$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: VjEH7yohTwX9ETCpkFExB9a8jNB1Mx5hs9QsNUKy3qk= Subject key identifier: C1:F4:1C:B1:8B:37:37:7C:49:A5:E3:A5:E7:92:A5:CC:6A:8F:0F:E8 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1972 Signing time: Fri 08 Aug 2025 17:47:16 +0000 Manifest this update: Fri 08 Aug 2025 17:47:15 +0000 Manifest next update: Fri 15 Aug 2025 17:47:15 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: QtuThG35VjOVfsbe/+eJGfSosxlM933k+A6YkoKcYik=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Aug 8 17:47:15 2025 GMT Not After : Aug 15 17:47:15 2025 GMT Subject: CN=68963823-793e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:ec:ae:d0:65:f2:cb:85:d6:f2:7f:0f:60: b2:71:97:84:94:f2:e8:32:ac:b7:48:4a:33:9b:aa: 3b:41:7b:63:70:06:18:f5:c3:cf:8c:4a:07:2f:06: bf:10:03:c1:cf:bf:a9:ce:72:03:d9:1c:5c:6b:21: c0:c6:a3:2c:4b:90:1d:e7:39:45:0c:63:35:37:4c: 37:cc:1f:8c:48:c1:4b:e5:fa:d8:87:22:8d:72:ef: bf:c4:4f:56:2a:ea:98:c6:aa:ef:a8:24:8d:91:b5: a7:a5:0f:44:2c:bb:d1:6b:c2:12:e8:72:29:d6:32: 79:eb:e9:c5:02:69:0e:f9:43:de:4b:e3:9f:8f:d5: 0f:49:0f:e8:af:fc:25:c6:10:64:c5:a3:b5:17:91: 2d:2b:71:f2:3e:e3:54:34:26:78:28:3d:ac:42:59: d9:4f:28:bc:8c:18:06:35:47:44:47:e5:64:1a:97: 36:2b:99:d9:fd:42:a5:c5:07:26:e2:fc:c4:c6:41: 3a:b8:f5:3a:7a:59:8e:1b:fe:d8:00:69:1b:14:c0: ed:a1:a1:84:9e:c9:60:fe:e2:9a:77:58:71:c1:fc: f4:c5:80:47:5c:c1:c6:9d:2d:cb:cc:51:6f:ca:ab: cd:d2:f6:ae:1c:89:1c:c1:3f:ed:31:60:8c:e2:fb: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F4:1C:B1:8B:37:37:7C:49:A5:E3:A5:E7:92:A5:CC:6A:8F:0F:E8 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7a:ca:92:55:4c:fd:4b:ea:9c:01:a3:c9:37:55:96:80:4b: f0:0a:a2:2c:82:53:c6:8c:bb:bc:7c:f7:ab:42:61:74:54:f4: 1e:90:65:5d:ac:72:a2:a6:29:96:b5:52:1a:ed:a3:ba:08:18: 90:a7:2d:b1:ff:94:4a:47:7c:cb:a3:37:6d:4a:8b:39:76:bf: 70:33:06:5d:9f:1c:21:3a:f0:7a:66:62:78:a7:8a:00:23:f2: e8:a9:ce:4a:12:00:f5:65:7e:a5:6f:80:0a:61:d8:8f:db:ea: f2:55:df:1d:77:83:be:22:ed:ac:43:88:37:5d:90:50:62:19: 54:46:db:51:46:a2:64:60:94:60:81:1e:52:21:10:f1:73:3b: fe:76:47:67:fe:4f:f6:2a:1c:2c:54:8d:5b:89:3c:ab:fc:49: 43:7b:a2:fb:ab:26:fa:5c:93:d8:82:ed:c4:15:20:0e:c7:4a: a0:69:26:e6:ac:75:61:34:26:48:ca:21:24:13:dd:91:82:5f: 9f:b5:ed:2c:b5:6d:d6:dc:3c:bf:08:96:58:63:aa:f0:14:e2: 87:46:5b:4d:85:ac:83:bb:a5:7d:5d:c1:f8:57:f0:5b:8e:91: 55:7e:b9:e2:ad:53:a2:4b:d2:bb:64:65:ec:14:d5:03:4b:e5: a7:27:bc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwODA4MTc0NzE1WhcNMjUwODE1MTc0NzE1WjAYMRYwFAYD VQQDEw02ODk2MzgyMy03OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lbsrtBl8suF1vJ/D2CycZeElPLoMqy3SEozm6o7QXtjcAYY9cPPjEoHLwa/ EAPBz7+pznID2RxcayHAxqMsS5Ad5zlFDGM1N0w3zB+MSMFL5frYhyKNcu+/xE9W KuqYxqrvqCSNkbWnpQ9ELLvRa8IS6HIp1jJ56+nFAmkO+UPeS+Ofj9UPSQ/or/wl xhBkxaO1F5EtK3HyPuNUNCZ4KD2sQlnZTyi8jBgGNUdER+VkGpc2K5nZ/UKlxQcm 4vzExkE6uPU6elmOG/7YAGkbFMDtoaGEnslg/uKad1hxwfz0xYBHXMHGnS3LzFFv yqvN0vauHIkcwT/tMWCM4vsDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH0HLGL Nzd8SaXjpeeSpcxqjw/oMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJesqSVUz9S+qcAaPJN1WWgEvwCqIsglPGjLu8fPerQmF0VPQekGVd rHKipimWtVIa7aO6CBiQpy2x/5RKR3zLozdtSos5dr9wMwZdnxwhOvB6ZmJ4p4oA I/Loqc5KEgD1ZX6lb4AKYdiP2+ryVd8dd4O+Iu2sQ4g3XZBQYhlURttRRqJkYJRg gR5SIRDxczv+dkdn/k/2KhwsVI1biTyr/ElDe6L7qyb6XJPYgu3EFSAOx0qgaSbm rHVhNCZIyiEkE92Rgl+fte0stW3W3Dy/CJZYY6rwFOKHRltNhayDu6V9XcH4V/Bb jpFVfrnirVOiS9K7ZGXsFNUDS+WnJ7x6 -----END CERTIFICATE-----Generated at Sun Aug 10 03:55:38 2025 by rpki-client