$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: I0WbsopQ3yjq1hwgBnjJKsicKRxpa66hk9yUttoxq9Y= Subject key identifier: 4A:6F:15:CB:BA:1C:DB:B7:AB:B9:F1:64:B7:9B:1D:31:AF:F7:90:D6 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 0386 Signing time: Mon 11 Aug 2025 02:05:42 +0000 Manifest this update: Mon 11 Aug 2025 02:05:42 +0000 Manifest next update: Mon 18 Aug 2025 02:05:42 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: vryfOrCgjK7E1lov0jOaGLsXp0nnwboeO0PuHkvBZLc=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: SCTf0mwZLUHqFVPegVRVJr7Eh8lVpCyL1GKCV+U6N7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: Aug 11 02:05:42 2025 GMT Not After : Aug 18 02:05:42 2025 GMT Subject: CN=68994ff6-b5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:2d:49:f8:cf:80:50:2f:aa:82:5b:62:0c: 26:e3:b4:79:f5:0f:4c:fa:64:48:40:0d:af:83:eb: d0:1b:23:13:98:71:50:2e:0f:13:9b:b1:1c:0c:af: 24:51:de:63:5d:50:c6:72:d3:bb:91:79:0f:78:77: 8b:ec:56:b1:1b:49:e9:00:01:9a:f7:da:d2:12:9f: ab:18:7b:a1:3e:8c:dc:46:32:eb:01:8f:ba:49:38: 4c:8e:fc:3a:fc:6b:49:6e:d9:2a:71:fc:a9:8b:6e: 27:2a:fa:dd:fd:97:90:4c:cd:a3:e4:7a:c5:0e:cf: eb:41:d7:4c:15:a6:d1:c9:b0:52:bb:56:ef:f0:a1: e4:85:67:42:d1:6b:3f:1a:42:fb:c7:70:8c:d5:fc: b5:76:d7:e2:59:37:1d:83:0b:76:e6:64:7e:fd:07: 91:29:1b:ab:ad:3c:46:ae:10:b4:b1:d2:c6:a1:18: cc:95:75:37:62:93:49:ee:93:79:f6:05:c4:8a:fe: 44:77:0c:fc:eb:4b:93:cc:cd:b1:90:a5:d2:8c:41: 3e:15:b7:e0:c8:93:1d:89:5e:26:9a:98:1d:3e:af: b9:7c:46:94:4c:91:0d:61:33:f0:0f:26:98:a8:39: d8:62:e2:88:a5:cd:02:9e:c9:ce:8a:a4:62:3b:72: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6F:15:CB:BA:1C:DB:B7:AB:B9:F1:64:B7:9B:1D:31:AF:F7:90:D6 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:59:2b:8a:64:8e:8a:f3:a2:a2:70:8e:32:50:3e:d6:32:81: 83:98:c8:70:0d:6d:d2:06:16:bf:fe:d7:47:89:bf:45:c4:4d: 26:23:71:ee:81:4a:dc:c8:3d:93:af:56:9c:cd:ff:e6:15:2a: 43:c7:d3:ea:4d:60:c7:e1:6f:97:99:d5:99:4e:40:f8:cf:b7: 4a:63:e1:80:e1:d1:de:98:41:9e:57:09:40:8e:98:ab:74:5a: 11:a7:2c:5a:14:31:76:a1:d3:93:a1:66:5c:a4:52:76:65:c8: 88:b1:f9:4f:6c:a3:44:ae:69:36:ce:86:9f:39:c8:9d:e8:65: 8e:7a:cb:89:4e:68:a6:48:6e:65:c1:af:69:fe:ac:01:e1:28: 0b:35:13:f9:55:9d:a3:a3:1c:b9:49:e6:33:b9:9e:c7:71:fc: 64:96:c0:3e:62:49:19:0a:34:b6:2e:00:03:ac:66:19:91:3c: 5f:be:61:0c:48:b5:bc:d9:a5:11:49:0e:12:58:d7:ef:82:2f: f2:07:cf:a9:63:2d:a3:3a:38:36:dc:b2:a0:ef:54:f7:27:47: ae:bb:3a:b6:f1:e3:f4:2f:94:eb:a5:24:7c:f9:76:39:2a:b8: 2d:b3:e2:e0:eb:c8:6f:d7:47:49:49:8d:08:cf:07:13:00:f8: 34:0b:4e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKEI0OENCMTgwODI2MkI4MDk5Qjg3MjcyQTU3NkZGRURD MTlBMzk2QkQwHhcNMjUwODExMDIwNTQyWhcNMjUwODE4MDIwNTQyWjAYMRYwFAYD VQQDEw02ODk5NGZmNi1iNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgctSfjPgFAvqoJbYgwm47R59Q9M+mRIQA2vg+vQGyMTmHFQLg8Tm7EcDK8k Ud5jXVDGctO7kXkPeHeL7FaxG0npAAGa99rSEp+rGHuhPozcRjLrAY+6SThMjvw6 /GtJbtkqcfypi24nKvrd/ZeQTM2j5HrFDs/rQddMFabRybBSu1bv8KHkhWdC0Ws/ GkL7x3CM1fy1dtfiWTcdgwt25mR+/QeRKRurrTxGrhC0sdLGoRjMlXU3YpNJ7pN5 9gXEiv5Edwz860uTzM2xkKXSjEE+FbfgyJMdiV4mmpgdPq+5fEaUTJENYTPwDyaY qDnYYuKIpc0CnsnOiqRiO3IieQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpvFcu6 HNu3q7nxZLebHTGv95DWMB8GA1UdIwQYMBaAFLSMsYCCYrgJm4cnKldv/twZo5a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVBbWJoeWNxVjJfLTNCbWps cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0JtamxyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVB bWJoeWNxVjJfLTNCbWpscjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApWSuKZI6K86KicI4yUD7WMoGDmMhwDW3SBha//tdHib9FxE0mI3Hu gUrcyD2Tr1aczf/mFSpDx9PqTWDH4W+XmdWZTkD4z7dKY+GA4dHemEGeVwlAjpir dFoRpyxaFDF2odOToWZcpFJ2ZciIsflPbKNErmk2zoafOcid6GWOesuJTmimSG5l wa9p/qwB4SgLNRP5VZ2joxy5SeYzuZ7HcfxklsA+YkkZCjS2LgADrGYZkTxfvmEM SLW82aURSQ4SWNfvgi/yB8+pYy2jOjg23LKg71T3J0euuzq28eP0L5TrpSR8+XY5 Krgts+Lg68hv10dJSY0IzwcTAPg0C07c -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:34 2025 by rpki-client