$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json) Hash identifier: y9voc0cOsLi4xJDiS79TFvdho9H3TL+9uGYb3Y0Eo3w= Subject key identifier: C3:4D:E0:17:AC:A6:8E:7A:5E:EE:21:FB:01:3D:B2:80:70:7C:7C:2B Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft Manifest number: 0937 Signing time: Sun 10 Aug 2025 20:15:55 +0000 Manifest this update: Sun 10 Aug 2025 20:15:55 +0000 Manifest next update: Sun 17 Aug 2025 20:15:55 +0000 Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: 48sfLkMvy/z+oLkmrLxGCp9LRueivrN4Xp+1ocAyyyc=) 2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: p54CFofowbUbktzQ5l2cM2w3M6idGp06vDW+Qt3EoTM=) 3: B350B67E964611EDA10D8777C4F9AE02.roa (hash: dqgw7Vjah1kgl1Eb2Qsi3T+K4Ggh+1iUdEI4VBpnCIA=) 4: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: 69e6c/vHo1P1XZkYWN+UCZupbdC0oSmCyhIpttIVtDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Aug 10 20:15:55 2025 GMT Not After : Aug 17 20:15:55 2025 GMT Subject: CN=6898fdfb-0092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:66:80:d5:38:8b:6b:d6:ba:54:ac:49:cb: 18:40:ff:f0:20:47:2c:0c:eb:b6:e6:73:4e:d4:ff: 22:0a:01:ef:5e:cc:d5:5f:af:c5:fb:fd:ff:25:62: 26:3e:e9:61:b3:e3:23:b7:ae:b2:62:ac:08:76:64: 44:aa:eb:3f:de:86:d8:af:49:b0:42:5d:82:6f:c1: ac:4a:88:21:b9:b0:f9:a5:1b:aa:36:04:e8:0a:7b: 28:54:9d:82:3b:8b:3e:bf:99:cb:a8:ba:bb:0f:c2: 9a:7a:5e:4c:25:a0:53:b2:5e:07:79:7b:52:56:7d: 0d:15:20:16:c3:f2:ef:4c:e2:13:98:e9:c6:83:a5: 14:3b:ad:2a:b4:63:cc:85:fc:75:79:35:6b:8b:e6: d2:5b:54:48:5b:55:7a:53:d9:68:14:84:a5:5a:c3: 15:0b:56:a4:65:7b:6f:19:18:dd:01:95:9f:82:51: 5b:a0:fb:63:0f:23:76:d6:79:c3:44:08:df:9d:70: 30:89:5c:2b:64:8c:ec:43:df:d4:ba:1c:1f:cc:89: f0:67:41:dc:c4:09:5f:75:a0:ae:b1:a5:b3:3e:04: 75:86:9b:be:d8:02:73:89:f5:95:b3:e6:9d:6a:a5: d8:e2:f2:03:28:cd:b4:2d:51:32:e9:98:80:6c:22: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4D:E0:17:AC:A6:8E:7A:5E:EE:21:FB:01:3D:B2:80:70:7C:7C:2B X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c4:74:c1:4f:b7:9a:5f:61:96:8e:8c:52:0e:2b:a0:14:a6: 76:9d:a3:44:10:82:86:fd:50:9e:1a:d2:e9:dd:5f:a7:38:ff: 72:90:b6:aa:ac:e1:e2:c5:2f:8e:69:dc:c5:a6:0b:bd:0c:8e: 28:68:90:40:02:9b:7a:de:c0:8e:bf:23:3d:e7:4a:b2:43:c8: ff:ab:a3:d8:59:e3:a6:27:4d:61:f8:93:e1:b4:0f:84:2a:02: c1:a6:be:ba:2e:e7:e4:65:54:99:ed:61:48:8b:cb:28:51:82: c9:43:25:0e:73:49:96:9a:e4:a0:02:ab:f8:c1:bc:ee:90:9e: 55:5d:7d:8c:00:db:79:85:d6:1e:e9:38:21:cd:fe:4e:77:4e: 2b:2b:ac:1d:cb:17:d9:98:01:09:80:8c:5c:23:7f:44:d8:6f: 75:50:a2:6e:13:a5:6d:78:56:7d:ee:3c:1e:13:d4:0d:cd:31: 1e:29:f7:a5:9a:2c:55:e8:76:cf:6f:b4:60:9b:06:e3:65:d4: 5c:73:a2:d9:17:c1:29:19:25:a3:14:88:c0:42:ba:4f:3b:b0: 4b:5b:c6:48:ce:b4:5a:cf:20:df:13:8b:91:f8:02:ec:81:0d: 8d:98:ab:b7:39:84:e2:a0:d0:02:06:77:b4:49:40:04:ea:32: 5f:dd:64:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjUwODEwMjAxNTU1WhcNMjUwODE3MjAxNTU1WjAYMRYwFAYD VQQDEw02ODk4ZmRmYi0wMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuBmgNU4i2vWulSsScsYQP/wIEcsDOu25nNO1P8iCgHvXszVX6/F+/3/JWIm Pulhs+Mjt66yYqwIdmREqus/3obYr0mwQl2Cb8GsSoghubD5pRuqNgToCnsoVJ2C O4s+v5nLqLq7D8Kael5MJaBTsl4HeXtSVn0NFSAWw/LvTOITmOnGg6UUO60qtGPM hfx1eTVri+bSW1RIW1V6U9loFISlWsMVC1akZXtvGRjdAZWfglFboPtjDyN21nnD RAjfnXAwiVwrZIzsQ9/UuhwfzInwZ0HcxAlfdaCusaWzPgR1hpu+2AJzifWVs+ad aqXY4vIDKM20LVEy6ZiAbCJkbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNN4Bes po56Xu4h+wE9soBwfHwrMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYxHTBT7eaX2GWjoxSDiugFKZ2naNEEIKG/VCeGtLp3V+nOP9ykLaq rOHixS+OadzFpgu9DI4oaJBAApt63sCOvyM950qyQ8j/q6PYWeOmJ01h+JPhtA+E KgLBpr66LufkZVSZ7WFIi8soUYLJQyUOc0mWmuSgAqv4wbzukJ5VXX2MANt5hdYe 6Tghzf5Od04rK6wdyxfZmAEJgIxcI39E2G91UKJuE6VteFZ97jweE9QNzTEeKfel mixV6HbPb7RgmwbjZdRcc6LZF8EpGSWjFIjAQrpPO7BLW8ZIzrRazyDfE4uR+ALs gQ2NmKu3OYTioNACBne0SUAE6jJf3WSM -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:17 2025 by rpki-client