$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json) Hash identifier: YMIv2rmnVyNr1Dy5TZktgrcHC6nn99ZNt0PWGhnUW98= Subject key identifier: 12:95:4E:D4:13:2F:4C:B2:4E:17:48:8A:B2:F6:A7:89:64:94:60:43 Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft Manifest number: AA Signing time: Fri 05 Sep 2025 06:33:32 +0000 Manifest this update: Fri 05 Sep 2025 06:33:32 +0000 Manifest next update: Fri 12 Sep 2025 06:33:32 +0000 Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: 101dHG1GYJAAlOuQ7Zv1knXoLzkoBmfa+C8TdHaWx8w=) 2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: H6cM4D6HiFEzXOD3BJphw2tquQW1HD/n9sWWwx2nQbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Sep 5 06:33:32 2025 GMT Not After : Sep 12 06:33:32 2025 GMT Subject: CN=68ba843c-7e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:b5:7f:8e:3c:3b:10:32:67:af:85:99:9a: e3:42:03:ee:72:42:64:56:3c:8e:db:41:9a:be:5b: aa:3c:70:b9:df:a2:11:01:4a:05:0f:50:19:37:9f: 07:cd:71:db:e3:d3:1a:eb:fc:2a:d1:dc:74:86:b9: d3:66:55:ff:8e:7a:06:ed:d7:9d:25:b1:dc:f8:a7: 59:e3:b7:75:c2:19:66:ce:e3:a2:9a:77:42:60:ef: d7:da:87:98:57:44:a3:d9:18:d7:0f:32:25:05:f7: c4:a2:99:67:8d:2c:0e:51:86:12:ee:23:96:8f:0c: a2:4d:ff:ec:fe:06:8a:b0:b4:9a:d1:0c:1d:99:ea: f8:be:f9:25:e9:2b:29:9d:b7:12:7f:52:49:87:58: 53:00:59:c0:3a:db:9d:27:16:13:9b:8a:f1:68:8b: 11:af:de:5b:3f:db:27:f7:06:9a:15:f6:97:ee:59: c4:b8:10:47:ab:96:ac:b2:bb:d1:e0:23:58:32:4b: 15:0d:76:d1:e4:ae:4b:bb:a5:67:b8:9c:5f:d5:4c: 09:e4:13:7d:70:7b:2c:bc:a5:b0:31:8d:ec:fd:b2: 07:75:12:88:98:aa:06:81:44:52:f4:fa:7d:22:7e: 36:43:79:39:06:a8:d6:8c:05:e0:d8:bf:eb:5f:f7: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:95:4E:D4:13:2F:4C:B2:4E:17:48:8A:B2:F6:A7:89:64:94:60:43 X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:40:c4:00:00:7e:fb:13:44:0b:85:ea:e2:c5:3c:8f:57:81: 76:26:32:e7:ba:c4:bf:35:47:95:9d:45:ca:e5:a7:68:da:76: 40:07:2a:f8:1f:72:a0:5e:99:64:1a:4c:40:87:d2:48:89:4c: 21:52:7a:0c:e5:ec:ee:23:d2:52:ea:1b:7e:2f:a5:59:0b:74: 77:db:ff:ae:19:1b:8e:8f:87:52:92:08:0b:35:9c:61:fe:9e: 5d:15:92:b1:7f:5d:79:b4:f5:2c:ab:0d:3f:b2:f1:21:ab:ee: 93:e5:e0:fa:c5:a9:2c:40:7e:06:ab:0c:18:db:b1:6c:46:98: 74:c8:44:93:68:9c:89:a9:e6:03:5a:3d:60:f4:9c:bb:7f:a9: c7:c5:62:b8:0a:5f:a0:a8:ac:58:22:fd:09:f8:32:62:01:ce: bd:d9:0f:dd:83:3d:ab:25:cd:80:cf:09:32:60:77:65:b7:d9: c2:f6:40:cc:84:8e:97:2d:a2:1e:33:a3:18:8b:44:a8:cc:54: c5:62:85:1f:44:ea:ea:45:53:58:7f:98:17:96:f6:85:4b:b9: df:2e:22:4e:3c:e6:2b:5e:09:79:d5:0e:fd:02:b4:3f:ce:87: 67:3d:7c:3d:cc:35:2e:ce:42:36:d8:b0:33:e8:60:ee:5d:17: 5c:18:73:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKEI1RDk1NTk3N0FEQTQ2ODNBQzVCNTlDMjU4MThCNDQz ODFDMjRGRTYwHhcNMjUwOTA1MDYzMzMyWhcNMjUwOTEyMDYzMzMyWjAYMRYwFAYD VQQDEw02OGJhODQzYy03ZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq21f448OxAyZ6+FmZrjQgPuckJkVjyO20GavluqPHC536IRAUoFD1AZN58H zXHb49Ma6/wq0dx0hrnTZlX/jnoG7dedJbHc+KdZ47d1whlmzuOimndCYO/X2oeY V0Sj2RjXDzIlBffEoplnjSwOUYYS7iOWjwyiTf/s/gaKsLSa0Qwdmer4vvkl6Ssp nbcSf1JJh1hTAFnAOtudJxYTm4rxaIsRr95bP9sn9waaFfaX7lnEuBBHq5assrvR 4CNYMksVDXbR5K5Lu6VnuJxf1UwJ5BN9cHssvKWwMY3s/bIHdRKImKoGgURS9Pp9 In42Q3k5BqjWjAXg2L/rX/eiSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKVTtQT L0yyThdIirL2p4lklGBDMB8GA1UdIwQYMBaAFLXZVZd62kaDrFtZwlgYtEOBwk/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy85QTU4QzM4QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJvT3NXMW5DV0JpMFE0SENU LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1QtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy85QTU4QzM4QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJv T3NXMW5DV0JpMFE0SENULVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeQMQAAH77E0QLherixTyPV4F2JjLnusS/NUeVnUXK5ado2nZAByr4 H3KgXplkGkxAh9JIiUwhUnoM5ezuI9JS6ht+L6VZC3R32/+uGRuOj4dSkggLNZxh /p5dFZKxf115tPUsqw0/svEhq+6T5eD6xaksQH4GqwwY27FsRph0yESTaJyJqeYD Wj1g9Jy7f6nHxWK4Cl+gqKxYIv0J+DJiAc692Q/dgz2rJc2AzwkyYHdlt9nC9kDM hI6XLaIeM6MYi0SozFTFYoUfROrqRVNYf5gXlvaFS7nfLiJOPOYrXgl51Q79ArQ/ zodnPXw9zDUuzkI22LAz6GDuXRdcGHNC -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:59 2025 by rpki-client