$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: ZYbCyl+WypWknKF/JoE04UK13HFHuV7MD0+woHn//fA= Subject key identifier: C3:23:93:5E:09:EA:38:DE:06:F7:A0:03:53:7C:71:3D:6B:A9:37:DF Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 0636 Signing time: Tue 12 Aug 2025 23:07:33 +0000 Manifest this update: Tue 12 Aug 2025 23:07:32 +0000 Manifest next update: Tue 19 Aug 2025 23:07:32 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: yaYylP3I3Dm340OjgDQl8JC8g2jO9PnzUp+GduvsxKs=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Aug 12 23:07:32 2025 GMT Not After : Aug 19 23:07:32 2025 GMT Subject: CN=689bc935-c7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:9d:3f:c7:d8:16:20:db:db:09:20:a5:fb: 72:d8:cb:01:b2:20:fd:9b:80:f6:75:e0:5e:8d:df: da:a8:9a:8b:a7:53:68:04:33:d9:4e:b5:93:a9:f7: a0:5e:56:ed:9a:18:e1:cb:e0:95:99:41:1a:54:70: 7c:99:ae:90:51:25:53:6f:af:d5:e1:68:78:5b:c8: 77:f4:46:1c:15:4e:37:4e:37:a5:c8:37:a3:98:82: 17:45:c1:65:a3:87:ba:73:51:f7:26:3f:13:05:bd: a4:28:06:8b:46:18:15:34:03:24:bf:57:65:26:16: 9a:97:08:10:74:7d:84:3b:4d:67:5b:81:a6:11:09: 4a:af:e2:2b:32:ae:24:34:0e:44:e0:2e:12:f2:64: f7:52:78:55:df:58:09:cf:29:55:68:ac:ab:a1:89: be:d2:7d:cd:11:a6:05:b4:7e:69:19:fa:97:ec:ec: ff:7d:a9:5b:1f:45:1e:4d:1a:50:b4:56:a1:2b:9a: 91:16:38:ac:c0:72:ef:fa:db:a8:e2:ac:ce:7e:78: ab:2c:ae:0e:06:b5:48:9a:3b:29:6b:0d:b9:b4:ee: e1:9f:50:b3:f7:45:43:ef:e3:39:33:7a:74:59:4c: 5f:2e:1c:30:f0:29:9c:85:ca:10:49:04:14:13:ce: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:93:5E:09:EA:38:DE:06:F7:A0:03:53:7C:71:3D:6B:A9:37:DF X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:9f:df:89:a7:bb:fd:3d:a1:a9:b0:ed:36:1c:bb:7a:36:ce: 01:c6:d9:47:47:d3:02:c1:4f:0b:b2:29:d2:31:82:42:98:59: 21:b4:fe:7a:53:f9:9a:07:43:67:77:73:36:72:1f:33:26:a4: e4:71:8d:41:4f:ad:97:07:48:07:7b:d0:ec:34:3b:7d:fe:6b: 83:f4:b7:b8:d8:2a:b5:4b:91:d5:24:57:c8:6f:9c:c4:e6:24: fe:2c:33:e7:16:d4:a4:e9:02:f9:a5:52:eb:61:6f:56:1a:b8: 06:02:91:87:fe:1a:16:33:51:42:2b:90:de:2d:ce:63:59:d9: f4:b5:c7:c4:61:3d:68:b8:7e:81:d2:ae:06:db:1f:33:88:26: b9:a7:46:74:ef:fa:c7:fa:42:25:89:41:36:76:7c:40:2b:02: cf:29:6c:cd:af:27:7c:e0:47:85:17:b9:b3:8f:5c:d5:db:75: 29:b4:53:6d:ed:8b:84:57:5c:82:90:f5:6c:c2:64:c8:09:a9: 8a:f7:1c:ac:49:8c:7c:5d:56:96:be:4d:f9:21:a7:f2:6d:b8: bd:8c:34:9f:24:7d:42:41:ba:f1:5c:39:63:88:5c:e7:13:3c: 99:89:95:3f:80:9b:1e:cf:ef:ec:75:c7:5c:fa:7f:4f:a0:2a: 7c:d9:f6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUwODEyMjMwNzMyWhcNMjUwODE5MjMwNzMyWjAYMRYwFAYD VQQDEw02ODliYzkzNS1jN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1OdP8fYFiDb2wkgpfty2MsBsiD9m4D2deBejd/aqJqLp1NoBDPZTrWTqfeg Xlbtmhjhy+CVmUEaVHB8ma6QUSVTb6/V4Wh4W8h39EYcFU43TjelyDejmIIXRcFl o4e6c1H3Jj8TBb2kKAaLRhgVNAMkv1dlJhaalwgQdH2EO01nW4GmEQlKr+IrMq4k NA5E4C4S8mT3UnhV31gJzylVaKyroYm+0n3NEaYFtH5pGfqX7Oz/falbH0UeTRpQ tFahK5qRFjiswHLv+tuo4qzOfnirLK4OBrVImjspaw25tO7hn1Cz90VD7+M5M3p0 WUxfLhww8CmchcoQSQQUE86+rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMjk14J 6jjeBvegA1N8cT1rqTffMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVn9+Jp7v9PaGpsO02HLt6Ns4BxtlHR9MCwU8LsinSMYJCmFkhtP56 U/maB0Nnd3M2ch8zJqTkcY1BT62XB0gHe9DsNDt9/muD9Le42Cq1S5HVJFfIb5zE 5iT+LDPnFtSk6QL5pVLrYW9WGrgGApGH/hoWM1FCK5DeLc5jWdn0tcfEYT1ouH6B 0q4G2x8ziCa5p0Z07/rH+kIliUE2dnxAKwLPKWzNryd84EeFF7mzj1zV23UptFNt 7YuEV1yCkPVswmTICamK9xysSYx8XVaWvk35Iafybbi9jDSfJH1CQbrxXDljiFzn EzyZiZU/gJsez+/sdcdc+n9PoCp82fYU -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:18 2025 by rpki-client