$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: B0X8o/QXK0GMtLRIS5qVCeGsS0Z05d3jgh/d5ta+ROE= Subject key identifier: 2E:10:6B:F0:BA:10:15:09:94:49:72:AA:72:16:2E:F3:A5:DC:B8:E9 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 141A Signing time: Wed 20 Aug 2025 18:42:41 +0000 Manifest this update: Wed 20 Aug 2025 18:42:40 +0000 Manifest next update: Wed 27 Aug 2025 18:42:40 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: bgIdYF9KsJ232Nh56Q5alg5WrbhGor5d0ws5iJH7Vyc=) 2: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: k142c1mhkeL45x3p2n9As909+kYuHAEo9TNndwZMKuc=) 3: 81A55E3629E711F08823E620C4F9AE02.roa (hash: hX5dpHGXTGcDiyEWkvOCWSK7VdcIwU2X7lTjxGfS0x8=) 4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: LHvxfj3VCNmuKnrLv2NsZrToWYHoHHWWd+F8Qkfp44A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Aug 20 18:42:40 2025 GMT Not After : Aug 27 18:42:40 2025 GMT Subject: CN=68a61721-b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:27:f5:24:49:32:af:ca:77:9e:ed:e9:37: 75:1f:11:5e:e4:5b:70:06:b1:67:e4:05:15:e5:95: 53:6f:55:4e:b6:5c:29:16:75:8d:f4:48:f8:ec:46: 36:31:92:58:ae:86:af:c3:bd:09:d7:33:16:bf:ba: 4a:33:c8:4c:53:26:a7:61:d9:1e:c4:0b:2b:6a:b5: 43:39:93:38:65:6c:e3:37:8b:a2:62:0e:83:df:68: 94:91:de:38:90:e1:94:ab:fc:af:12:e5:be:c6:98: 77:9d:26:74:c6:70:c6:e7:9b:31:d9:da:3a:dd:96: 2a:01:7c:18:87:65:92:df:51:9f:36:f2:64:03:8e: f1:8e:e1:54:d8:70:44:a1:6e:be:c1:e1:58:88:7d: 73:3e:98:a1:86:11:8a:83:91:76:e1:50:73:00:5c: ba:ce:2f:5a:f5:a3:78:eb:47:9a:70:aa:b3:1d:ff: 97:35:b7:b2:1e:98:80:5c:3f:66:10:d6:a1:26:fa: 0b:23:1d:3a:ab:5c:76:0d:7c:b2:e7:1a:cf:db:01: b4:72:ef:53:2f:18:a0:3a:c1:4d:89:cc:b1:9c:02: a0:c7:b6:b0:94:18:f8:1a:c9:85:0e:67:e1:0d:e3: b1:46:27:26:e5:4f:db:3f:a4:5a:8a:c6:7c:46:93: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:10:6B:F0:BA:10:15:09:94:49:72:AA:72:16:2E:F3:A5:DC:B8:E9 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ea:a8:d2:71:1d:45:8f:50:b4:0c:6e:0c:02:4a:c0:d1:9f: e4:ff:cc:f1:2e:a2:0f:e4:e5:a2:25:a5:fc:5e:1d:10:1c:43: ef:32:24:ab:23:66:a3:c0:60:10:93:ba:97:c7:1d:f9:2e:fc: 9f:dd:ab:9e:30:c5:d5:6e:34:74:98:65:2f:4b:22:d8:40:e7: 4b:2f:25:0d:4b:df:30:ab:e3:cd:ea:db:0e:5f:c5:fd:36:2f: d2:f6:44:0d:58:1a:ad:76:4d:d5:8a:84:db:20:0a:7a:3a:9c: 52:1d:ca:54:2f:7e:35:9f:60:e1:ed:e5:ee:fa:37:dc:e0:34: 81:6f:d0:b8:3e:e3:b3:8b:b1:9b:4a:3e:36:1f:7a:87:d6:6e: 9b:64:5b:0f:a1:1b:99:35:cf:0d:f4:36:f9:a4:37:3a:fd:87: 8f:06:62:b6:73:87:a3:74:28:91:15:23:29:3a:7b:e7:c6:27: b7:90:48:84:20:b8:d6:2e:7a:72:bd:5e:cb:6b:f2:b3:ad:88: d5:bf:5d:16:48:b2:18:35:80:ee:53:14:73:99:3e:ff:1f:be: e5:ca:cf:ba:e1:44:ac:a7:a9:49:73:7a:85:ce:97:c8:3b:d3: 59:b0:b4:d7:9d:81:a9:0b:b3:a9:cf:8b:04:1d:fe:7d:28:b2: 7c:2d:b1:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUwODIwMTg0MjQwWhcNMjUwODI3MTg0MjQwWjAYMRYwFAYD VQQDEw02OGE2MTcyMS1iMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxUn9SRJMq/Kd57t6Td1HxFe5FtwBrFn5AUV5ZVTb1VOtlwpFnWN9Ej47EY2 MZJYroavw70J1zMWv7pKM8hMUyanYdkexAsrarVDOZM4ZWzjN4uiYg6D32iUkd44 kOGUq/yvEuW+xph3nSZ0xnDG55sx2do63ZYqAXwYh2WS31GfNvJkA47xjuFU2HBE oW6+weFYiH1zPpihhhGKg5F24VBzAFy6zi9a9aN460eacKqzHf+XNbeyHpiAXD9m ENahJvoLIx06q1x2DXyy5xrP2wG0cu9TLxigOsFNicyxnAKgx7awlBj4GsmFDmfh DeOxRicm5U/bP6RaisZ8RpMPtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4Qa/C6 EBUJlElyqnIWLvOl3LjpMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd6qjScR1Fj1C0DG4MAkrA0Z/k/8zxLqIP5OWiJaX8Xh0QHEPvMiSr I2ajwGAQk7qXxx35Lvyf3aueMMXVbjR0mGUvSyLYQOdLLyUNS98wq+PN6tsOX8X9 Ni/S9kQNWBqtdk3VioTbIAp6OpxSHcpUL341n2Dh7eXu+jfc4DSBb9C4PuOzi7Gb Sj42H3qH1m6bZFsPoRuZNc8N9Db5pDc6/YePBmK2c4ejdCiRFSMpOnvnxie3kEiE ILjWLnpyvV7La/KzrYjVv10WSLIYNYDuUxRzmT7/H77lys+64USsp6lJc3qFzpfI O9NZsLTXnYGpC7Opz4sEHf59KLJ8LbFE -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:47 2025 by rpki-client