$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: OoP+1Vwui5jHNZ57t7vpUjW+jBuQmAFhhL4NgyBtJEY= Subject key identifier: 82:DB:7C:F6:30:7A:FD:95:35:0D:6C:80:8E:7B:0C:AD:9A:79:5E:3C Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 05DF Signing time: Sun 10 Aug 2025 23:05:26 +0000 Manifest this update: Sun 10 Aug 2025 23:05:26 +0000 Manifest next update: Sun 17 Aug 2025 23:05:26 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: 1tc4NpR4r9xoSlyggn5BepcbG3DxzwRJtdVr2W0ccsQ=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Aug 10 23:05:26 2025 GMT Not After : Aug 17 23:05:26 2025 GMT Subject: CN=689925b6-ca25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:47:93:db:29:81:bf:3e:1e:3c:8c:3a:7e: e5:67:8d:80:33:da:de:36:55:5e:5d:ad:06:e2:5b: 32:ca:ca:11:27:f1:1a:7a:50:c4:28:d0:77:cc:63: 14:9b:74:ae:03:24:b1:e2:b2:5b:df:0b:ee:f0:ad: 1e:65:27:ee:11:2b:44:68:86:1e:20:9b:e7:e1:d1: 36:83:4d:d5:b1:55:61:aa:a6:33:22:13:c0:59:44: cc:b7:c6:77:75:b6:cf:eb:11:ed:32:cb:78:71:76: 3a:1d:6e:40:93:51:1a:b3:4e:a1:16:6a:6d:a9:c0: 65:53:a4:ee:d0:0c:e8:d7:6d:70:61:6b:15:e3:ec: a7:77:98:7b:f6:85:55:40:06:db:85:ba:e0:9b:89: 50:44:61:72:6a:03:f4:61:8d:f6:5e:77:7a:af:71: 90:0b:c5:57:2a:d4:5a:b6:de:a3:85:46:81:d6:82: f4:e8:c0:ab:c0:85:18:3b:0a:a3:bd:56:1a:ad:bf: 33:fe:09:7d:fd:e3:59:ca:4f:e3:ce:9d:5b:34:b2: 6f:ee:4c:bb:ab:a9:34:46:57:03:11:77:2c:3f:e2: 00:de:8c:15:64:cb:e8:3f:23:eb:38:75:e0:a3:c4: c0:41:09:60:95:b3:8e:58:6a:9c:33:79:ab:4e:e1: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DB:7C:F6:30:7A:FD:95:35:0D:6C:80:8E:7B:0C:AD:9A:79:5E:3C X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:02:95:fb:bb:e7:97:6d:af:e9:2f:4f:c8:81:a8:67:43:c1: ef:b3:0d:7e:34:91:3a:4e:db:e9:ee:0c:a8:aa:0a:88:71:8d: 6e:cc:c3:a7:38:85:77:cc:d1:69:48:68:ac:fb:ca:5e:a7:79: 8e:72:86:87:4b:a4:3d:49:8f:8f:2c:36:f2:d9:79:98:01:1e: 2b:a6:c8:2d:ff:54:58:d4:23:9d:5f:d9:6a:ad:28:9e:98:f8: d2:68:52:55:47:7c:bb:d8:97:23:fd:6f:3f:97:13:e5:75:ba: 8a:67:4f:fa:83:55:c5:59:55:e2:e3:98:62:7a:6a:50:39:ce: 9e:14:c1:f9:a3:fb:80:6c:59:33:26:ea:2c:8a:a2:4f:57:f3: 6e:89:1b:14:e4:65:bc:4c:3c:0b:61:7f:a4:ae:9b:50:a7:90: 24:ad:11:f1:8f:3b:b1:bb:5a:de:1f:12:84:a6:5c:ee:b5:58: f8:4d:03:c0:13:b6:50:7e:0c:3e:f1:3d:1d:28:ce:bd:c6:05: 49:83:74:8c:6f:b3:11:7f:83:86:37:2d:6c:0d:cb:3f:51:5e: 97:bb:59:5a:ba:63:9e:44:0c:72:26:12:db:92:84:41:c9:f3: 8b:ea:e1:6a:a8:b7:c2:bd:ed:55:28:14:e6:89:1f:4a:6b:8d: 3a:c3:7c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUwODEwMjMwNTI2WhcNMjUwODE3MjMwNTI2WjAYMRYwFAYD VQQDEw02ODk5MjViNi1jYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbdHk9spgb8+HjyMOn7lZ42AM9reNlVeXa0G4lsyysoRJ/EaelDEKNB3zGMU m3SuAySx4rJb3wvu8K0eZSfuEStEaIYeIJvn4dE2g03VsVVhqqYzIhPAWUTMt8Z3 dbbP6xHtMst4cXY6HW5Ak1Eas06hFmptqcBlU6Tu0Azo121wYWsV4+ynd5h79oVV QAbbhbrgm4lQRGFyagP0YY32Xnd6r3GQC8VXKtRatt6jhUaB1oL06MCrwIUYOwqj vVYarb8z/gl9/eNZyk/jzp1bNLJv7ky7q6k0RlcDEXcsP+IA3owVZMvoPyPrOHXg o8TAQQlglbOOWGqcM3mrTuGMFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILbfPYw ev2VNQ1sgI57DK2aeV48MB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFApX7u+eXba/pL0/IgahnQ8Hvsw1+NJE6Ttvp7gyoqgqIcY1uzMOn OIV3zNFpSGis+8pep3mOcoaHS6Q9SY+PLDby2XmYAR4rpsgt/1RY1COdX9lqrSie mPjSaFJVR3y72Jcj/W8/lxPldbqKZ0/6g1XFWVXi45hiempQOc6eFMH5o/uAbFkz JuosiqJPV/NuiRsU5GW8TDwLYX+krptQp5AkrRHxjzuxu1reHxKEplzutVj4TQPA E7ZQfgw+8T0dKM69xgVJg3SMb7MRf4OGNy1sDcs/UV6Xu1laumOeRAxyJhLbkoRB yfOL6uFqqLfCve1VKBTmiR9Ka406w3x9 -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:33 2025 by rpki-client