$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: rWets+3nxSnIWWy/Ki6c8jKoFSb5+TV6tXAPXm864lw= Subject key identifier: 71:D1:EF:A1:26:AE:D0:32:FE:F7:31:D8:A8:56:C3:63:8E:44:16:72 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 0213 Signing time: Thu 07 Aug 2025 02:35:15 +0000 Manifest this update: Thu 07 Aug 2025 02:35:15 +0000 Manifest next update: Thu 14 Aug 2025 02:35:15 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: p8Gisteyu6voBG5KkIbJ8WlPWPGMU3bbaTRaFbwmodU=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Aug 7 02:35:15 2025 GMT Not After : Aug 14 02:35:15 2025 GMT Subject: CN=689410e3-987e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:d4:e4:fa:5b:22:4e:fe:de:85:fb:ec:dd: 12:c3:b0:2c:96:20:2c:f8:f9:3b:2f:71:eb:8b:d3: ff:ff:82:5b:c3:81:d1:c5:7a:60:b1:92:a2:09:4e: 8e:a8:ca:fb:3b:4d:f9:b6:ed:ba:94:45:c4:9d:ed: 55:0f:12:52:1f:4f:16:19:0a:7d:d1:35:3d:f4:35: 4a:a5:e9:62:46:f5:83:ed:f5:c0:04:1d:c4:a9:b6: 5e:88:1f:be:e9:c4:a4:23:aa:c9:b7:25:89:fa:b3: 9f:4e:2a:13:a4:1d:bc:25:40:cc:0b:62:ba:6b:c7: 91:db:21:9d:dc:39:71:a9:f1:14:6f:f3:e1:10:c0: c6:3d:f3:8f:dd:b7:4d:6e:5b:48:cd:8e:fb:68:7e: 3f:c7:11:05:74:ae:52:e3:cc:e1:97:d1:93:0a:e0: a2:f2:01:f7:b9:a9:5d:f1:f7:43:c2:05:d4:70:15: fb:3a:38:a0:9e:0b:70:13:5c:72:af:b0:9e:9d:97: 1f:d6:35:89:84:40:ad:c7:55:ec:4a:4b:89:b1:67: 58:99:6f:37:49:00:54:05:ff:e5:e8:27:44:96:e8: 70:7a:33:4d:5c:23:b5:da:37:be:ee:c6:83:7f:7d: ab:bd:b6:44:9c:9e:3f:19:55:f5:30:fd:5d:1c:c7: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:EF:A1:26:AE:D0:32:FE:F7:31:D8:A8:56:C3:63:8E:44:16:72 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:fa:f0:ff:af:a2:6e:7e:33:9b:78:1a:b7:2b:da:b7:9b: d8:b9:2f:0e:b9:b4:e2:ed:20:3e:e4:e5:e5:74:3f:4a:1d:1d: e4:7c:22:26:a6:aa:15:cd:b6:aa:56:06:f3:3a:55:d2:31:33: e9:f4:d7:fb:35:9d:8e:ba:5d:16:7b:05:30:61:68:09:10:32: 09:6b:3f:7f:53:bc:b2:cc:73:a7:3b:63:f9:45:b8:51:07:66: 83:22:3d:cf:47:d9:f9:ac:49:e8:c4:07:1a:a1:c5:e1:0f:9f: a2:90:60:62:f0:47:d4:bf:5f:c8:dc:a1:8b:fc:eb:8c:c7:c3: 85:01:31:76:9b:65:54:dc:3a:41:74:88:ca:80:a4:9b:37:c5: 9d:6b:66:3d:1c:33:20:02:c0:04:71:1f:ba:7b:3a:ca:82:79: 4c:a6:bf:9e:e0:2b:1f:e9:72:c9:38:25:59:43:4c:25:74:e3: 88:8c:3e:06:6a:63:a0:b5:c3:63:d2:f3:0f:1c:20:ff:98:03: a3:e3:ba:76:90:ee:50:19:fd:4b:fc:5b:1c:84:5a:f6:37:cd: d6:0f:53:c2:b7:8d:22:43:1f:aa:9a:b6:e1:4f:03:3f:40:bd: 44:2d:21:6c:d5:18:cc:03:16:ba:40:30:38:59:62:d9:bb:89: e9:b5:3a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwODA3MDIzNTE1WhcNMjUwODE0MDIzNTE1WjAYMRYwFAYD VQQDEw02ODk0MTBlMy05ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1TU5PpbIk7+3oX77N0Sw7AsliAs+Pk7L3Hri9P//4Jbw4HRxXpgsZKiCU6O qMr7O035tu26lEXEne1VDxJSH08WGQp90TU99DVKpeliRvWD7fXABB3EqbZeiB++ 6cSkI6rJtyWJ+rOfTioTpB28JUDMC2K6a8eR2yGd3DlxqfEUb/PhEMDGPfOP3bdN bltIzY77aH4/xxEFdK5S48zhl9GTCuCi8gH3uald8fdDwgXUcBX7OjigngtwE1xy r7CenZcf1jWJhECtx1XsSkuJsWdYmW83SQBUBf/l6CdEluhwejNNXCO12je+7saD f32rvbZEnJ4/GVX1MP1dHMf8GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHR76Em rtAy/vcx2KhWw2OORBZyMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjsvrw/6+ibn4zm3gatyvat5vYuS8OubTi7SA+5OXldD9KHR3kfCIm pqoVzbaqVgbzOlXSMTPp9Nf7NZ2Oul0WewUwYWgJEDIJaz9/U7yyzHOnO2P5RbhR B2aDIj3PR9n5rEnoxAcaocXhD5+ikGBi8EfUv1/I3KGL/OuMx8OFATF2m2VU3DpB dIjKgKSbN8Wda2Y9HDMgAsAEcR+6ezrKgnlMpr+e4Csf6XLJOCVZQ0wldOOIjD4G amOgtcNj0vMPHCD/mAOj47p2kO5QGf1L/FschFr2N83WD1PCt40iQx+qmrbhTwM/ QL1ELSFs1RjMAxa6QDA4WWLZu4nptTpP -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:14 2025 by rpki-client