$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: oa3xV9HNtbvEuOZjGV/TMeLnLJjL/4YLFVpDl5gULDA= Subject key identifier: D5:6E:81:3C:77:24:4B:D0:D6:CE:C5:75:A8:04:2B:43:91:48:44:D0 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 0198 Signing time: Sat 19 Jul 2025 03:41:53 +0000 Manifest this update: Sat 19 Jul 2025 03:41:53 +0000 Manifest next update: Sat 26 Jul 2025 03:41:53 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: iZN2ALNi8K8pJkTenSDIhgYQw0olx7v3tu2/nr1o+Xo=) 2: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (hash: e0njY5XzEF4ErGMr0YeVgmDBWLHo1AgDUgiIRsmRwsA=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Jul 19 03:41:53 2025 GMT Not After : Jul 26 03:41:53 2025 GMT Subject: CN=687b1401-0d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:90:a6:89:ec:ef:7e:4e:4b:27:60:d5:a1: 83:41:90:28:ab:2f:3d:ea:4d:84:f7:9c:96:5c:15: c1:ec:38:bf:c4:bb:18:df:6d:7a:ab:99:13:2c:ee: 60:12:90:8d:94:57:d6:e7:3a:fd:e7:2b:bd:32:f9: e8:39:ec:de:e9:4e:54:43:d3:94:10:d7:66:8b:5c: ae:ef:cf:67:8f:d9:87:83:6a:da:f4:40:cc:c7:86: 9f:10:e0:6d:1a:f5:f5:2f:2a:7d:be:15:e9:b4:da: 41:0c:02:0d:60:74:a3:71:cb:5c:8e:d5:d1:ca:6f: cf:bf:e4:3e:0b:89:14:36:64:c9:09:77:08:33:94: 24:34:e7:5a:6a:31:1f:3b:08:9e:39:09:4e:2a:81: 58:8a:29:09:9c:fc:16:f6:86:06:59:91:5c:e7:5f: 6a:9b:51:53:3f:57:09:24:a3:dd:c2:a9:d5:a1:cc: 07:c1:d7:e8:97:e3:50:e1:08:20:0d:26:09:ff:b6: c0:36:c1:05:aa:2a:26:90:bc:6f:cf:7c:ba:f0:b1: c5:1a:e3:4f:5d:3a:86:d3:cd:60:38:56:54:e5:d4: 90:51:ae:ec:be:bb:86:3e:f6:85:90:65:0e:9b:be: 26:d9:c5:1d:b8:e0:f8:29:4a:f2:e4:60:9f:83:ea: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:81:3C:77:24:4B:D0:D6:CE:C5:75:A8:04:2B:43:91:48:44:D0 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4e:de:a3:4f:78:e7:7e:fe:a2:80:6b:ed:00:7a:32:5c:5b: 48:73:23:c3:b9:74:f4:4d:c9:7f:21:d0:6f:bd:08:1c:88:df: 63:f3:25:4a:d2:b8:2b:0f:f5:df:a0:8b:b2:fc:9e:8b:0d:a4: b6:5c:a5:8b:e5:34:bb:3f:a8:4f:fb:a7:06:a6:e8:ba:11:d5: ac:35:39:72:4e:d0:14:7e:1f:ca:5b:a6:b3:6d:55:e5:a3:c4: 6a:71:47:8a:30:6d:cd:6b:38:35:f6:4b:59:55:ed:72:42:eb: 9d:d1:ad:34:45:30:16:2f:1a:3a:32:3c:b1:1b:5e:22:84:74: 90:b4:07:50:c4:26:3e:39:42:a8:df:f1:d8:40:f9:bd:b2:67: e7:dc:ed:b3:75:f2:06:cf:4b:90:d8:fc:39:b0:5c:59:84:e7: 34:7c:b2:08:d2:9c:c7:3a:8d:63:06:ea:1f:92:e9:b7:88:52: 71:95:44:fa:fa:18:66:d6:4c:06:2d:3d:bb:95:0e:c5:d8:d4: ab:d0:e8:b0:14:8b:c8:8e:45:c1:4b:e0:db:8d:e4:33:b0:f1: 5f:be:86:e2:41:a3:45:24:ee:8c:e0:40:6f:87:ac:1c:3c:4a: 20:f2:8f:50:26:37:c7:09:33:0f:9f:9e:b7:49:8a:38:83:c9: 01:0b:72:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwNzE5MDM0MTUzWhcNMjUwNzI2MDM0MTUzWjAYMRYwFAYD VQQDEw02ODdiMTQwMS0wZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywKQpons735OSydg1aGDQZAoqy896k2E95yWXBXB7Di/xLsY3216q5kTLO5g EpCNlFfW5zr95yu9MvnoOeze6U5UQ9OUENdmi1yu789nj9mHg2ra9EDMx4afEOBt GvX1Lyp9vhXptNpBDAINYHSjcctcjtXRym/Pv+Q+C4kUNmTJCXcIM5QkNOdaajEf OwieOQlOKoFYiikJnPwW9oYGWZFc519qm1FTP1cJJKPdwqnVocwHwdfol+NQ4Qgg DSYJ/7bANsEFqiomkLxvz3y68LHFGuNPXTqG081gOFZU5dSQUa7svruGPvaFkGUO m74m2cUduOD4KUry5GCfg+ri4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVugTx3 JEvQ1s7FdagEK0ORSETQMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABTt6jT3jnfv6igGvtAHoyXFtIcyPDuXT0Tcl/IdBvvQgciN9j8yVK 0rgrD/XfoIuy/J6LDaS2XKWL5TS7P6hP+6cGpui6EdWsNTlyTtAUfh/KW6azbVXl o8RqcUeKMG3Nazg19ktZVe1yQuud0a00RTAWLxo6MjyxG14ihHSQtAdQxCY+OUKo 3/HYQPm9smfn3O2zdfIGz0uQ2Pw5sFxZhOc0fLII0pzHOo1jBuofkum3iFJxlUT6 +hhm1kwGLT27lQ7F2NSr0OiwFIvIjkXBS+DbjeQzsPFfvobiQaNFJO6M4EBvh6wc PEog8o9QJjfHCTMPn563SYo4g8kBC3Jz -----END CERTIFICATE-----Generated at Sun Jul 20 12:17:50 2025 by rpki-client