$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: um9JPHRoJOYWYpyOCEB2qQhqWBjxK2mc2tmWYNHB9b8= Subject key identifier: F5:E3:7F:F3:76:E7:7A:1B:D5:72:E0:0E:93:82:E4:89:2E:48:DD:56 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 0224 Signing time: Tue 09 Sep 2025 02:01:50 +0000 Manifest this update: Tue 09 Sep 2025 02:01:50 +0000 Manifest next update: Tue 16 Sep 2025 02:01:50 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: L4P3JYvO3yyKNPBwUydVBItldyZsRGDi26gee8EVzo4=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Sep 9 02:01:50 2025 GMT Not After : Sep 16 02:01:50 2025 GMT Subject: CN=68bf8a8e-82b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:19:d1:51:ba:1e:6f:15:1d:58:eb:f9:3f: 88:cc:91:99:e1:4a:8e:04:64:3b:25:39:da:5c:e6: bb:41:7a:f7:b2:5f:c9:3a:52:ff:70:40:8c:f9:92: dd:37:92:66:ab:95:bb:95:ca:56:81:67:76:60:da: 83:63:63:50:07:3f:14:f6:75:a6:92:ec:e2:22:94: 8c:fa:1d:7b:18:bb:84:b2:fd:b7:62:42:bc:b9:20: 60:05:28:7e:b0:8e:ea:71:86:f6:53:24:4d:84:bc: 1e:30:6e:b8:66:fa:73:a6:4f:50:3e:e5:94:c9:6f: 82:d6:05:e3:a6:d0:8a:d3:a0:21:7e:81:04:c6:4d: 68:36:a1:e9:b5:f5:7f:9f:d3:51:c7:95:30:75:97: 1e:1f:6a:f9:50:51:ce:04:81:2c:0d:c0:ad:d5:b1: f2:a8:5d:6b:09:79:c1:61:16:68:70:ca:50:c6:f3: 47:70:7e:1e:4d:5d:8f:6a:6b:bd:14:9c:7c:ef:ac: ad:6a:ac:2b:92:19:de:72:8f:a0:28:5c:6b:5d:94: 41:08:d9:31:4a:ca:2b:6a:ec:93:01:54:63:35:8b: 5c:5a:ef:66:ed:29:9c:f3:c7:da:92:21:ce:ba:6c: 2a:81:f2:23:8a:75:f2:2d:80:a5:a9:94:74:26:75: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E3:7F:F3:76:E7:7A:1B:D5:72:E0:0E:93:82:E4:89:2E:48:DD:56 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cf:36:bf:5a:07:fe:e1:5d:e2:54:a2:77:09:7d:c2:a5:7c: f7:ac:67:7e:06:b6:e9:79:98:0d:f5:8d:cb:68:81:d5:dd:71: ac:7e:16:46:b4:14:01:07:e7:71:29:8e:55:ed:52:99:01:18: 96:88:b6:d1:00:02:d3:4c:ac:35:f7:39:ba:d4:6e:c6:86:17: 98:fc:87:31:51:e6:9f:33:16:58:b4:38:4c:11:9a:46:46:62: 6a:16:33:c2:70:bc:a0:d1:14:aa:52:52:9c:1a:ee:b4:20:1c: 45:a5:f9:50:9d:d8:69:6d:fa:f3:68:24:bc:42:03:96:61:f3: 66:cb:f5:8e:3a:01:27:87:7b:6e:4f:0d:1f:e9:ac:74:78:a3: ee:26:38:7c:92:5e:30:48:95:5d:1d:41:45:0c:88:6c:bf:26: df:99:8a:80:be:a0:98:bc:83:7b:46:cf:0e:af:54:29:58:5c: de:e7:5e:88:ef:55:84:65:54:6c:4b:64:1a:dd:de:bb:4a:03: bc:21:90:bf:a6:cd:a4:f0:7d:dc:e3:21:ce:3c:c9:a9:4d:2d: 32:2f:fa:f2:bc:bf:c2:8d:20:c4:ef:74:f8:04:ae:98:15:fc: 33:d6:20:63:90:34:f4:f6:62:0d:07:1a:db:9b:c4:48:f1:4a: dc:0b:b0:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwOTA5MDIwMTUwWhcNMjUwOTE2MDIwMTUwWjAYMRYwFAYD VQQDEw02OGJmOGE4ZS04MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+UZ0VG6Hm8VHVjr+T+IzJGZ4UqOBGQ7JTnaXOa7QXr3sl/JOlL/cECM+ZLd N5Jmq5W7lcpWgWd2YNqDY2NQBz8U9nWmkuziIpSM+h17GLuEsv23YkK8uSBgBSh+ sI7qcYb2UyRNhLweMG64Zvpzpk9QPuWUyW+C1gXjptCK06AhfoEExk1oNqHptfV/ n9NRx5UwdZceH2r5UFHOBIEsDcCt1bHyqF1rCXnBYRZocMpQxvNHcH4eTV2Pamu9 FJx876ytaqwrkhneco+gKFxrXZRBCNkxSsorauyTAVRjNYtcWu9m7Smc88fakiHO umwqgfIjinXyLYClqZR0JnXqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXjf/N2 53ob1XLgDpOC5IkuSN1WMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAszza/Wgf+4V3iVKJ3CX3CpXz3rGd+BrbpeZgN9Y3LaIHV3XGsfhZG tBQBB+dxKY5V7VKZARiWiLbRAALTTKw19zm61G7GhheY/IcxUeafMxZYtDhMEZpG RmJqFjPCcLyg0RSqUlKcGu60IBxFpflQndhpbfrzaCS8QgOWYfNmy/WOOgEnh3tu Tw0f6ax0eKPuJjh8kl4wSJVdHUFFDIhsvybfmYqAvqCYvIN7Rs8Or1QpWFze516I 71WEZVRsS2Qa3d67SgO8IZC/ps2k8H3c4yHOPMmpTS0yL/ryvL/CjSDE73T4BK6Y Ffwz1iBjkDT09mINBxrbm8RI8UrcC7Ac -----END CERTIFICATE-----Generated at Tue Sep 9 13:36:53 2025 by rpki-client