$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: 97uyBaSpeZ8tX6Ye8fYN4xYa0pTTeRzZHz5YbBsa/LE= Subject key identifier: C5:2C:AE:F2:C7:95:89:AC:27:28:2D:05:84:87:A8:17:BC:15:30:E7 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 0A Signing time: Sat 09 Aug 2025 08:42:27 +0000 Manifest this update: Sat 09 Aug 2025 08:42:26 +0000 Manifest next update: Sat 16 Aug 2025 08:42:26 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: PU0j0SUwOS/0Hl/9Ondclwsl5kUD8/mejFA3qQtKQxg=) 2: 2DB602706DE511F0B0D13E21C4F9AE02.roa (hash: xplHdQzRmeC1vA5Qxhl/QWUYcgFXGAc5Lm3iGDrg6/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Aug 9 08:42:26 2025 GMT Not After : Aug 16 08:42:26 2025 GMT Subject: CN=689709f3-f5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:c6:47:1a:1a:cb:9e:a2:f1:5d:60:2d:0f: 70:7c:83:fc:88:83:96:a1:f4:f3:bb:ed:79:55:90: a8:fa:c2:1f:d8:f3:85:a4:2b:4c:c7:3b:c4:62:cf: f3:12:60:d0:3c:91:98:1e:ae:d9:77:6e:54:d4:38: 88:db:70:b6:42:c2:1a:65:0c:3f:8b:38:5a:8d:cd: 5d:2a:c6:6f:14:89:cd:17:75:3a:e5:62:59:e9:4a: 2d:19:4c:32:6a:38:ff:c1:df:b5:9c:76:b4:95:24: e5:6a:90:49:31:90:47:f1:89:fd:ea:0d:47:fe:78: 1f:c3:7a:75:04:e8:25:f4:17:46:6d:78:cc:17:b3: e8:fb:22:3e:97:7e:d9:51:c7:4b:9c:85:9a:18:6a: cb:49:ff:ff:ca:13:04:8f:8c:9f:72:73:c4:07:7a: 45:24:c7:f7:f2:e8:1d:00:b0:e6:88:50:73:75:db: d4:21:3e:88:14:27:9c:d1:be:84:f8:88:2c:f2:e3: 69:79:95:59:88:22:bc:85:07:74:95:98:7f:d5:7e: 88:9f:41:2c:c7:b8:80:29:37:e8:62:ab:fc:ff:a9: 86:93:c6:ae:f8:c9:7b:06:b8:ea:0a:f8:21:09:b5: e8:d3:45:9b:aa:2f:5e:f4:ce:9e:97:cc:9a:b6:8d: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:AE:F2:C7:95:89:AC:27:28:2D:05:84:87:A8:17:BC:15:30:E7 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a4:9c:bc:9b:11:da:11:9c:9b:60:21:1c:9a:19:d3:33:b9: f3:c6:ca:ab:bb:b6:90:75:97:56:df:ba:1d:75:9c:df:a4:ba: b2:0a:7b:50:b6:71:ad:38:d3:81:9e:b1:61:69:d7:e4:2b:16: 7a:da:94:8c:89:39:5b:d4:57:2f:3e:f5:be:dc:96:48:fc:f4: af:58:89:1b:34:65:d1:28:a0:a4:8f:50:de:a5:85:c6:73:c2: f2:19:6d:98:28:80:43:06:37:82:f9:b3:30:42:90:b6:a4:07: c8:ea:ec:95:9b:c3:e2:4f:f5:86:37:cf:12:de:33:bf:c0:10: e6:a6:16:3a:74:96:d1:56:94:a1:46:22:c3:e1:52:4b:20:a1: 42:9a:49:25:26:df:bb:86:2d:30:87:ea:4e:0e:53:69:82:c0: 8d:fa:a0:ca:95:5b:ff:80:b9:f9:ac:70:6a:bd:b4:21:46:40: 9b:08:80:98:c2:ee:bf:04:75:c6:24:aa:ed:90:c9:43:ab:35: e1:c9:73:a3:10:c3:f0:0f:d1:a4:17:c7:57:8f:0f:db:d8:3e: c5:56:63:72:a5:21:50:37:2a:2a:08:76:81:5b:ef:a0:33:d7: 7d:fc:be:95:27:9d:94:93:77:8c:47:f0:c7:06:58:dd:b2:23: 83:fe:8f:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTA4MDkwODQyMjZaFw0yNTA4MTYwODQyMjZaMBgxFjAUBgNV BAMTDTY4OTcwOWYzLWY1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMq8ZHGhrLnqLxXWAtD3B8g/yIg5ah9PO77XlVkKj6wh/Y84WkK0zHO8Riz/MS YNA8kZgertl3blTUOIjbcLZCwhplDD+LOFqNzV0qxm8Uic0XdTrlYlnpSi0ZTDJq OP/B37WcdrSVJOVqkEkxkEfxif3qDUf+eB/DenUE6CX0F0ZteMwXs+j7Ij6XftlR x0uchZoYastJ///KEwSPjJ9yc8QHekUkx/fy6B0AsOaIUHN129QhPogUJ5zRvoT4 iCzy42l5lVmIIryFB3SVmH/VfoifQSzHuIApN+hiq/z/qYaTxq74yXsGuOoK+CEJ tejTRZuqL170zp6XzJq2jQRzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxSyu8seV iawnKC0FhIeoF7wVMOcwHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OUI1L0IyMjY2RkQyNkRFNDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1Qz cWk2Vy1uWEc0eTdOREE1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmknLybEdoRnJtgIRyaGdMzufPGyqu7tpB1l1bfuh11nN+kurIKe1C2 ca0404GesWFp1+QrFnralIyJOVvUVy8+9b7clkj89K9YiRs0ZdEooKSPUN6lhcZz wvIZbZgogEMGN4L5szBCkLakB8jq7JWbw+JP9YY3zxLeM7/AEOamFjp0ltFWlKFG IsPhUksgoUKaSSUm37uGLTCH6k4OU2mCwI36oMqVW/+AufmscGq9tCFGQJsIgJjC 7r8EdcYkqu2QyUOrNeHJc6MQw/AP0aQXx1ePD9vYPsVWY3KlIVA3KioIdoFb76Az 1338vpUnnZSTd4xH8McGWN2yI4P+j6s= -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:58 2025 by rpki-client