$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: IOMt5NhDt+VbFqp37PxOtCuJubEm2mtSxMAj1F9vJeQ= Subject key identifier: A8:4C:57:46:40:E0:51:E2:CE:49:8B:5C:14:F7:26:C6:AD:56:66:4A Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 0168 Signing time: Tue 09 Sep 2025 04:02:07 +0000 Manifest this update: Tue 09 Sep 2025 04:02:07 +0000 Manifest next update: Tue 16 Sep 2025 04:02:07 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: Uj3aqmWdLoQ/0Upqus0pZnmTSzQ0rUgQ2QjNeoEBRVM=) 2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: iMx1ZiX9rWmGz4A0kr/IlO0X/88Oa+zlLaNS0YVQidY=) 3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: Sep 9 04:02:07 2025 GMT Not After : Sep 16 04:02:07 2025 GMT Subject: CN=68bfa6bf-38de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:dc:fd:f9:fa:c3:0a:a2:09:33:dd:c8:6d: 73:a5:9a:ae:fe:25:f4:ad:f4:34:96:84:c5:05:63: 94:f5:2b:5c:49:54:f6:50:f3:64:77:d0:58:56:f1: 77:54:b8:13:4f:c3:cd:a2:19:12:4c:85:57:75:f7: f3:2a:a0:27:c1:d8:ac:40:29:f3:dc:31:14:ce:f9: 65:8c:c1:ed:35:5a:d8:60:73:eb:f3:b0:f7:42:01: a1:c9:99:fc:1b:55:f2:ae:0e:0d:43:e4:68:5e:c0: 6e:e7:43:08:d9:71:92:9c:86:ec:d3:13:83:77:e2: 0b:3d:93:95:eb:9a:38:df:e1:3e:50:43:5c:00:24: 53:98:de:41:87:44:3f:bb:4d:7e:df:28:7b:f4:93: 91:85:da:91:46:8f:b7:e0:b3:d6:6d:76:b1:37:9f: 52:14:08:2b:7b:4b:68:42:66:a6:0e:25:3a:d9:ad: 82:ee:7a:99:8b:21:d9:ad:6a:0c:70:8f:b4:33:48: fa:0b:c4:69:9d:9d:9a:01:c8:8b:a5:60:69:2a:75: 0a:36:23:56:c3:aa:40:60:f9:65:45:9f:38:fc:e9: f4:22:fe:85:51:b1:3d:b4:e8:0d:62:19:9e:69:3a: 09:36:c4:20:93:0e:b0:4f:ec:7b:42:c7:cf:ef:75: ef:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4C:57:46:40:E0:51:E2:CE:49:8B:5C:14:F7:26:C6:AD:56:66:4A X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:f3:4d:3d:0d:99:c2:f5:be:b1:ce:fe:58:c3:a6:47:39: c9:26:64:d6:e7:e8:06:3e:d0:7f:5d:58:4e:1e:7e:42:e6:3e: 70:10:b2:dd:a3:9d:fb:2f:55:7d:ab:99:6e:a0:1c:79:02:23: 10:4d:95:a5:37:d5:3e:76:12:bf:76:92:c3:48:12:45:18:8c: 72:23:a8:3d:12:58:34:64:97:3b:0e:6d:b8:a9:4f:18:4d:ab: c1:aa:6d:4c:11:76:24:6b:ca:17:be:ca:dd:de:15:e2:f5:2a: 84:70:7e:00:6d:15:9c:17:d8:b2:4f:79:25:03:c8:07:d7:7d: f9:5c:a8:e5:87:e7:ec:f5:23:b5:12:55:ee:b3:8f:6e:f0:5f: eb:f2:48:38:ce:a2:52:be:75:28:10:9b:fe:a5:f6:2c:ff:44: 38:6a:11:92:69:4a:fd:6d:f6:13:09:57:68:cd:84:61:ab:b5: c5:89:4c:17:05:c2:f9:4e:72:5c:8d:95:76:a5:03:b8:f7:d2: d3:e8:c7:67:7c:21:ab:2c:9c:65:94:39:15:f0:28:f0:c0:37: fa:6c:c9:ef:3f:39:67:3d:0b:3e:67:0f:c7:0c:6e:87:68:69: a1:30:27:ac:a4:6b:52:c4:c2:b8:17:36:40:be:3f:a3:72:d5: 2f:8b:f7:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUwOTA5MDQwMjA3WhcNMjUwOTE2MDQwMjA3WjAYMRYwFAYD VQQDEw02OGJmYTZiZi0zOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r3c/fn6wwqiCTPdyG1zpZqu/iX0rfQ0loTFBWOU9StcSVT2UPNkd9BYVvF3 VLgTT8PNohkSTIVXdffzKqAnwdisQCnz3DEUzvlljMHtNVrYYHPr87D3QgGhyZn8 G1Xyrg4NQ+RoXsBu50MI2XGSnIbs0xODd+ILPZOV65o43+E+UENcACRTmN5Bh0Q/ u01+3yh79JORhdqRRo+34LPWbXaxN59SFAgre0toQmamDiU62a2C7nqZiyHZrWoM cI+0M0j6C8RpnZ2aAciLpWBpKnUKNiNWw6pAYPllRZ84/On0Iv6FUbE9tOgNYhme aToJNsQgkw6wT+x7QsfP73Xv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhMV0ZA 4FHizkmLXBT3JsatVmZKMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYCfNNPQ2ZwvW+sc7+WMOmRznJJmTW5+gGPtB/XVhOHn5C5j5wELLd o537L1V9q5luoBx5AiMQTZWlN9U+dhK/dpLDSBJFGIxyI6g9Elg0ZJc7Dm24qU8Y TavBqm1MEXYka8oXvsrd3hXi9SqEcH4AbRWcF9iyT3klA8gH1335XKjlh+fs9SO1 ElXus49u8F/r8kg4zqJSvnUoEJv+pfYs/0Q4ahGSaUr9bfYTCVdozYRhq7XFiUwX BcL5TnJcjZV2pQO499LT6MdnfCGrLJxllDkV8CjwwDf6bMnvPzlnPQs+Zw/HDG6H aGmhMCespGtSxMK4FzZAvj+jctUvi/fA -----END CERTIFICATE-----Generated at Tue Sep 9 07:50:20 2025 by rpki-client