$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: qYReoUZ90N+iHbjIyyFI7uoMaBFxI5K3+E83+D00t+w= Subject key identifier: 1B:14:3B:55:3C:8C:B7:1F:E0:7D:B2:F0:D0:52:0C:E5:18:06:3A:F7 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 3533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 34F3 Signing time: Sun 24 Aug 2025 14:16:46 +0000 Manifest this update: Sun 24 Aug 2025 14:16:45 +0000 Manifest next update: Sun 31 Aug 2025 14:16:45 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: ll2caVnQ3MrJ+HFgin+Am1fWeGX1WNccMu4V1yhXEXE=) 2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=) 4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13619 (0x3533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Aug 24 14:16:45 2025 GMT Not After : Aug 31 14:16:45 2025 GMT Subject: CN=68ab1ecd-2ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:b2:3e:8b:c3:2f:d0:d9:d4:5a:54:49:4b: 8f:7c:af:7a:8c:f7:37:3e:d5:87:d1:15:53:ec:c2: 3a:41:d4:c5:61:2d:bb:2c:7e:9c:b6:28:58:1b:5e: dd:98:47:d9:cf:ac:86:ff:73:bb:ed:bf:71:a6:52: e8:a1:94:98:ea:c3:b2:ca:fe:5e:dc:55:9f:56:7e: f4:2c:07:dc:fb:a0:fe:37:e2:78:24:b8:a7:1d:42: 64:9f:c1:c7:68:9f:b6:4c:6f:78:5b:7b:0d:19:42: db:89:18:b4:ea:d9:c3:5a:4f:4c:62:14:70:83:e5: 70:d8:29:d5:c9:45:d1:18:db:e4:e0:0a:e6:40:5e: 46:46:bf:f7:d2:30:f2:bc:a0:33:56:a0:d4:75:75: 01:cd:9b:7c:ac:11:86:35:f5:b0:b0:98:38:78:08: 26:cc:3c:03:c9:de:b5:dd:91:9c:e1:40:b2:ad:77: d4:a3:f7:66:42:a9:38:fe:f9:04:ab:fd:5f:d2:e8: 1b:71:ea:d9:80:01:85:e6:a6:07:b6:a4:a0:71:f2: 55:db:2c:3d:f5:ac:68:e6:6b:61:87:1d:6b:66:de: 8d:27:1f:1d:0e:20:b4:36:a8:20:83:8d:42:58:88: c6:0c:64:b2:ad:15:6d:86:40:c1:76:57:18:a8:e0: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:14:3B:55:3C:8C:B7:1F:E0:7D:B2:F0:D0:52:0C:E5:18:06:3A:F7 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:12:b3:ac:0e:85:ad:06:0a:82:48:d2:8d:e6:6a:6f:fb:73: c5:4b:9a:65:19:df:46:50:94:e1:a4:ce:5a:17:aa:9d:c7:3e: 91:9d:9b:93:e0:d6:cb:ea:b5:d0:ab:40:15:86:f0:f8:cb:a8: 60:c1:5e:2c:e0:29:57:1a:df:05:fe:61:9c:88:5d:e1:5c:d6: 2d:9b:e3:41:e8:66:46:87:37:28:fe:3b:f3:47:cb:6f:79:7c: bb:f7:58:50:a2:ea:80:2a:75:1d:55:31:4b:10:9f:6a:ae:66: 20:93:9a:ee:23:bc:89:53:06:8a:ef:45:3a:6d:e9:3f:a1:65: 2a:9c:73:6f:ee:be:8b:c1:b2:d6:d5:ef:5a:16:22:64:f2:94: 93:b6:a9:e0:55:52:3d:a5:2f:72:48:84:f5:74:15:f8:fd:24: d3:8b:f4:34:22:72:b4:8c:4e:89:6c:68:35:21:ac:3b:ae:9e: d3:8a:39:0d:17:9f:05:e3:89:c1:97:f0:3e:2e:03:69:9c:8c: 1a:75:5d:cc:ac:00:81:93:57:c3:9b:59:8b:38:38:91:7f:48: b5:11:76:1e:74:e4:43:e2:c0:39:51:6a:e0:4c:ab:d2:88:e9: 66:de:c7:09:77:de:87:a8:11:91:8d:f6:07:24:54:99:d9:b4: 97:03:00:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjUwODI0MTQxNjQ1WhcNMjUwODMxMTQxNjQ1WjAYMRYwFAYD VQQDEw02OGFiMWVjZC0yZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsOyPovDL9DZ1FpUSUuPfK96jPc3PtWH0RVT7MI6QdTFYS27LH6ctihYG17d mEfZz6yG/3O77b9xplLooZSY6sOyyv5e3FWfVn70LAfc+6D+N+J4JLinHUJkn8HH aJ+2TG94W3sNGULbiRi06tnDWk9MYhRwg+Vw2CnVyUXRGNvk4ArmQF5GRr/30jDy vKAzVqDUdXUBzZt8rBGGNfWwsJg4eAgmzDwDyd613ZGc4UCyrXfUo/dmQqk4/vkE q/1f0ugbcerZgAGF5qYHtqSgcfJV2yw99axo5mthhx1rZt6NJx8dDiC0Nqggg41C WIjGDGSyrRVthkDBdlcYqOAuNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsUO1U8 jLcf4H2y8NBSDOUYBjr3MB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUErOsDoWtBgqCSNKN5mpv+3PFS5plGd9GUJThpM5aF6qdxz6RnZuT 4NbL6rXQq0AVhvD4y6hgwV4s4ClXGt8F/mGciF3hXNYtm+NB6GZGhzco/jvzR8tv eXy791hQouqAKnUdVTFLEJ9qrmYgk5ruI7yJUwaK70U6bek/oWUqnHNv7r6LwbLW 1e9aFiJk8pSTtqngVVI9pS9ySIT1dBX4/STTi/Q0InK0jE6JbGg1Iaw7rp7TijkN F58F44nBl/A+LgNpnIwadV3MrACBk1fDm1mLODiRf0i1EXYedORD4sA5UWrgTKvS iOlm3scJd96HqBGRjfYHJFSZ2bSXAwCU -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:22 2025 by rpki-client