:76: 21:4c:ab:97:f8:5c:1b:60:35:30:8a:66:f4:87:ba: d2:fe:f6:f9:ab:64:b7:6b:7c:10:56:2e:c0:a3:24: 86:08:1f:1f:78:af:57:04:2e:ca:97:cd:1b:26:35: ad:36:85:dd:ee:3b:a8:bb:dd:40:9e:75:fe:75:f9: 68:57:3f:14:91:a1:d0:e3:c9:6f:10:30:ae:a0:ce: 45:fa:1e:ee:ed:eb:92:21:6b:94:74:ba:87:c2:bb: 23:93:51:ab:66:ec:21:45:0c:92:0a:a1:cf:a4:50: ce:fd:38:37:81:22:cd:c5:8d:c0:96:35:3d:aa:fb: 53:7f:f2:1b:f2:9d:5e:ce:a1:ae:bc:dc:13:ea:0a: e2:f4:86:e8:73:f8:81:aa:2d:b6:81:dc:8f:dc:f4: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:B5:E2:4C:A5:2F:4A:42:AF:6A:D1:38:9D:4D:46:5F:B5:D9:A1 X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:85:f4:74:46:a9:32:a7:32:17:04:3f:c1:a9:d6:8f:7d: bd:35:f4:70:19:49:2a:01:b7:39:b8:29:ed:f5:50:cc:89:6b: 8f:d6:28:fc:90:10:e5:03:a4:66:b8:bf:96:80:ba:97:77:5c: 92:59:bb:65:ba:46:ea:91:74:16:f4:c8:6d:cf:1e:80:8d:32: 84:e2:94:79:74:da:b4:94:89:21:bb:79:6a:1f:9d:ff:db:39: 42:2e:ae:18:ae:bc:91:9b:97:ba:25:ac:5b:71:11:67:1e:58: aa:9d:a2:6e:3e:45:3f:b7:14:2e:73:9c:cf:c8:b5:f0:2f:4d: 5e:8c:60:60:0e:5d:76:ee:ec:ed:ec:29:5e:7b:21:00:a1:e7: 5f:f3:d3:85:8d:07:d6:7d:e0:2a:44:30:8b:93:9c:ca:e8:ee: c6:a0:fb:9a:9e:2a:aa:6d:c3:99:fc:03:b1:0d:10:bb:45:02: 3b:a2:76:8f:ee:16:51:14:2d:d7:b6:8c:11:0c:6b:b9:82:4b: b8:1f:92:bc:e3:dc:6c:6d:87:8c:b3:44:22:91:c2:66:ba:f4: 3f:57:93:da:36:a1:50:eb:9e:98:4a:db:33:cf:e2:de:db:74: d9:56:ca:8e:8f:2c:c0:12:b9:95:b2:cb:66:54:85:5c:ec:44: c3:96:7d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjUwODA3MDcxNzQ4WhcNMjUwODE0MDcxNzQ4WjAYMRYwFAYD VQQDEw02ODk0NTMxZC1hYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wQ2+8FP6helwf3uUUgCAJ5x2Bs+8ZiKfF8IwWeRFt0A1pAZ5quMFDnuhg2R GaVaf1qb4SGyubyB0LlWA5rc19lRFcMa0s/+86cdFTtdEqbpBqJ+xiJtsap5eAwg UXmo6LsdtEPhuXYhTKuX+FwbYDUwimb0h7rS/vb5q2S3a3wQVi7AoySGCB8feK9X BC7Kl80bJjWtNoXd7juou91AnnX+dfloVz8UkaHQ48lvEDCuoM5F+h7u7euSIWuU dLqHwrsjk1GrZuwhRQySCqHPpFDO/Tg3gSLNxY3AljU9qvtTf/Ib8p1ezqGuvNwT 6gri9Iboc/iBqi22gdyP3PR0hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW8teJM pS9KQq9q0TidTUZftdmhMB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa T09CMldhZVVpRnFjaUVHUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5I4X0dEapMqcyFwQ/wanWj329NfRwGUkqAbc5uCnt9VDMiWuP1ij8 kBDlA6RmuL+WgLqXd1ySWbtlukbqkXQW9Mhtzx6AjTKE4pR5dNq0lIkhu3lqH53/ 2zlCLq4YrryRm5e6JaxbcRFnHliqnaJuPkU/txQuc5zPyLXwL01ejGBgDl127uzt 7CleeyEAoedf89OFjQfWfeAqRDCLk5zK6O7GoPuaniqqbcOZ/AOxDRC7RQI7onaP 7hZRFC3XtowRDGu5gku4H5K849xsbYeMs0QikcJmuvQ/V5PaNqFQ656YStszz+Le 23TZVsqOjyzAErmVsstmVIVc7ETDln2L -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:10 2025 by rpki-client