$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: u0X5dYb7uSQq2EF/W1fw6FBcmVtpovEj87saacyYEaM= Subject key identifier: B6:56:06:52:3E:0D:74:68:D5:56:59:2B:B1:8F:BF:64:8A:61:BA:EE Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 0414 Signing time: Sat 19 Jul 2025 00:52:21 +0000 Manifest this update: Sat 19 Jul 2025 00:52:20 +0000 Manifest next update: Sat 26 Jul 2025 00:52:20 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: AuUzEMTLMifN5QX80h+Gtc6TZbmPNK4t+nTsYySbSFM=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: 1iuXJipvz24oOntaPEU1wj4mqlPSsDFfiyLqXTsQZv4=) 3: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Jul 19 00:52:20 2025 GMT Not After : Jul 26 00:52:20 2025 GMT Subject: CN=687aec44-d8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:b1:97:be:40:15:df:08:c2:85:23:d3:80: 47:df:29:d5:a8:38:61:d2:c7:53:b6:9a:57:7b:20: 2c:67:32:83:e9:43:a8:c7:aa:55:34:87:76:5a:f2: 04:3c:0e:22:b6:8c:6a:88:f3:1b:e1:09:b1:7e:c4: d7:33:3c:c3:c3:73:e7:54:b0:ca:3b:d7:ac:8b:2e: 5a:1f:04:33:e3:af:ef:fa:97:41:1c:01:2c:a6:6f: bd:e8:8b:66:9b:b7:29:9d:d2:2f:f1:92:81:f7:5c: 1d:4d:31:f1:7b:12:24:f0:8c:09:51:b3:30:0e:ca: 49:b0:85:2f:9c:4c:af:57:80:03:9b:e4:41:a5:f2: c4:3a:21:49:07:7c:c7:8f:b2:b7:a6:21:c8:bc:15: be:00:e4:be:37:ac:10:f6:cf:ef:ec:e2:a2:8e:d6: d3:22:e2:81:19:e3:52:19:56:06:a1:3b:8e:f3:1f: 02:cd:3c:94:20:37:c5:25:fa:c8:f0:a0:70:91:72: 4f:94:1d:95:d2:ff:ee:4f:dc:25:9a:66:5b:88:8d: a1:cc:af:4e:71:e6:a6:53:21:23:4c:fe:41:f9:2f: 87:e0:f9:06:04:ea:6f:9d:4c:af:c8:77:bf:c6:af: 2a:62:6e:a4:0b:49:3f:fd:d6:a7:bf:83:98:45:8f: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:56:06:52:3E:0D:74:68:D5:56:59:2B:B1:8F:BF:64:8A:61:BA:EE X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0e:59:c0:8b:d1:e8:46:46:82:2b:1e:31:0c:c2:e6:e2:d4: a2:be:5d:20:b8:35:a8:6f:4d:3c:0f:c2:05:dd:0e:e4:a8:4e: fa:1c:8a:f0:0f:df:09:03:02:47:de:c7:3b:f2:57:bd:d7:7c: 82:76:19:19:bb:49:13:6c:cb:d3:e7:ce:4c:98:dc:82:79:21: a2:a0:6f:fb:59:03:c8:c4:07:f3:4c:3a:21:c9:73:52:84:14: ef:63:12:ab:7f:ef:a3:f2:68:e0:ef:d4:59:e9:4e:6c:b3:c4: 06:4d:d8:96:63:d8:f3:89:cb:4a:2f:db:98:34:80:a9:7d:4d: 3c:74:fa:45:76:31:36:3b:75:a4:2a:aa:a5:13:9c:df:99:06: 1b:ef:68:f9:52:70:93:b3:75:4b:e6:1d:7a:5b:da:98:88:a1: 5a:1a:34:9f:d6:19:b9:69:16:e6:b4:a0:64:c0:bb:83:a5:ed: 5f:68:6f:5e:e7:0b:2b:5b:49:a3:ad:78:4f:c1:30:0d:ee:f0: 00:ab:aa:0c:c4:8e:bc:fe:74:93:c7:32:03:9d:12:71:45:c7: 69:bd:53:d4:0d:51:49:ca:f8:67:98:41:13:fe:3b:7b:d6:79: 5d:93:ad:2b:52:a5:ec:7c:ca:c6:7b:06:e9:be:1a:60:80:e2: ad:65:68:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwNzE5MDA1MjIwWhcNMjUwNzI2MDA1MjIwWjAYMRYwFAYD VQQDEw02ODdhZWM0NC1kOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEixl75AFd8IwoUj04BH3ynVqDhh0sdTtppXeyAsZzKD6UOox6pVNId2WvIE PA4itoxqiPMb4QmxfsTXMzzDw3PnVLDKO9esiy5aHwQz46/v+pdBHAEspm+96Itm m7cpndIv8ZKB91wdTTHxexIk8IwJUbMwDspJsIUvnEyvV4ADm+RBpfLEOiFJB3zH j7K3piHIvBW+AOS+N6wQ9s/v7OKijtbTIuKBGeNSGVYGoTuO8x8CzTyUIDfFJfrI 8KBwkXJPlB2V0v/uT9wlmmZbiI2hzK9OceamUyEjTP5B+S+H4PkGBOpvnUyvyHe/ xq8qYm6kC0k//danv4OYRY/JdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZWBlI+ DXRo1VZZK7GPv2SKYbruMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8DlnAi9HoRkaCKx4xDMLm4tSivl0guDWob008D8IF3Q7kqE76HIrw D98JAwJH3sc78le913yCdhkZu0kTbMvT585MmNyCeSGioG/7WQPIxAfzTDohyXNS hBTvYxKrf++j8mjg79RZ6U5ss8QGTdiWY9jzictKL9uYNICpfU08dPpFdjE2O3Wk KqqlE5zfmQYb72j5UnCTs3VL5h16W9qYiKFaGjSf1hm5aRbmtKBkwLuDpe1faG9e 5wsrW0mjrXhPwTAN7vAAq6oMxI68/nSTxzIDnRJxRcdpvVPUDVFJyvhnmEET/jt7 1nldk60rUqXsfMrGewbpvhpggOKtZWgt -----END CERTIFICATE-----Generated at Sun Jul 20 06:23:16 2025 by rpki-client