$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: V7G8Na81gv5Y2+BBfC1L2sRGAdrcbgqGaLvw48IVPWc= Subject key identifier: E9:6B:4E:DF:29:B8:03:D7:BC:A8:9C:7E:99:EB:9B:35:90:BD:47:96 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B2B Signing time: Sun 10 Aug 2025 19:14:39 +0000 Manifest this update: Sun 10 Aug 2025 19:14:39 +0000 Manifest next update: Sun 17 Aug 2025 19:14:39 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: EWVnzl80UbwT2RvoudiqE+rcIPC1hechmYvglGFm09E=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Aug 10 19:14:39 2025 GMT Not After : Aug 17 19:14:39 2025 GMT Subject: CN=6898ef9f-db2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:02:17:6f:0c:b4:5a:70:70:d7:21:d3:34: 90:46:e2:11:d4:82:25:55:9f:48:b9:7e:c8:ba:3c: 58:0b:29:a3:48:44:b9:aa:4e:e7:1a:65:6f:51:37: 40:32:32:f7:de:70:65:d1:64:c5:d1:a5:9c:ed:6c: 60:13:79:0c:70:3b:b8:cd:cc:fb:39:76:1a:b7:e5: c4:3c:44:dd:ea:09:e3:aa:f3:b3:fb:a5:7f:d2:64: 0c:5e:96:d7:1e:c4:9d:d8:d0:ec:a4:e9:fe:0c:98: 63:b3:f6:20:1b:10:90:64:90:a4:84:e1:52:0f:f9: 8a:e0:d7:18:dd:29:d5:03:46:bd:42:ce:17:c3:d3: 37:91:7a:71:aa:8f:87:91:a6:e9:f2:f5:4a:ec:bd: f1:5a:40:5a:8e:02:13:91:0d:b5:73:a2:3b:a7:60: 99:c0:e2:d8:45:ac:8a:5c:12:23:84:80:19:54:0c: 8c:02:87:91:0b:82:85:81:3d:92:8f:6d:f5:7c:58: 28:07:30:65:36:24:dd:a0:14:89:b2:8a:60:e6:7a: 26:99:44:43:26:9e:4a:c3:42:3d:fa:77:ae:f5:a5: a4:b4:bf:99:a5:fb:0d:49:1d:24:8e:85:55:3d:57: d3:0b:7a:d4:f2:02:3a:21:f7:1d:c4:ac:8e:d2:cb: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6B:4E:DF:29:B8:03:D7:BC:A8:9C:7E:99:EB:9B:35:90:BD:47:96 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d9:6b:3a:22:d1:76:dd:f6:37:ec:96:32:89:9c:20:5b:33: 99:d0:35:b4:33:00:2c:37:e4:c7:36:dd:72:64:f1:2f:51:2a: 7f:59:7a:f8:b7:b1:fa:d4:c1:8d:3b:76:f2:3e:23:78:0c:c9: 47:b6:88:ac:9a:a1:f9:41:48:66:61:15:bb:70:c8:c1:d7:e3: 05:4d:d3:ad:28:f8:a9:c5:4f:8d:5b:e1:05:ef:94:e8:91:e1: fa:94:15:19:27:80:cf:34:05:6f:69:e2:c4:9e:87:1a:02:49: e0:99:60:a3:df:03:4c:a8:03:51:61:94:cf:0b:5b:ad:20:a6: 0b:a5:dc:80:36:2b:f3:21:59:6f:10:32:e9:a1:f2:61:90:26: f2:e0:22:27:a2:b9:ce:a0:af:1d:14:16:db:76:ca:86:9e:03: 6b:17:a9:19:42:0a:2f:67:82:00:d4:ef:f1:d8:31:76:d4:34: 36:80:af:d9:52:0a:47:77:74:d9:f0:ab:10:92:18:82:c5:fa: bb:17:ff:ce:0c:8f:57:91:f9:41:57:36:cb:ec:3a:5c:a1:27: 24:dd:d3:0d:16:5a:b4:f3:e7:b7:8b:d8:48:c1:99:2b:b4:b3: 86:71:7f:1f:b7:60:22:11:13:fd:37:f9:e8:fb:6e:61:2b:04: 68:85:27:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUwODEwMTkxNDM5WhcNMjUwODE3MTkxNDM5WjAYMRYwFAYD VQQDEw02ODk4ZWY5Zi1kYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFQCF28MtFpwcNch0zSQRuIR1IIlVZ9IuX7IujxYCymjSES5qk7nGmVvUTdA MjL33nBl0WTF0aWc7WxgE3kMcDu4zcz7OXYat+XEPETd6gnjqvOz+6V/0mQMXpbX HsSd2NDspOn+DJhjs/YgGxCQZJCkhOFSD/mK4NcY3SnVA0a9Qs4Xw9M3kXpxqo+H kabp8vVK7L3xWkBajgITkQ21c6I7p2CZwOLYRayKXBIjhIAZVAyMAoeRC4KFgT2S j231fFgoBzBlNiTdoBSJsopg5nommURDJp5Kw0I9+neu9aWktL+ZpfsNSR0kjoVV PVfTC3rU8gI6IfcdxKyO0ss7FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlrTt8p uAPXvKicfpnrmzWQvUeWMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE2Ws6ItF23fY37JYyiZwgWzOZ0DW0MwAsN+THNt1yZPEvUSp/WXr4 t7H61MGNO3byPiN4DMlHtoismqH5QUhmYRW7cMjB1+MFTdOtKPipxU+NW+EF75To keH6lBUZJ4DPNAVvaeLEnocaAkngmWCj3wNMqANRYZTPC1utIKYLpdyANivzIVlv EDLpofJhkCby4CInornOoK8dFBbbdsqGngNrF6kZQgovZ4IA1O/x2DF21DQ2gK/Z UgpHd3TZ8KsQkhiCxfq7F//ODI9XkflBVzbL7DpcoSck3dMNFlq08+e3i9hIwZkr tLOGcX8ft2AiERP9N/no+25hKwRohSc8 -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:38 2025 by rpki-client