$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: MEaKb1O5iGznvzQ7nwUdo1+FCYyWFjLx9C8ZltC+7Nk= Subject key identifier: 77:71:87:44:2E:F0:9E:D7:7E:E3:F2:10:FE:5E:36:BA:A3:2C:20:A1 Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0A88 Signing time: Sun 10 Aug 2025 19:37:53 +0000 Manifest this update: Sun 10 Aug 2025 19:37:53 +0000 Manifest next update: Sun 17 Aug 2025 19:37:53 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: kyX/Qsb13J1hOq/q/AH3H17SuwV0+89qBnTtfdr4dGg=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2713 (0xa99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Aug 10 19:37:53 2025 GMT Not After : Aug 17 19:37:53 2025 GMT Subject: CN=6898f511-0773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:db:29:51:70:90:21:56:44:57:7e:8e:0c: 74:12:07:78:d3:7b:7d:0b:15:6e:e6:76:f9:4d:eb: bf:06:be:cb:3e:e8:c8:3a:4b:cf:cd:2a:bf:42:4c: 9f:7d:4d:01:87:f9:d6:b0:ad:cd:f0:68:b6:ab:6a: 44:9b:e0:ee:e9:02:22:01:ac:97:8b:8f:b5:07:17: 23:b6:43:a2:c5:a5:b7:36:45:ec:65:34:04:d8:d5: 3d:1a:ae:34:37:e3:30:74:ae:8c:7e:15:ef:a0:c7: ab:95:cb:30:cf:a3:c1:fc:79:50:da:4b:4a:6f:ce: 37:f6:4c:ee:e8:ca:69:c1:d6:12:36:34:63:ae:8d: b0:54:37:f3:6a:5e:28:1c:19:56:61:f9:97:d2:88: f2:78:26:09:4d:7d:75:74:fb:34:48:23:ae:74:e1: 1b:a7:19:9b:87:33:73:2b:b7:96:84:64:d4:09:a6: f5:25:dd:b8:ac:56:74:3f:70:d2:7b:10:7a:86:a5: 86:45:30:67:40:70:35:c1:56:15:b1:cf:b4:b0:e4: de:48:1d:a8:ce:7e:c8:8b:b4:af:21:78:37:df:17: 6d:a9:de:2c:b5:38:ce:48:f0:13:30:8f:01:19:dd: 93:f9:50:99:dc:ac:01:ce:fa:c9:80:2e:a1:9d:9a: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:71:87:44:2E:F0:9E:D7:7E:E3:F2:10:FE:5E:36:BA:A3:2C:20:A1 X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fb:58:89:ec:82:7a:7e:b7:d0:97:2f:d7:0a:8b:12:cc:51: 81:71:d9:75:5e:7b:8e:c5:44:7b:24:55:94:72:57:53:28:43: 5c:b6:22:43:c9:89:3a:0e:92:14:ca:29:7f:7c:1b:d1:82:8c: b0:64:dc:5f:0d:1d:b4:6e:b1:4e:8f:d1:ee:7d:9c:3b:04:ff: cd:1b:bf:75:8e:d7:6a:d8:a6:5a:2f:68:9d:c2:f3:b0:50:d5: d2:6d:e2:95:b1:27:5c:22:de:d1:6f:a0:1d:5c:6b:e5:2a:7f: 98:31:9b:df:30:b7:dc:c8:08:51:55:1b:8b:6c:bc:4c:da:53: 86:56:61:8c:18:17:a5:c7:8c:da:de:b8:e1:18:10:33:f9:32: 02:10:ac:2c:2b:86:f9:a8:38:57:2e:cc:5c:e9:fb:3a:45:59: d9:a7:d1:e0:f7:de:7e:c4:eb:df:59:f0:06:e4:bc:a8:d8:af: ea:ec:ac:0e:9a:47:b3:ee:7b:b8:af:9d:83:f6:50:21:9c:dd: 55:87:c7:66:ba:01:f0:b1:7e:f9:9d:d3:34:2d:90:e0:c5:fc: 00:53:97:75:04:ad:43:b9:5c:0e:e0:27:66:97:7e:50:c8:ea: 3c:84:6c:ce:5a:5f:c5:1d:7a:0d:f9:6d:00:a4:67:ab:65:05: 56:2d:20:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjUwODEwMTkzNzUzWhcNMjUwODE3MTkzNzUzWjAYMRYwFAYD VQQDEw02ODk4ZjUxMS0wNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY3bKVFwkCFWRFd+jgx0Egd403t9CxVu5nb5Teu/Br7LPujIOkvPzSq/Qkyf fU0Bh/nWsK3N8Gi2q2pEm+Du6QIiAayXi4+1BxcjtkOixaW3NkXsZTQE2NU9Gq40 N+MwdK6MfhXvoMerlcswz6PB/HlQ2ktKb8439kzu6MppwdYSNjRjro2wVDfzal4o HBlWYfmX0ojyeCYJTX11dPs0SCOudOEbpxmbhzNzK7eWhGTUCab1Jd24rFZ0P3DS exB6hqWGRTBnQHA1wVYVsc+0sOTeSB2ozn7Ii7SvIXg33xdtqd4stTjOSPATMI8B Gd2T+VCZ3KwBzvrJgC6hnZoelQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdxh0Qu 8J7XfuPyEP5eNrqjLCChMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM+1iJ7IJ6frfQly/XCosSzFGBcdl1XnuOxUR7JFWUcldTKENctiJD yYk6DpIUyil/fBvRgoywZNxfDR20brFOj9HufZw7BP/NG791jtdq2KZaL2idwvOw UNXSbeKVsSdcIt7Rb6AdXGvlKn+YMZvfMLfcyAhRVRuLbLxM2lOGVmGMGBelx4za 3rjhGBAz+TICEKwsK4b5qDhXLsxc6fs6RVnZp9Hg995+xOvfWfAG5Lyo2K/q7KwO mkez7nu4r52D9lAhnN1Vh8dmugHwsX75ndM0LZDgxfwAU5d1BK1DuVwO4Cdml35Q yOo8hGzOWl/FHXoN+W0ApGerZQVWLSCl -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:51 2025 by rpki-client