$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: SGEW1JJ/B1a6bUUWwCfcvUJ9T9klCYIA07tSmkr7vfM= Subject key identifier: 63:12:1E:9E:DD:84:C3:36:D3:A9:42:66:9E:D7:1B:25:F5:22:44:F7 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 34B5 Signing time: Wed 20 Aug 2025 15:07:23 +0000 Manifest this update: Wed 20 Aug 2025 15:07:23 +0000 Manifest next update: Wed 27 Aug 2025 15:07:23 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: vdeqIQXVTwTHH2jkr+nJTpy0fx/pHSOed+DK5YSpzLY=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Aug 20 15:07:23 2025 GMT Not After : Aug 27 15:07:23 2025 GMT Subject: CN=68a5e4ab-589c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:e1:cd:e7:1c:65:97:93:fc:9d:f1:2f:88: 72:31:7f:ed:9f:e4:ef:57:e8:68:63:75:59:00:b8: 9d:0a:a0:3a:74:b7:a3:2f:62:66:93:d5:5a:66:fe: 48:df:cb:0b:9f:78:5a:62:99:7a:d8:be:4d:7a:10: e9:81:b5:e7:db:a1:ca:86:cb:cf:7a:1d:b1:53:9c: 60:03:e3:25:a2:23:06:a9:a0:5f:fe:12:08:6e:d1: 8f:ec:71:92:57:96:47:d6:d8:e3:68:06:ff:43:a6: 8e:b8:12:c2:cc:28:65:04:50:80:31:8b:cd:a0:aa: 18:9e:ae:c6:d8:86:92:89:69:64:45:a4:65:e8:a0: fe:d1:0d:41:a0:ca:38:0a:f0:06:cc:84:ef:29:25: 12:de:92:aa:57:de:0f:12:fd:f4:92:44:a3:f7:16: 9f:ed:07:25:25:21:9f:b9:f4:01:04:9a:20:76:e3: c2:dd:ad:96:bf:5f:1e:e2:8d:56:20:3d:2a:0e:5d: 77:de:ba:0f:b5:b3:4b:1b:40:35:0c:ac:2c:42:e7: 80:88:25:a6:80:2c:ee:8a:80:35:c7:7b:f8:ea:e4: bc:90:67:63:d3:4f:90:e8:7e:67:c1:cc:9b:2a:82: db:7b:47:3c:2e:d1:7a:98:e4:e3:c5:d8:26:d1:ab: a8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:12:1E:9E:DD:84:C3:36:D3:A9:42:66:9E:D7:1B:25:F5:22:44:F7 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7d:a6:bf:4a:82:6d:4e:d3:58:37:1a:cd:d0:b0:29:56:ef: 6c:2b:43:ce:8c:09:38:de:71:cf:4e:a5:7c:03:59:8a:29:b7: b3:14:16:2a:80:4c:c9:2a:af:aa:cd:8f:d9:93:44:34:b1:1f: e7:11:2d:fe:cb:54:44:cc:df:f7:e3:d5:76:17:a2:0f:01:fc: aa:4b:b4:e4:a1:8c:b8:b2:d8:08:43:8b:ea:b8:18:cc:cb:f8: d2:15:e0:8a:b8:f0:d7:ca:3a:26:08:7f:6d:5c:17:fa:78:d9: b3:d1:d9:f6:af:c3:63:e9:ac:ee:b6:21:86:0b:93:9c:8d:c5: 31:c7:ad:de:c6:bc:7f:c3:db:67:53:f8:6d:38:9c:62:d7:a1: b1:ab:f7:8e:29:0f:f4:39:e8:dc:28:24:bd:c3:bc:12:22:c9: 61:3c:6c:d1:50:42:7c:b3:94:51:68:10:95:d8:02:58:59:4a: 66:5f:bd:4d:12:26:9b:f6:bb:ef:1c:69:d2:ab:4e:09:2a:4a: 33:82:e0:8d:8b:d2:c8:c7:5b:1f:e6:95:19:3c:63:29:b2:a0: fa:c7:47:1a:44:81:65:b9:60:45:da:dd:30:d5:fe:d5:b4:6e: 5c:36:cd:1a:b1:d4:59:86:f0:6a:b5:60:52:7c:9d:e9:ee:f8: f1:9d:58:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUwODIwMTUwNzIzWhcNMjUwODI3MTUwNzIzWjAYMRYwFAYD VQQDEw02OGE1ZTRhYi01ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0ThzeccZZeT/J3xL4hyMX/tn+TvV+hoY3VZALidCqA6dLejL2Jmk9VaZv5I 38sLn3haYpl62L5NehDpgbXn26HKhsvPeh2xU5xgA+MloiMGqaBf/hIIbtGP7HGS V5ZH1tjjaAb/Q6aOuBLCzChlBFCAMYvNoKoYnq7G2IaSiWlkRaRl6KD+0Q1BoMo4 CvAGzITvKSUS3pKqV94PEv30kkSj9xaf7QclJSGfufQBBJogduPC3a2Wv18e4o1W ID0qDl133roPtbNLG0A1DKwsQueAiCWmgCzuioA1x3v46uS8kGdj00+Q6H5nwcyb KoLbe0c8LtF6mOTjxdgm0auo+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMSHp7d hMM206lCZp7XGyX1IkT3MB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjfaa/SoJtTtNYNxrN0LApVu9sK0POjAk43nHPTqV8A1mKKbezFBYq gEzJKq+qzY/Zk0Q0sR/nES3+y1REzN/349V2F6IPAfyqS7TkoYy4stgIQ4vquBjM y/jSFeCKuPDXyjomCH9tXBf6eNmz0dn2r8Nj6azutiGGC5OcjcUxx63exrx/w9tn U/htOJxi16Gxq/eOKQ/0OejcKCS9w7wSIslhPGzRUEJ8s5RRaBCV2AJYWUpmX71N Eiab9rvvHGnSq04JKkozguCNi9LIx1sf5pUZPGMpsqD6x0caRIFluWBF2t0w1f7V tG5cNs0asdRZhvBqtWBSfJ3p7vjxnVhX -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client