$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: gOL5Pfd5+/JFlOZNJ57nYrmAX7v2N9cvgZohajPN37Y= Subject key identifier: 50:84:3F:2C:CD:97:53:F0:09:43:0E:00:C1:A5:63:85:7C:46:2F:06 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 197E Signing time: Wed 20 Aug 2025 17:39:50 +0000 Manifest this update: Wed 20 Aug 2025 17:39:48 +0000 Manifest next update: Wed 27 Aug 2025 17:39:48 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: VjyMKvvEDbj4m7aezbw/qKCPjOCYSaPL1uVkuFcWFic=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: Qj9vmpxbOqsAtvTtRRnjjbg9bDrBGP1V9UkKqSNOqgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Aug 20 17:39:48 2025 GMT Not After : Aug 27 17:39:48 2025 GMT Subject: CN=68a60865-49da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:2d:87:e7:25:d3:7f:93:40:33:d3:17:41: b4:da:13:bb:67:49:e5:88:6c:1a:e6:27:4f:56:fe: 23:9f:64:9a:30:a0:3d:00:d5:da:03:74:95:72:4f: 23:8b:08:4d:c7:fb:4c:2f:2f:79:c7:52:ba:03:dc: 08:92:a2:ba:09:d4:dd:16:b1:25:17:82:61:e6:08: cc:ec:a9:ec:ae:41:c6:88:f0:93:0c:8d:75:81:e6: 5e:5e:cf:47:0f:2d:09:91:f5:f9:57:59:08:e3:2d: 87:bb:5b:3d:da:ee:af:71:8b:f9:3d:29:1f:51:d1: 95:d4:e9:f3:9e:4b:ab:56:9a:c0:f9:0d:a8:50:98: 25:32:9e:c4:81:75:93:05:c4:22:95:4f:40:53:b3: 8a:53:5a:f1:73:86:15:cd:28:3d:a3:29:bd:bf:31: 3c:89:f2:dc:5d:fc:a9:da:91:5e:45:9b:75:b2:5c: f7:65:a1:28:5f:a4:67:fd:ff:21:da:3a:9e:c3:4b: a1:4d:59:56:c3:f4:bb:89:14:bb:7f:00:4a:35:c6: a4:16:44:2d:1f:17:8c:21:6e:bc:20:9b:c3:60:aa: 44:1c:d3:b2:99:70:d6:65:10:c6:fb:d8:d8:cd:60: 30:bd:8f:8a:5d:3b:95:52:a0:f3:d2:db:86:bf:2e: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:84:3F:2C:CD:97:53:F0:09:43:0E:00:C1:A5:63:85:7C:46:2F:06 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:73:54:e2:68:58:61:fa:f5:d2:0e:da:9b:22:2e:9b:b3:8e: ce:e4:59:d9:f2:3c:50:e8:64:ca:23:9d:1e:97:a2:16:4e:00: 4d:a5:a3:17:dc:51:5a:ac:60:62:af:0f:7d:a1:52:f9:26:23: 82:cb:16:aa:48:f1:84:b4:7d:19:fa:2e:2f:23:26:56:e3:77: 51:62:4c:a1:52:52:63:06:eb:37:e0:49:7f:b1:51:5c:c9:17: 75:af:5a:ff:28:a6:2f:93:63:21:68:78:3d:74:c6:78:26:8b: 35:e4:26:b3:64:fb:e0:83:6a:20:22:4b:1a:9a:78:5c:38:e1: 78:3d:ce:3f:26:ae:ab:6d:6e:7a:44:8f:e6:71:e2:77:1b:fa: 49:f5:b4:c8:9e:bc:37:e7:b1:e0:d2:91:a7:a8:4a:c0:fe:e7: 49:52:34:f0:10:70:58:33:f7:d0:2a:88:69:7a:c7:5b:e4:e3: 72:1a:0c:c8:6e:9c:d3:3b:e2:99:8f:b0:51:a6:c1:90:f8:59: f1:d1:c2:9b:8e:7a:f5:e5:1b:ce:2b:94:a2:96:a7:f3:5f:e7: f9:ef:8d:3f:3f:1c:13:e9:9e:30:76:e6:6d:1b:a9:fa:6d:97: bd:0c:73:11:74:7a:ea:fe:6a:58:d0:c4:5c:50:fe:cc:be:48: bf:1c:f2:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUwODIwMTczOTQ4WhcNMjUwODI3MTczOTQ4WjAYMRYwFAYD VQQDEw02OGE2MDg2NS00OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGoth+cl03+TQDPTF0G02hO7Z0nliGwa5idPVv4jn2SaMKA9ANXaA3SVck8j iwhNx/tMLy95x1K6A9wIkqK6CdTdFrElF4Jh5gjM7KnsrkHGiPCTDI11geZeXs9H Dy0JkfX5V1kI4y2Hu1s92u6vcYv5PSkfUdGV1OnznkurVprA+Q2oUJglMp7EgXWT BcQilU9AU7OKU1rxc4YVzSg9oym9vzE8ifLcXfyp2pFeRZt1slz3ZaEoX6Rn/f8h 2jqew0uhTVlWw/S7iRS7fwBKNcakFkQtHxeMIW68IJvDYKpEHNOymXDWZRDG+9jY zWAwvY+KXTuVUqDz0tuGvy5ftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCEPyzN l1PwCUMOAMGlY4V8Ri8GMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEc1TiaFhh+vXSDtqbIi6bs47O5FnZ8jxQ6GTKI50el6IWTgBNpaMX 3FFarGBirw99oVL5JiOCyxaqSPGEtH0Z+i4vIyZW43dRYkyhUlJjBus34El/sVFc yRd1r1r/KKYvk2MhaHg9dMZ4Jos15CazZPvgg2ogIksamnhcOOF4Pc4/Jq6rbW56 RI/mceJ3G/pJ9bTInrw357Hg0pGnqErA/udJUjTwEHBYM/fQKohpesdb5ONyGgzI bpzTO+KZj7BRpsGQ+Fnx0cKbjnr15RvOK5SilqfzX+f5740/PxwT6Z4wduZtG6n6 bZe9DHMRdHrq/mpY0MRcUP7Mvki/HPKj -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:31 2025 by rpki-client