$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: 1kWFKBZA+LV6kxobpqWvhPFnbIgxgll9wy53SAp+VHg= Subject key identifier: 5B:65:4D:5E:07:09:AA:B1:9C:85:A5:B6:9D:97:13:10:B0:21:89:D2 Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 1260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 1235 Signing time: Thu 04 Sep 2025 17:17:08 +0000 Manifest this update: Thu 04 Sep 2025 17:17:07 +0000 Manifest next update: Thu 11 Sep 2025 17:17:07 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: Xx2gv7frScHxMf4kdTbBpdpZE038GPzUnutSq5HW/3c=) 2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=) 3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=) 4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4704 (0x1260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Sep 4 17:17:07 2025 GMT Not After : Sep 11 17:17:07 2025 GMT Subject: CN=68b9c994-d1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:ff:1f:e1:d1:0f:e6:6b:db:9c:d6:2b:b3: 3a:ed:90:92:d5:73:22:85:ec:c2:5e:b3:8e:95:6f: 3d:13:f6:ef:50:23:9a:34:aa:2d:27:41:aa:f7:86: ab:ae:3b:5f:a2:f5:72:18:20:e7:13:f4:26:db:70: 28:0b:0b:fa:fd:41:3e:f7:9f:97:eb:15:37:92:47: 8d:40:f4:65:73:e1:38:14:0c:6e:56:34:e2:3c:45: fe:c6:9b:99:02:6a:e7:f9:9b:25:15:ba:92:18:c7: 22:ff:54:fa:40:38:06:8c:36:ac:9c:04:5d:71:56: 43:75:fd:9a:52:4d:0e:fb:4f:47:13:02:ee:3a:16: 19:7d:19:7c:eb:1d:46:24:f0:19:61:78:a4:07:63: f6:0f:76:9c:d3:39:9c:7a:0d:2a:05:07:f1:63:ee: 0b:bd:b7:4c:6f:bc:fa:1b:de:d6:1f:38:fb:cc:15: 41:8d:ab:2d:e8:a8:3c:b6:be:12:89:2c:2d:e8:23: 83:a0:8a:ae:89:b2:64:6c:83:a1:3f:c6:65:94:a5: 3e:0c:6d:dc:e1:61:63:d4:14:cd:fc:64:a6:5f:a7: 3f:cc:aa:6e:62:09:32:6d:c5:1a:cb:5b:46:44:6e: 55:df:ca:7e:84:43:7d:dc:57:74:21:f5:fd:42:d5: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:65:4D:5E:07:09:AA:B1:9C:85:A5:B6:9D:97:13:10:B0:21:89:D2 X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3c:83:c6:6c:b8:96:fb:ac:24:cc:bb:a0:04:c8:c1:26:5f: 87:2b:5d:d5:6c:0c:87:cf:e8:7f:81:b8:25:15:e5:40:92:f6: ff:3f:05:10:5f:b8:34:5d:ce:8f:89:b3:48:52:48:2a:6a:c3: d9:72:61:45:0e:37:da:e3:62:cf:db:7a:6b:5c:20:9f:d5:5d: c4:dd:e1:50:42:d9:a1:5f:30:b3:2d:47:93:67:92:5a:44:2b: 7e:10:16:98:a2:bf:33:28:02:4c:90:b5:7f:77:c2:81:bb:4a: b0:f1:19:b4:a9:8e:21:23:e4:2c:f9:0b:54:24:c2:26:84:53: 49:90:51:a6:15:0e:15:64:48:a1:05:d8:6a:e4:17:8a:27:d7: f6:de:8a:61:8c:05:f0:a5:d0:85:39:34:5e:05:40:e5:b3:a3: c3:1f:d2:78:11:93:0f:54:ad:2c:12:b9:b3:41:05:53:e1:8b: f7:50:eb:e8:a4:99:95:ae:80:08:20:d3:74:72:9c:aa:0d:db: 3f:63:08:4c:79:ed:89:6b:4b:c3:7c:35:85:5c:15:b9:39:be: a2:6c:97:11:6a:9a:c1:a1:be:9f:51:9f:70:19:d5:bb:2c:02: ce:80:38:d2:e0:95:2a:3d:e4:fe:3f:47:1e:f5:7d:d4:4a:ee: f8:7a:0a:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUwOTA0MTcxNzA3WhcNMjUwOTExMTcxNzA3WjAYMRYwFAYD VQQDEw02OGI5Yzk5NC1kMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvz/H+HRD+Zr25zWK7M67ZCS1XMihezCXrOOlW89E/bvUCOaNKotJ0Gq94ar rjtfovVyGCDnE/Qm23AoCwv6/UE+95+X6xU3kkeNQPRlc+E4FAxuVjTiPEX+xpuZ Amrn+ZslFbqSGMci/1T6QDgGjDasnARdcVZDdf2aUk0O+09HEwLuOhYZfRl86x1G JPAZYXikB2P2D3ac0zmceg0qBQfxY+4LvbdMb7z6G97WHzj7zBVBjast6Kg8tr4S iSwt6CODoIquibJkbIOhP8ZllKU+DG3c4WFj1BTN/GSmX6c/zKpuYgkybcUay1tG RG5V38p+hEN93Fd0IfX9QtV0uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtlTV4H CaqxnIWltp2XExCwIYnSMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbPIPGbLiW+6wkzLugBMjBJl+HK13VbAyHz+h/gbglFeVAkvb/PwUQ X7g0Xc6PibNIUkgqasPZcmFFDjfa42LP23prXCCf1V3E3eFQQtmhXzCzLUeTZ5Ja RCt+EBaYor8zKAJMkLV/d8KBu0qw8Rm0qY4hI+Qs+QtUJMImhFNJkFGmFQ4VZEih Bdhq5BeKJ9f23ophjAXwpdCFOTReBUDls6PDH9J4EZMPVK0sErmzQQVT4Yv3UOvo pJmVroAIINN0cpyqDds/YwhMee2Ja0vDfDWFXBW5Ob6ibJcRaprBob6fUZ9wGdW7 LALOgDjS4JUqPeT+P0ce9X3USu74egrU -----END CERTIFICATE-----Generated at Sat Sep 6 13:48:20 2025 by rpki-client