$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: XRE9E/vOTZbuCUa2VhBYVDOeiMLn3ZEd6j3ps/EY5Zo= Subject key identifier: C8:A2:83:34:F6:11:10:52:C0:3A:8B:26:07:D9:B9:09:3F:F9:D5:E9 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 016B Signing time: Sun 07 Sep 2025 05:25:23 +0000 Manifest this update: Sun 07 Sep 2025 05:25:22 +0000 Manifest next update: Sun 14 Sep 2025 05:25:22 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: d68J39WGZrkUxiZMiv68GfPVo+C2qbLscJf3rlZJl7M=) 2: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo=) 3: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) 4: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) 5: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 6: B829D0325B1911F0B22D1D7EC4F9AE02.roa (hash: aZgJ0HtdFLW3z1O3m8iUNjI3ajFvG4JUkNQZr3Vclas=) 7: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Sep 7 05:25:22 2025 GMT Not After : Sep 14 05:25:22 2025 GMT Subject: CN=68bd1743-a9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:20:d8:ee:32:97:3a:ef:7d:f3:a1:92:ed: 6f:b1:d3:75:70:a8:0f:0c:ee:0e:c2:d2:87:ec:4e: 4d:76:99:98:f3:f3:60:cd:1f:2d:e1:29:9c:6f:1e: d2:b7:3a:2f:ca:43:2d:81:fd:49:0a:b3:1e:60:8d: c4:b6:96:a0:58:c2:a2:00:14:70:ba:00:7f:3b:16: de:2f:88:00:73:14:50:4b:db:2a:a8:75:4d:50:4d: c2:c8:49:c5:12:88:a5:f7:e5:4b:33:24:d1:3d:e6: 11:c4:b7:9f:c4:98:1e:75:90:56:83:35:f7:ba:66: 7d:23:06:0b:f9:52:f6:da:c0:47:cd:26:96:1a:1f: df:77:1d:4e:1d:46:49:5a:1a:63:3d:f2:ad:cf:95: 70:63:94:8c:48:4e:e9:5d:ae:09:f5:90:6d:5b:e5: 4d:93:4c:9f:f9:ef:6e:de:6a:8e:0e:57:b0:bd:13: 7b:8d:54:35:c2:5d:cb:c4:f4:28:df:f0:4a:ad:06: 9a:60:d7:cf:4b:b9:dd:8a:c7:28:1b:d9:bc:14:dd: ba:31:8e:8f:db:68:58:61:f8:81:2b:17:4e:77:47: 45:37:df:e0:61:a0:1a:2a:fe:1a:7c:cc:49:3a:93: e0:90:05:49:72:fc:21:63:4b:e5:38:ad:5b:91:03: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A2:83:34:F6:11:10:52:C0:3A:8B:26:07:D9:B9:09:3F:F9:D5:E9 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ea:7f:cf:1a:50:47:ad:92:e6:b6:a1:e1:3d:cd:34:90:07: aa:a5:35:f6:f7:d5:6a:9a:22:08:27:7a:cb:e3:89:e7:8e:81: 23:c3:ab:24:df:7b:f7:bb:88:01:36:7c:fa:50:6a:bc:8e:2d: 3e:a0:5d:18:a3:0b:5c:4f:ea:f8:d8:61:c9:33:21:53:ac:76: b3:1f:99:e1:56:c2:f9:9a:f3:88:bd:21:a2:5a:fb:4b:bc:fc: cf:1a:0d:09:ec:33:61:3b:55:27:63:47:0d:5e:bd:d0:48:8c: dc:17:82:22:78:ce:ac:b4:3b:1d:fb:11:27:dd:74:8c:83:6b: 15:72:e7:37:b8:9b:76:f7:bf:4b:5b:74:87:02:91:0c:25:af: 8c:6b:bf:f5:7d:18:ad:ea:39:14:73:f2:75:02:4f:f3:7e:a2: 19:e9:aa:10:ac:8e:57:e4:12:92:6a:98:f6:ae:54:fc:93:f1: 83:fe:cf:f9:0a:e9:6a:ae:8b:0a:63:8b:22:71:eb:18:aa:37: 0c:4e:74:c0:ec:9d:87:79:79:ed:fa:1e:cd:96:4e:a1:84:e7: 6a:58:e5:af:a2:d0:ff:d5:84:fe:44:a3:0c:21:c6:5a:e9:f3: e9:f2:1e:ab:a0:1e:2c:f6:99:ac:44:7e:95:2e:0a:5b:e4:a3: 16:62:5d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwOTA3MDUyNTIyWhcNMjUwOTE0MDUyNTIyWjAYMRYwFAYD VQQDEw02OGJkMTc0My1hOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMEg2O4ylzrvffOhku1vsdN1cKgPDO4OwtKH7E5NdpmY8/NgzR8t4Smcbx7S tzovykMtgf1JCrMeYI3EtpagWMKiABRwugB/OxbeL4gAcxRQS9sqqHVNUE3CyEnF Eoil9+VLMyTRPeYRxLefxJgedZBWgzX3umZ9IwYL+VL22sBHzSaWGh/fdx1OHUZJ WhpjPfKtz5VwY5SMSE7pXa4J9ZBtW+VNk0yf+e9u3mqODlewvRN7jVQ1wl3LxPQo 3/BKrQaaYNfPS7ndiscoG9m8FN26MY6P22hYYfiBKxdOd0dFN9/gYaAaKv4afMxJ OpPgkAVJcvwhY0vlOK1bkQMP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiigzT2 ERBSwDqLJgfZuQk/+dXpMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD6n/PGlBHrZLmtqHhPc00kAeqpTX299VqmiIIJ3rL44nnjoEjw6sk 33v3u4gBNnz6UGq8ji0+oF0YowtcT+r42GHJMyFTrHazH5nhVsL5mvOIvSGiWvtL vPzPGg0J7DNhO1UnY0cNXr3QSIzcF4IieM6stDsd+xEn3XSMg2sVcuc3uJt2979L W3SHApEMJa+Ma7/1fRit6jkUc/J1Ak/zfqIZ6aoQrI5X5BKSapj2rlT8k/GD/s/5 CulqrosKY4sicesYqjcMTnTA7J2HeXnt+h7Nlk6hhOdqWOWvotD/1YT+RKMMIcZa 6fPp8h6roB4s9pmsRH6VLgpb5KMWYl1t -----END CERTIFICATE-----Generated at Sun Sep 7 14:25:39 2025 by rpki-client