$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: YS3BOHEoKmBwHTmPFSGlEl+OVegnoUKgwCnJPkjnwyg= Subject key identifier: 06:5C:8B:82:85:73:4D:DC:32:84:7F:D1:62:87:CE:38:72:20:0D:89 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 01A6 Signing time: Sat 09 Aug 2025 03:45:09 +0000 Manifest this update: Sat 09 Aug 2025 03:45:08 +0000 Manifest next update: Sat 16 Aug 2025 03:45:08 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: IsnpOZCLg2tK9LBxiXv9VGBmnhy6l0KaFcv88+YVnbM=) 2: 8A795CC866E711F0985D0751C4F9AE02.roa (hash: g1KuNxkFHwwpiwP+Lzl39JbGpSxNeMuhi4yzpFrKJZU=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Aug 9 03:45:08 2025 GMT Not After : Aug 16 03:45:08 2025 GMT Subject: CN=6896c445-607b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:c0:e7:dd:4a:27:06:6f:24:88:86:aa:6e: 31:44:ae:b3:f9:ee:0d:c4:8e:80:e0:df:12:47:7c: 4b:98:86:bc:54:1b:e4:39:4a:d3:32:97:52:b9:16: c6:59:82:9c:38:01:7e:cf:50:6a:0b:15:b4:7c:b0: ac:3d:8e:61:89:06:20:0a:26:b1:d4:db:6c:2f:95: df:1e:44:86:8c:4d:40:0b:02:8e:fd:e7:bd:fd:c6: 26:27:5d:c2:09:cf:18:40:ca:6a:54:9c:b7:b1:06: aa:28:4e:e6:36:b1:9d:ac:9d:8c:16:66:d2:ce:e5: a4:bd:39:85:01:73:45:9f:21:85:e4:f2:20:53:5a: 7d:df:b1:b5:56:49:0c:cc:e7:c4:59:61:ee:81:45: e5:00:8d:4b:43:a5:f6:57:92:38:2a:6a:d9:a9:69: 4f:9e:5a:0c:84:a2:7e:42:07:dd:51:cd:97:4d:7d: e4:24:6a:ae:09:bd:2e:b2:38:d1:fe:57:02:bd:bc: 0c:13:4a:9f:6f:f4:31:8a:17:69:ac:0b:d7:48:31: ea:62:08:e9:63:c1:a7:04:89:3b:79:2c:75:d7:9e: 8f:90:4b:ae:a6:ff:45:2f:fc:85:da:e5:e4:88:36: 43:c8:a6:3e:78:6e:82:aa:ac:19:d9:68:2a:c9:a5: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:8B:82:85:73:4D:DC:32:84:7F:D1:62:87:CE:38:72:20:0D:89 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c2:a2:1a:bf:76:1b:2e:f2:39:c2:9b:33:65:1a:e8:d2:14: 5b:92:e4:96:45:7b:8d:d6:07:83:54:7f:c2:01:4b:7a:d2:cd: d5:61:09:6c:32:15:aa:88:d1:1f:63:e6:20:bd:7e:21:14:6d: 7a:7f:67:86:41:29:bf:97:bf:71:9d:b6:7d:77:9f:43:1d:14: 4c:14:69:d6:52:c3:53:26:6c:25:9e:af:37:88:d0:cf:c9:cb: 8d:00:26:5c:33:94:20:da:71:92:f8:ab:61:0b:77:fe:10:b9: 97:e1:04:0d:7a:b3:7d:a6:3b:98:bb:6c:0f:3c:32:43:07:d6: 10:40:ad:2f:09:54:41:c1:00:1f:81:dc:3a:4d:02:32:55:bf: 82:e3:8b:1c:c8:5c:41:ad:7f:40:81:c3:bf:39:49:59:f0:c4: f0:5f:fd:33:0a:8d:b5:15:eb:3c:18:28:8b:60:4d:fe:ba:33: 5e:44:77:07:06:3a:3f:d6:69:10:bb:48:dc:9b:9b:2e:08:84: 9e:cb:d4:1f:5c:06:78:8b:a4:0e:68:01:8d:67:ba:5a:44:d8: c2:d7:90:54:2d:ae:50:c6:3f:8d:07:9b:c5:9b:c2:6d:2d:02: 7d:32:d0:05:f4:b0:48:4d:7e:e0:2f:ff:e3:35:df:7c:6c:6d: b3:b3:5a:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwODA5MDM0NTA4WhcNMjUwODE2MDM0NTA4WjAYMRYwFAYD VQQDEw02ODk2YzQ0NS02MDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7bA591KJwZvJIiGqm4xRK6z+e4NxI6A4N8SR3xLmIa8VBvkOUrTMpdSuRbG WYKcOAF+z1BqCxW0fLCsPY5hiQYgCiax1NtsL5XfHkSGjE1ACwKO/ee9/cYmJ13C Cc8YQMpqVJy3sQaqKE7mNrGdrJ2MFmbSzuWkvTmFAXNFnyGF5PIgU1p937G1VkkM zOfEWWHugUXlAI1LQ6X2V5I4KmrZqWlPnloMhKJ+QgfdUc2XTX3kJGquCb0usjjR /lcCvbwME0qfb/QxihdprAvXSDHqYgjpY8GnBIk7eSx1156PkEuupv9FL/yF2uXk iDZDyKY+eG6CqqwZ2WgqyaWWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZci4KF c03cMoR/0WKHzjhyIA2JMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtwqIav3YbLvI5wpszZRro0hRbkuSWRXuN1geDVH/CAUt60s3VYQls MhWqiNEfY+YgvX4hFG16f2eGQSm/l79xnbZ9d59DHRRMFGnWUsNTJmwlnq83iNDP ycuNACZcM5Qg2nGS+KthC3f+ELmX4QQNerN9pjuYu2wPPDJDB9YQQK0vCVRBwQAf gdw6TQIyVb+C44scyFxBrX9AgcO/OUlZ8MTwX/0zCo21Fes8GCiLYE3+ujNeRHcH Bjo/1mkQu0jcm5suCISey9QfXAZ4i6QOaAGNZ7paRNjC15BULa5Qxj+NB5vFm8Jt LQJ9MtAF9LBITX7gL//jNd98bG2zs1pn -----END CERTIFICATE-----Generated at Sun Aug 10 18:52:56 2025 by rpki-client