$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: 0njcroLNBZCEqTn0luA50TfoYvuEG2yByTY6gUKTbZI= Subject key identifier: FB:7F:CE:9A:24:5B:92:09:9D:0B:76:22:C1:5A:BA:F2:D1:AF:49:86 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: EB Signing time: Fri 05 Sep 2025 05:43:39 +0000 Manifest this update: Fri 05 Sep 2025 05:43:38 +0000 Manifest next update: Fri 12 Sep 2025 05:43:38 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: KFiDrcmGBYrPnojzUTqQWu5ZGilJHdqLebUv0IT7q3w=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: UR1/D+V/HfsARytm1z1u12yu/ZwctEFat0Uu8xOAKlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Sep 5 05:43:38 2025 GMT Not After : Sep 12 05:43:38 2025 GMT Subject: CN=68ba788b-64a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:d7:66:48:e0:50:44:95:c4:e3:96:60:12: 04:70:44:cc:fe:b4:e0:7c:11:0d:bb:be:ba:8a:1d: 1f:52:17:ae:05:86:85:4e:c5:d1:c7:88:5c:91:a6: 4a:16:8e:65:1d:47:ba:65:01:8c:fd:0d:6b:23:1a: 40:c3:db:49:e9:c6:74:b6:6d:02:ef:f8:d2:70:3d: 88:db:4c:9a:bb:1e:dd:26:37:17:39:10:95:f0:65: ae:8e:22:ea:7a:2d:95:9c:42:9b:87:7a:b2:b9:71: ad:b1:07:f9:19:20:19:39:f1:87:6e:03:7d:ad:04: db:22:64:24:6d:a3:b9:ef:19:b1:20:db:53:8b:36: 88:12:14:fd:7b:3b:6d:95:69:68:9e:04:d1:c8:45: 7e:ed:ce:6b:5d:25:ec:bb:40:1b:db:35:40:32:9d: 38:bd:69:48:d1:27:5e:22:41:b5:36:25:c7:7d:49: f8:c9:12:9e:3b:76:a7:02:0c:38:ad:89:d1:d7:4e: 94:37:77:00:fc:f1:fb:ab:bb:62:aa:77:2b:00:27: 37:be:eb:36:f5:fb:1e:11:5e:90:d9:9e:29:c5:13: a2:c3:b9:33:7f:a8:41:11:fc:5f:7c:96:77:3d:da: 22:3f:0b:24:28:22:72:c9:07:41:76:fc:48:5d:4b: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:CE:9A:24:5B:92:09:9D:0B:76:22:C1:5A:BA:F2:D1:AF:49:86 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8c:22:8e:2e:57:5b:9a:22:fc:ed:d7:10:14:9f:7d:3b:e0: cf:63:15:f2:ef:9c:15:04:61:0f:66:14:76:22:13:c1:c3:c3: 19:70:fb:64:01:75:18:5c:02:ab:34:40:ed:8a:55:b9:9a:74: 1a:7a:f5:3d:46:da:3d:a4:1a:5f:79:af:4f:f5:c6:78:7b:b1: ff:41:62:99:b2:e0:98:30:c3:aa:91:dc:d9:d8:72:de:ec:ea: 72:f3:39:7c:36:33:fe:e0:7c:25:21:01:25:e8:36:7d:7b:b7: 27:1c:c0:db:d5:c8:5e:60:d9:7c:6a:83:a3:61:5e:41:6f:46: 72:5d:bf:fb:18:a6:25:1e:6b:36:fd:03:ee:78:88:ee:88:92: bd:8e:3b:3f:64:ef:e3:a7:64:67:d4:e6:d8:b0:ec:76:9c:0c: 1b:b4:84:3a:ce:79:c5:2a:30:7f:ec:19:8b:6a:42:bf:9c:a2: 41:a9:cd:46:47:27:04:c6:46:3d:a4:3a:4e:5e:58:50:c9:56: 7d:6b:53:64:3d:77:94:33:0e:44:98:84:02:fe:d7:21:33:52: 69:3e:a3:c8:ed:e3:93:7b:5f:97:7d:66:e7:24:a5:14:6c:47: 91:eb:a1:5b:74:ce:89:47:f5:b9:fb:ac:74:e7:51:b5:98:5a: eb:08:06:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUwOTA1MDU0MzM4WhcNMjUwOTEyMDU0MzM4WjAYMRYwFAYD VQQDEw02OGJhNzg4Yi02NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjHXZkjgUESVxOOWYBIEcETM/rTgfBENu766ih0fUheuBYaFTsXRx4hckaZK Fo5lHUe6ZQGM/Q1rIxpAw9tJ6cZ0tm0C7/jScD2I20yaux7dJjcXORCV8GWujiLq ei2VnEKbh3qyuXGtsQf5GSAZOfGHbgN9rQTbImQkbaO57xmxINtTizaIEhT9eztt lWlongTRyEV+7c5rXSXsu0Ab2zVAMp04vWlI0SdeIkG1NiXHfUn4yRKeO3anAgw4 rYnR106UN3cA/PH7q7tiqncrACc3vus29fseEV6Q2Z4pxROiw7kzf6hBEfxffJZ3 PdoiPwskKCJyyQdBdvxIXUt5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt/zpok W5IJnQt2IsFauvLRr0mGMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+jCKOLldbmiL87dcQFJ99O+DPYxXy75wVBGEPZhR2IhPBw8MZcPtk AXUYXAKrNEDtilW5mnQaevU9Rto9pBpfea9P9cZ4e7H/QWKZsuCYMMOqkdzZ2HLe 7Opy8zl8NjP+4HwlIQEl6DZ9e7cnHMDb1cheYNl8aoOjYV5Bb0ZyXb/7GKYlHms2 /QPueIjuiJK9jjs/ZO/jp2Rn1ObYsOx2nAwbtIQ6znnFKjB/7BmLakK/nKJBqc1G RycExkY9pDpOXlhQyVZ9a1NkPXeUMw5EmIQC/tchM1JpPqPI7eOTe1+XfWbnJKUU bEeR66FbdM6JR/W5+6x051G1mFrrCAZB -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:11 2025 by rpki-client