$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: ehI5mEvdZTQ1fS0Udvg759S6G9p56ROX67MHLRUFNSQ= Subject key identifier: BA:7A:0A:2F:18:DD:99:4D:F0:86:0D:5B:CA:7E:21:8B:20:6D:90:9A Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06F3 Signing time: Mon 18 Aug 2025 22:16:21 +0000 Manifest this update: Mon 18 Aug 2025 22:16:20 +0000 Manifest next update: Mon 25 Aug 2025 22:16:20 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: voVTva5mAeLmZRSJYxfvMww8JQHhLTsoF3clnVDW24o=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Aug 18 22:16:20 2025 GMT Not After : Aug 25 22:16:20 2025 GMT Subject: CN=68a3a634-d2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:ab:d2:cf:2a:13:6a:f8:19:cf:b7:0d:bb: b6:0c:a0:df:99:18:80:f3:65:5b:47:11:f8:4d:28: b4:51:39:ab:e7:b6:9b:61:87:21:29:c7:aa:ce:9f: 54:3d:b6:1d:58:85:dc:41:84:87:a7:e6:7c:57:60: f4:a5:4e:b7:b9:93:dd:f0:1f:09:1c:40:69:41:80: 35:f8:7d:18:11:67:82:85:e9:d8:1d:0f:35:56:dc: c6:e5:fb:92:46:96:70:b2:b7:bf:73:4c:71:bd:fe: b8:7a:35:b9:f6:23:69:b0:e7:51:e4:13:dd:18:ea: 66:f6:a7:ce:78:02:2a:4d:f8:61:d1:80:a8:97:9f: 08:e5:26:63:c7:d6:30:df:19:d5:7b:59:38:a7:f4: 53:5b:fa:2b:db:c9:f8:18:e9:0d:01:26:ca:ab:f1: 95:03:09:34:da:fe:7d:b2:d0:51:51:5f:90:eb:8d: 39:be:6e:af:cd:e1:52:c0:72:99:93:ed:38:76:28: b3:b6:42:1a:56:d0:2e:6f:6a:b0:ae:da:f8:04:96: bb:d0:b7:d4:03:97:90:85:f2:55:61:53:79:77:b0: 1a:d7:d4:6e:45:13:58:2c:9c:60:2b:98:b7:07:fe: 7d:df:99:2d:b2:d7:7d:d3:25:8f:17:a1:0e:3d:05: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7A:0A:2F:18:DD:99:4D:F0:86:0D:5B:CA:7E:21:8B:20:6D:90:9A X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:74:29:f7:71:8d:19:fd:97:04:70:bc:8c:6f:d7:75:cb:ed: 68:e5:f6:ae:44:89:2d:f6:dd:c8:11:03:2b:47:bd:07:64:29: e8:77:a5:51:cf:93:d8:79:a3:6b:6a:72:19:cc:a9:c7:35:49: fd:09:28:2a:f7:94:7e:7b:ef:a8:b8:e9:e2:d8:e6:70:8d:68: b6:99:45:f5:f7:ea:b5:8b:3d:d8:fd:f7:11:7b:31:fe:ae:6a: 92:92:ab:28:6f:3b:75:58:8a:bf:64:bb:84:d7:26:af:84:06: 53:a8:76:1b:7c:f3:6f:9e:f2:a0:0f:15:fb:45:ef:aa:07:4f: fc:04:67:19:f4:70:fe:0c:f3:ab:8e:bb:ec:db:fb:63:1e:6e: b1:c3:ee:5e:5b:e9:49:77:28:cf:a8:a5:54:cd:28:f0:86:64: e1:7d:a2:87:63:2e:84:2a:ed:2a:5d:8e:21:cc:26:0a:09:7d: b0:89:81:8b:01:22:97:41:6c:22:b5:2f:26:65:78:c2:f9:31: 65:3a:ff:34:1b:4a:3e:15:5c:22:0c:ae:02:68:be:f2:25:da: 9a:6e:e5:20:bf:1e:f1:a4:cb:c9:13:e6:ea:2c:4e:97:29:ca: 88:01:2b:a9:8c:a7:32:fa:46:87:03:98:45:6c:29:77:14:ae: 95:8e:4e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwODE4MjIxNjIwWhcNMjUwODI1MjIxNjIwWjAYMRYwFAYD VQQDEw02OGEzYTYzNC1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxamr0s8qE2r4Gc+3Dbu2DKDfmRiA82VbRxH4TSi0UTmr57abYYchKceqzp9U PbYdWIXcQYSHp+Z8V2D0pU63uZPd8B8JHEBpQYA1+H0YEWeChenYHQ81VtzG5fuS RpZwsre/c0xxvf64ejW59iNpsOdR5BPdGOpm9qfOeAIqTfhh0YCol58I5SZjx9Yw 3xnVe1k4p/RTW/or28n4GOkNASbKq/GVAwk02v59stBRUV+Q6405vm6vzeFSwHKZ k+04diiztkIaVtAub2qwrtr4BJa70LfUA5eQhfJVYVN5d7Aa19RuRRNYLJxgK5i3 B/5935ktstd90yWPF6EOPQX9xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp6Ci8Y 3ZlN8IYNW8p+IYsgbZCaMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfdCn3cY0Z/ZcEcLyMb9d1y+1o5fauRIkt9t3IEQMrR70HZCnod6VR z5PYeaNranIZzKnHNUn9CSgq95R+e++ouOni2OZwjWi2mUX19+q1iz3Y/fcRezH+ rmqSkqsobzt1WIq/ZLuE1yavhAZTqHYbfPNvnvKgDxX7Re+qB0/8BGcZ9HD+DPOr jrvs2/tjHm6xw+5eW+lJdyjPqKVUzSjwhmThfaKHYy6EKu0qXY4hzCYKCX2wiYGL ASKXQWwitS8mZXjC+TFlOv80G0o+FVwiDK4CaL7yJdqabuUgvx7xpMvJE+bqLE6X KcqIASupjKcy+kaHA5hFbCl3FK6Vjk7a -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:20 2025 by rpki-client