$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: BQddLBfxnDHe5U/R138CELAxM/2RPV/u29TWKL695T8= Subject key identifier: C7:D7:3C:40:1A:C2:EE:10:C3:7B:E5:3A:AB:29:37:65:74:46:AD:13 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B32 Signing time: Sun 24 Aug 2025 19:12:51 +0000 Manifest this update: Sun 24 Aug 2025 19:12:50 +0000 Manifest next update: Sun 31 Aug 2025 19:12:50 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: RNH9m7AMz5GgLR/oH/Ofk9sCjZWpBESoz1ZpKz4iGbw=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Aug 24 19:12:50 2025 GMT Not After : Aug 31 19:12:50 2025 GMT Subject: CN=68ab6432-4d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:f4:20:31:f4:0f:a2:4d:af:91:25:a9:42: 54:db:44:38:e8:57:f2:93:86:6f:38:27:be:2b:18: f1:06:47:67:0d:b8:e4:c4:aa:87:8d:f2:28:10:14: 12:6c:2c:28:46:db:75:b4:89:c1:b3:ca:a9:ff:71: 99:58:60:bc:69:99:99:94:cc:13:10:ec:80:1e:1b: 8b:cf:5c:c7:52:93:64:da:0c:cd:32:32:2d:ac:f5: 81:85:4d:c7:cf:ef:29:ed:d1:e4:b1:9c:42:6c:6e: ce:34:7c:f2:05:10:b2:b8:5e:8b:6d:0c:9f:b4:a3: c3:f2:2b:48:4c:a7:ea:bd:e7:ad:93:33:84:95:c6: 50:7d:6a:57:59:b5:a3:9c:9e:79:56:0d:4f:6b:4e: aa:31:7a:70:dd:56:c2:9f:85:27:47:09:36:4b:74: 9a:cc:22:7a:aa:8c:43:1e:d6:7f:18:90:0a:45:03: 89:20:df:ba:03:49:15:96:b8:7d:d5:ec:24:af:4c: 68:75:13:f5:a2:97:b3:92:98:e4:8b:fc:aa:ec:7a: b6:53:95:36:20:55:4a:4a:d4:64:7a:68:31:bb:45: 5c:48:d4:c0:20:d8:06:2b:c8:7b:34:d0:81:ca:89: 76:76:9e:7b:63:3d:ff:80:d0:44:fb:46:89:bf:94: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D7:3C:40:1A:C2:EE:10:C3:7B:E5:3A:AB:29:37:65:74:46:AD:13 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8a:33:54:11:03:68:8e:c3:e5:f9:c3:a1:ef:2b:ed:d5:a4: 38:a0:c0:09:e7:06:fd:a4:16:6a:8c:24:60:64:e3:68:d0:91: 26:f4:4a:50:2c:45:0d:76:60:72:cd:d8:8c:3a:29:b0:ce:50: 46:cc:79:26:c7:21:f8:4a:6b:2a:cd:1a:19:65:ff:f4:0e:58: 04:00:25:9e:f5:b2:18:d6:22:1d:a8:c3:40:47:7f:4b:f3:f0: c1:70:1c:d0:e5:dd:7d:39:02:dd:63:d5:9d:b3:92:91:0c:9d: 14:50:55:99:12:cf:82:7f:d4:4d:70:37:e9:d6:6b:34:b8:56: 7d:e4:94:9b:8b:e6:16:3b:c9:8e:c2:95:e5:fb:c2:ef:c8:6a: d8:66:9c:ec:c3:35:2a:73:c7:59:41:22:b2:f8:94:78:dc:b0: 80:a2:0e:6b:76:e1:ab:7e:b6:06:13:cf:65:73:e1:10:56:0f: 2c:4f:b1:46:27:5a:33:2c:8d:1c:89:30:d8:1f:33:f6:84:ce: 99:00:6e:65:80:96:20:c9:19:5c:c0:d2:1b:6f:4b:03:48:6f: d2:77:2b:3f:8f:d1:11:dc:3f:c9:10:e2:fd:06:df:1b:4d:93: 2e:42:53:ba:be:ea:da:c4:93:2a:15:03:1f:6e:88:a5:63:0b: 6c:0e:a0:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUwODI0MTkxMjUwWhcNMjUwODMxMTkxMjUwWjAYMRYwFAYD VQQDEw02OGFiNjQzMi00ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun30IDH0D6JNr5ElqUJU20Q46Ffyk4ZvOCe+KxjxBkdnDbjkxKqHjfIoEBQS bCwoRtt1tInBs8qp/3GZWGC8aZmZlMwTEOyAHhuLz1zHUpNk2gzNMjItrPWBhU3H z+8p7dHksZxCbG7ONHzyBRCyuF6LbQyftKPD8itITKfqveetkzOElcZQfWpXWbWj nJ55Vg1Pa06qMXpw3VbCn4UnRwk2S3SazCJ6qoxDHtZ/GJAKRQOJIN+6A0kVlrh9 1ewkr0xodRP1opezkpjki/yq7Hq2U5U2IFVKStRkemgxu0VcSNTAINgGK8h7NNCB yol2dp57Yz3/gNBE+0aJv5Ru/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfXPEAa wu4Qw3vlOqspN2V0Rq0TMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArijNUEQNojsPl+cOh7yvt1aQ4oMAJ5wb9pBZqjCRgZONo0JEm9EpQ LEUNdmByzdiMOimwzlBGzHkmxyH4SmsqzRoZZf/0DlgEACWe9bIY1iIdqMNAR39L 8/DBcBzQ5d19OQLdY9Wds5KRDJ0UUFWZEs+Cf9RNcDfp1ms0uFZ95JSbi+YWO8mO wpXl+8LvyGrYZpzswzUqc8dZQSKy+JR43LCAog5rduGrfrYGE89lc+EQVg8sT7FG J1ozLI0ciTDYHzP2hM6ZAG5lgJYgyRlcwNIbb0sDSG/Sdys/j9ER3D/JEOL9Bt8b TZMuQlO6vuraxJMqFQMfboilYwtsDqCZ -----END CERTIFICATE-----Generated at Sun Aug 24 22:21:01 2025 by rpki-client