$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json) Hash identifier: T4BVMaN4BUqldU+SV/j0bxci0P+tqFoydm6AXpPiPRY= Subject key identifier: 6F:66:F9:C1:7D:8D:51:D0:99:D1:DC:8A:72:44:A5:D8:C9:38:A2:0E Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft Manifest number: FC Signing time: Sat 19 Jul 2025 05:20:46 +0000 Manifest this update: Sat 19 Jul 2025 05:20:45 +0000 Manifest next update: Sat 26 Jul 2025 05:20:45 +0000 Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: N7XmEaiwbnyGu0LXX92+ku1mIZ+ZkecvYrSFn6T03MM=) 2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: LjsOflVWx2ASLq3Z//t4WARlGyPly5HO69O4zsWdHy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Validity Not Before: Jul 19 05:20:45 2025 GMT Not After : Jul 26 05:20:45 2025 GMT Subject: CN=687b2b2e-7116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:c4:e1:64:64:6e:88:aa:8c:85:4f:ad:f3: 69:eb:e4:b5:5f:1d:a4:84:b1:23:82:31:c5:9c:8f: de:80:b4:76:d3:2e:d5:30:51:46:b1:52:35:41:f4: a6:25:5a:c7:f8:ee:76:f0:ee:5a:a5:39:7e:0b:ea: ec:d6:d2:ab:fd:72:4a:cd:84:28:67:1f:8c:1f:6e: a3:62:75:69:50:64:d3:53:31:8e:36:23:18:ad:d5: cd:b4:31:79:4d:3f:df:7d:9e:c2:ae:a2:f2:4c:54: dd:9d:41:2a:a4:2f:45:49:12:29:ff:da:38:7d:3f: 22:83:c3:6b:55:77:77:c4:79:1a:e1:3e:4c:c3:77: 58:a7:db:10:fe:ca:5a:51:98:bc:32:2c:07:ee:93: 86:9f:d5:3f:c4:3e:5c:0f:1e:90:24:f8:06:55:18: 56:50:c1:f0:9d:8e:eb:2e:cd:b9:b2:f3:f6:12:f6: e7:7f:54:a6:77:85:5a:46:63:19:7a:c5:91:ed:31: 43:e1:33:05:2a:a2:ff:e6:af:51:8a:0a:08:0e:ee: a7:6c:34:8f:52:d8:51:5d:01:c4:d6:b7:3b:17:fd: ad:c3:ec:37:65:61:61:ca:ab:b6:e7:ff:c9:f8:e2: 3e:ab:7c:07:8f:bf:85:53:c3:8a:4f:1f:d6:07:fb: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:F9:C1:7D:8D:51:D0:99:D1:DC:8A:72:44:A5:D8:C9:38:A2:0E X509v3 Authority Key Identifier: keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9c:7d:0e:74:60:f0:52:f9:76:63:fb:52:8b:7f:04:f5:ff: 85:83:5c:59:95:6f:20:39:bc:8b:6e:58:e0:87:88:a2:3e:fc: af:ea:48:5e:47:e7:13:c5:ac:73:45:57:fc:0b:39:ce:58:a4: 4e:12:a0:4f:3f:1f:5c:47:82:d5:9e:3c:d8:c6:6a:10:f6:28: b3:48:02:cf:3e:e5:48:f5:18:2f:d4:a8:e7:72:75:25:6b:d4: 4d:22:dc:30:69:3f:c0:f4:c8:98:f3:67:10:36:26:9f:15:fc: 57:b5:78:f0:7e:f4:91:f8:90:7b:f2:ce:ea:a8:e4:a1:0a:b9: 96:0f:4e:f6:c9:b0:e3:87:8c:5e:ae:4f:ea:37:98:b5:24:0c: 52:5e:98:ad:1d:41:b8:bd:ab:49:54:1c:b2:f0:f6:13:99:0c: 7c:f4:a4:34:81:7c:4a:4d:e4:65:b2:2e:42:fa:f7:4d:c2:66: 9b:fc:e5:bb:bd:25:ad:64:a9:a7:06:53:a4:c3:89:16:10:6e: bb:16:0e:b6:b7:d8:c1:8b:17:66:c5:46:d9:be:4c:40:6b:02: 40:8f:5e:4e:45:0c:43:36:26:b8:cb:df:1a:ee:8b:6d:5e:15: 5b:b3:f5:e2:de:39:2f:1f:42:0b:a0:dc:be:b5:a6:98:c1:39: c6:8e:1e:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEOTUxMTAvBgNVBAUTKEZFRDgxNzJGOEE5NUEzNTIwMkQ1MUM2Rjc1RkE5NDdE RTg0NEY0Q0QwHhcNMjUwNzE5MDUyMDQ1WhcNMjUwNzI2MDUyMDQ1WjAYMRYwFAYD VQQDEw02ODdiMmIyZS03MTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ7E4WRkboiqjIVPrfNp6+S1Xx2khLEjgjHFnI/egLR20y7VMFFGsVI1QfSm JVrH+O528O5apTl+C+rs1tKr/XJKzYQoZx+MH26jYnVpUGTTUzGONiMYrdXNtDF5 TT/ffZ7CrqLyTFTdnUEqpC9FSRIp/9o4fT8ig8NrVXd3xHka4T5Mw3dYp9sQ/spa UZi8MiwH7pOGn9U/xD5cDx6QJPgGVRhWUMHwnY7rLs25svP2Evbnf1Smd4VaRmMZ esWR7TFD4TMFKqL/5q9RigoIDu6nbDSPUthRXQHE1rc7F/2tw+w3ZWFhyqu25//J +OI+q3wHj7+FU8OKTx/WB/ubdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9m+cF9 jVHQmdHcinJEpdjJOKIOMB8GA1UdIwQYMBaAFP7YFy+KlaNSAtUcb3X6lH3oRPTN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ5NS80OEVEMjk2QUUw NjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8xSUMxUnh2ZGZxVWZlaEU5 TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190Z1hMNHFWbzFJQzFSeHZkZnFVZmVoRTlNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ5NS80OEVEMjk2QUUwNjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8x SUMxUnh2ZGZxVWZlaEU5TTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3nH0OdGDwUvl2Y/tSi38E9f+Fg1xZlW8gObyLbljgh4iiPvyv6khe R+cTxaxzRVf8CznOWKROEqBPPx9cR4LVnjzYxmoQ9iizSALPPuVI9Rgv1KjncnUl a9RNItwwaT/A9MiY82cQNiafFfxXtXjwfvSR+JB78s7qqOShCrmWD072ybDjh4xe rk/qN5i1JAxSXpitHUG4vatJVByy8PYTmQx89KQ0gXxKTeRlsi5C+vdNwmab/OW7 vSWtZKmnBlOkw4kWEG67Fg62t9jBixdmxUbZvkxAawJAj15ORQxDNia4y98a7ott XhVbs/Xi3jkvH0ILoNy+taaYwTnGjh7/ -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:08 2025 by rpki-client