$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: U99eO4OETI7w4cJrqnXoBIerL4hNXPZKLMkiJMnTm6Q= Subject key identifier: 75:78:AB:B2:34:9C:45:BB:40:DF:2A:C0:D1:00:E2:68:C2:4D:BE:01 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0152 Signing time: Sat 09 Aug 2025 04:32:13 +0000 Manifest this update: Sat 09 Aug 2025 04:32:12 +0000 Manifest next update: Sat 16 Aug 2025 04:32:12 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: 6RTvR6T+ejXCZl+znYbDx4YUhQpBDHIxMruBixK5djs=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Aug 9 04:32:12 2025 GMT Not After : Aug 16 04:32:12 2025 GMT Subject: CN=6896cf4c-896a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:ed:8d:08:cb:3f:96:2c:21:74:cf:c1:01: 8b:2f:d2:52:6f:21:f2:de:b0:34:f0:c5:ba:62:a3: e1:a4:0b:95:7e:ec:79:8d:cb:f6:63:3d:c8:c0:a1: bc:1a:f4:ca:e0:9b:93:8e:9b:fc:49:d0:41:72:fb: 01:30:2a:0b:8a:6f:03:69:90:82:37:94:c4:d6:77: dc:bd:88:3c:1d:4f:7b:9f:c1:e3:b3:c6:0f:2c:ba: 76:e1:71:72:d7:d3:47:dc:5e:fc:26:31:af:f6:49: ac:8b:bb:8a:60:00:19:df:89:82:83:75:bf:23:9b: 26:39:b5:8e:45:7f:76:35:c1:f4:e8:2f:1d:c9:55: ef:0e:a5:45:da:49:b5:f6:3f:18:a3:8f:97:54:f2: 08:20:29:ae:12:5e:9e:06:60:91:b3:d5:db:57:b6: 6a:4d:46:0d:fe:9c:d3:3a:75:70:27:c9:36:b2:b3: 37:9d:59:f6:12:52:c2:e7:24:0b:98:ce:af:3e:9a: 92:de:48:b5:39:8f:13:ca:47:60:d8:3d:8a:2a:9a: 37:72:43:2e:05:5f:4e:30:ae:8f:56:97:36:c1:5d: 00:7e:75:42:a0:49:b9:e4:7b:3b:c6:02:a0:dd:2b: 1b:d1:8c:89:a4:a5:30:d2:18:79:84:48:d6:4b:e0: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:78:AB:B2:34:9C:45:BB:40:DF:2A:C0:D1:00:E2:68:C2:4D:BE:01 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0b:87:4e:79:70:6f:ea:83:6f:ca:fc:fd:4c:92:b3:58:0e: 20:1a:7d:74:ef:11:e0:61:c6:6b:1b:43:f6:d9:d8:e5:87:9b: 40:98:b8:04:b0:a6:68:cf:89:b0:33:ac:4a:b5:1f:3a:4c:99: 03:fe:a1:24:ca:88:f2:10:dc:84:6b:f3:3a:b0:28:6b:65:46: cb:2c:a1:b3:86:3c:63:b1:0c:a9:be:9a:89:30:98:1d:22:c9: 77:e4:8a:77:ff:57:df:4b:99:0f:5c:7f:68:1e:96:69:c9:27: 3b:0a:a6:c5:e7:22:b5:bb:73:15:41:57:7d:fe:fc:84:3d:a5: 14:4f:e4:48:14:ee:7a:d4:66:40:31:24:cb:f7:b8:4f:21:8a: cd:78:60:3a:e5:0f:4d:04:e8:32:73:f7:39:f7:0a:34:a6:d8: e1:9b:00:fc:e6:ad:1c:ef:10:f8:35:58:e3:1e:22:4d:a4:0d: 86:76:2a:02:2f:12:3c:bf:3b:dd:38:1d:a8:b9:9c:f5:f0:bc: 70:bf:cc:55:4f:4e:17:b4:1c:08:3f:6f:11:ad:83:d4:4d:36: 72:06:c5:8c:43:58:4b:56:75:14:8b:22:9d:68:c7:4c:2e:94: dc:71:60:db:ee:fa:5d:63:a5:d3:5f:11:a5:8e:e4:48:a1:30: cd:45:99:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUwODA5MDQzMjEyWhcNMjUwODE2MDQzMjEyWjAYMRYwFAYD VQQDEw02ODk2Y2Y0Yy04OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRXtjQjLP5YsIXTPwQGLL9JSbyHy3rA08MW6YqPhpAuVfux5jcv2Yz3IwKG8 GvTK4JuTjpv8SdBBcvsBMCoLim8DaZCCN5TE1nfcvYg8HU97n8Hjs8YPLLp24XFy 19NH3F78JjGv9kmsi7uKYAAZ34mCg3W/I5smObWORX92NcH06C8dyVXvDqVF2km1 9j8Yo4+XVPIIICmuEl6eBmCRs9XbV7ZqTUYN/pzTOnVwJ8k2srM3nVn2ElLC5yQL mM6vPpqS3ki1OY8Tykdg2D2KKpo3ckMuBV9OMK6PVpc2wV0AfnVCoEm55Hs7xgKg 3Ssb0YyJpKUw0hh5hEjWS+B9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV4q7I0 nEW7QN8qwNEA4mjCTb4BMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKC4dOeXBv6oNvyvz9TJKzWA4gGn107xHgYcZrG0P22djlh5tAmLgE sKZoz4mwM6xKtR86TJkD/qEkyojyENyEa/M6sChrZUbLLKGzhjxjsQypvpqJMJgd Isl35Ip3/1ffS5kPXH9oHpZpySc7CqbF5yK1u3MVQVd9/vyEPaUUT+RIFO561GZA MSTL97hPIYrNeGA65Q9NBOgyc/c59wo0ptjhmwD85q0c7xD4NVjjHiJNpA2GdioC LxI8vzvdOB2ouZz18Lxwv8xVT04XtBwIP28RrYPUTTZyBsWMQ1hLVnUUiyKdaMdM LpTccWDb7vpdY6XTXxGljuRIoTDNRZle -----END CERTIFICATE-----Generated at Sun Aug 10 20:00:48 2025 by rpki-client