$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: iCih2xaOX4f+98cMsVqJE71JnVoAKcZ18Gvl55AWjJA= Subject key identifier: F7:B9:51:9E:28:15:40:9E:69:7F:8C:FD:A4:40:AF:02:7C:A3:09:A1 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 01B5 Signing time: Sun 07 Sep 2025 03:35:46 +0000 Manifest this update: Sun 07 Sep 2025 03:35:45 +0000 Manifest next update: Sun 14 Sep 2025 03:35:45 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: kBTpEHenAr9SNoGxZyl9wwx7gFs+j86DSvRN8ukzwp8=) 2: 8A795CC866E711F0985D0751C4F9AE02.roa (hash: g1KuNxkFHwwpiwP+Lzl39JbGpSxNeMuhi4yzpFrKJZU=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Sep 7 03:35:45 2025 GMT Not After : Sep 14 03:35:45 2025 GMT Subject: CN=68bcfd91-1835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:73:ae:07:35:18:e1:4b:1d:d6:35:17:c7: 70:7c:22:6d:20:85:eb:f6:ba:01:3e:b8:7f:5b:fc: 3c:d5:f3:3c:50:58:8e:6a:e3:97:ae:f6:91:36:28: 59:ae:28:70:4f:8d:4f:da:f5:48:44:0c:9b:05:fe: c5:d9:34:cb:3f:57:59:6c:77:99:3e:56:8e:20:33: 61:64:c3:bf:1a:3b:ca:0e:a5:a7:62:77:80:61:b0: 4e:4f:df:84:ad:53:39:48:d2:f9:7c:cb:b2:ad:84: 84:a9:4e:cd:60:0e:16:cd:34:45:2c:a8:92:26:28: 04:38:20:e4:54:39:ae:ed:a5:b6:3d:a6:07:18:c3: 74:d6:35:19:df:20:37:41:b4:7d:20:49:7a:8f:ed: 49:fa:55:52:1c:03:78:fc:e3:66:3d:03:2b:e1:20: 21:ba:fe:23:6c:50:f4:1e:b3:ff:fe:2a:c5:bb:bb: 1f:a4:f4:9d:ba:57:7d:6c:a9:32:c3:9c:a1:d0:1e: 45:d0:2d:b6:3c:46:cd:e9:9b:99:02:56:62:5c:d1: f4:5a:53:f9:98:f6:5c:77:58:dd:02:5a:8b:30:18: 0e:7a:06:f9:71:7e:96:49:f7:bf:b8:01:5c:7a:f3: 64:b8:5f:dd:85:a2:fa:e0:99:05:e5:93:dd:94:89: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B9:51:9E:28:15:40:9E:69:7F:8C:FD:A4:40:AF:02:7C:A3:09:A1 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ff:64:5d:b6:71:d1:0c:12:bb:b6:14:65:ed:62:9f:71:fe: 36:67:ba:41:d2:42:b9:62:53:67:9f:1c:f9:eb:bb:b2:79:41: 96:a2:95:ae:bb:b7:1f:51:ef:f8:47:aa:55:88:4a:27:f3:59: 8a:f4:21:89:67:29:53:18:14:c1:ad:63:93:e2:a7:f8:ec:b8: e0:b7:c4:35:04:6f:30:02:4a:29:74:e6:c6:4e:a1:67:e8:7c: d6:9e:1a:be:d3:61:1f:f5:86:cc:b7:14:d0:fa:d8:d9:6e:2d: 0b:f8:a1:f8:db:5b:12:36:5d:b4:52:cd:9c:25:f4:1f:c6:9d: 2f:af:0b:2b:a4:95:64:7d:aa:43:c2:c1:3e:bd:c5:e9:33:bc: 5d:7e:82:0c:1e:23:de:2b:50:4d:84:0f:d1:94:d8:4a:c8:fe: 10:89:8d:5b:45:fb:98:4c:4d:a7:65:49:03:31:00:f3:f5:27: 79:28:c0:b0:d1:0e:0d:5f:3b:8e:79:4f:19:a9:f8:f3:f7:8d: a9:a5:91:2f:4c:65:c3:8a:27:b2:21:49:cf:c0:03:2a:a7:9c: 26:81:63:bb:38:de:a2:73:51:c3:9e:b5:fd:7c:02:b9:d0:3f: 3b:ba:46:ce:72:b7:8f:a3:01:1e:49:23:b6:71:da:63:1e:e2: 9a:c0:7d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwOTA3MDMzNTQ1WhcNMjUwOTE0MDMzNTQ1WjAYMRYwFAYD VQQDEw02OGJjZmQ5MS0xODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjxzrgc1GOFLHdY1F8dwfCJtIIXr9roBPrh/W/w81fM8UFiOauOXrvaRNihZ rihwT41P2vVIRAybBf7F2TTLP1dZbHeZPlaOIDNhZMO/GjvKDqWnYneAYbBOT9+E rVM5SNL5fMuyrYSEqU7NYA4WzTRFLKiSJigEOCDkVDmu7aW2PaYHGMN01jUZ3yA3 QbR9IEl6j+1J+lVSHAN4/ONmPQMr4SAhuv4jbFD0HrP//irFu7sfpPSduld9bKky w5yh0B5F0C22PEbN6ZuZAlZiXNH0WlP5mPZcd1jdAlqLMBgOegb5cX6WSfe/uAFc evNkuF/dhaL64JkF5ZPdlInxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe5UZ4o FUCeaX+M/aRArwJ8owmhMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP/2RdtnHRDBK7thRl7WKfcf42Z7pB0kK5YlNnnxz567uyeUGWopWu u7cfUe/4R6pViEon81mK9CGJZylTGBTBrWOT4qf47Ljgt8Q1BG8wAkopdObGTqFn 6HzWnhq+02Ef9YbMtxTQ+tjZbi0L+KH421sSNl20Us2cJfQfxp0vrwsrpJVkfapD wsE+vcXpM7xdfoIMHiPeK1BNhA/RlNhKyP4QiY1bRfuYTE2nZUkDMQDz9Sd5KMCw 0Q4NXzuOeU8Zqfjz942ppZEvTGXDiieyIUnPwAMqp5wmgWO7ON6ic1HDnrX9fAK5 0D87ukbOcrePowEeSSO2cdpjHuKawH0l -----END CERTIFICATE-----Generated at Mon Sep 8 17:43:10 2025 by rpki-client