$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: nmuWEpJbkaqk2BUJOjdUzZrkaJt3U9/Re7CRLhaPErk= Subject key identifier: 90:49:35:66:1C:BA:1E:96:46:5B:DD:FF:18:BC:CF:2B:89:C5:A9:A4 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 0432 Signing time: Sun 07 Sep 2025 00:46:37 +0000 Manifest this update: Sun 07 Sep 2025 00:46:36 +0000 Manifest next update: Sun 14 Sep 2025 00:46:36 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: wqjaK57BIxWpGE6LzuibgNO8RyKRUFW35I8yRh8vmkU=) 2: 4AD77714823D11F0A5490821C4F9AE02.roa (hash: VRtVYC+afvhigywAUFy8UkGyU1t5gq1k2av2NI5KhIY=) 3: 81E1EC606D3B11F0BDAB3A37C4F9AE02.roa (hash: IklsNcZMU61keTG/RlPGDM9ghDVa6JBLN2a2SdX6u1A=) 4: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Sep 7 00:46:36 2025 GMT Not After : Sep 14 00:46:36 2025 GMT Subject: CN=68bcd5ec-23d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:78:c5:33:1b:32:80:5a:c3:cf:0e:4d:c1: 95:db:a4:51:f1:d5:d8:bc:6e:7e:8f:09:8c:14:cf: f3:72:67:ca:ee:96:c6:01:77:51:16:b0:42:17:74: fc:d7:fa:12:fe:2c:5e:f6:47:70:52:1c:9b:c6:76: c3:3d:a4:ee:82:ba:f4:af:ce:8b:0e:54:96:2a:45: b6:bc:6d:d9:20:f6:bb:0f:d8:ef:0b:af:77:8b:a7: ef:eb:55:42:46:3b:9c:1f:69:d3:1b:a4:4c:32:e2: 22:a7:65:f0:b9:32:bb:a3:bf:41:16:21:99:8e:2b: 3f:1c:f9:3f:9f:27:a6:c2:d2:a0:b4:61:1b:1e:98: 1e:0f:94:63:2c:89:bc:53:c6:4a:be:3b:21:bd:7f: 2f:4a:be:04:57:ed:99:a6:3c:b2:ca:db:46:35:ef: 3a:b1:be:3c:ce:b9:87:8f:a7:9f:3b:d8:ae:8c:78: 6a:e0:5c:2c:5d:a1:7d:86:1c:8d:73:b7:cc:8a:51: 46:3a:86:37:59:8a:e6:29:20:1b:cc:bd:28:95:da: 86:2a:da:4c:cf:b0:cf:9a:8c:4f:63:06:00:dd:99: 0e:7c:de:64:fc:e8:f2:3e:fb:22:20:89:de:83:42: 30:6b:a8:51:4c:7a:2a:4c:ab:10:01:15:1e:f1:ee: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:49:35:66:1C:BA:1E:96:46:5B:DD:FF:18:BC:CF:2B:89:C5:A9:A4 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a4:9f:59:03:d8:f9:ae:dd:be:47:ae:1e:87:0d:40:4a:1b: 28:85:fa:c0:d3:43:08:66:4e:bc:cb:53:8b:e1:0d:ab:5d:a2: 9f:32:d0:f8:4a:b4:78:c5:c0:29:2b:bc:c8:b1:01:e6:fa:7d: ce:cf:f5:9d:6d:39:8a:16:c0:2f:58:34:a4:6b:bc:80:af:03: 67:35:7c:7e:4c:de:a7:a9:62:e6:f1:23:a9:29:20:cc:62:74: e2:00:1b:34:de:f9:ef:4d:ee:97:cb:68:f9:c9:44:ed:b6:3d: 7b:c3:d3:e1:4a:96:09:f0:11:15:d2:e1:04:f8:64:7b:07:2c: 17:66:98:af:80:17:cd:1c:00:be:67:39:c4:b5:33:89:c5:71: 84:8f:d6:68:79:dd:c1:89:9a:48:59:b7:bf:31:9c:4d:31:44: dc:fe:8b:c8:8c:e9:02:26:3b:28:23:22:a1:54:1a:88:d1:7f: 8e:08:1f:a7:9f:ff:eb:c4:eb:35:a2:78:65:5c:c5:61:99:49: bc:37:cb:23:53:ff:4a:20:ef:c2:f9:50:ad:63:9d:09:d9:ef: 86:97:87:f8:d5:d6:cd:c0:3b:89:7e:07:02:ea:c9:76:a9:62: 51:6d:28:68:bd:4d:02:c2:bb:85:65:df:10:8e:af:51:d7:b2: 8e:e2:99:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUwOTA3MDA0NjM2WhcNMjUwOTE0MDA0NjM2WjAYMRYwFAYD VQQDEw02OGJjZDVlYy0yM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NV4xTMbMoBaw88OTcGV26RR8dXYvG5+jwmMFM/zcmfK7pbGAXdRFrBCF3T8 1/oS/ixe9kdwUhybxnbDPaTugrr0r86LDlSWKkW2vG3ZIPa7D9jvC693i6fv61VC RjucH2nTG6RMMuIip2XwuTK7o79BFiGZjis/HPk/nyemwtKgtGEbHpgeD5RjLIm8 U8ZKvjshvX8vSr4EV+2ZpjyyyttGNe86sb48zrmHj6efO9iujHhq4FwsXaF9hhyN c7fMilFGOoY3WYrmKSAbzL0oldqGKtpMz7DPmoxPYwYA3ZkOfN5k/OjyPvsiIIne g0Iwa6hRTHoqTKsQARUe8e4uowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBJNWYc uh6WRlvd/xi8zyuJxamkMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBApJ9ZA9j5rt2+R64ehw1AShsohfrA00MIZk68y1OL4Q2rXaKfMtD4 SrR4xcApK7zIsQHm+n3Oz/WdbTmKFsAvWDSka7yArwNnNXx+TN6nqWLm8SOpKSDM YnTiABs03vnvTe6Xy2j5yUTttj17w9PhSpYJ8BEV0uEE+GR7BywXZpivgBfNHAC+ ZznEtTOJxXGEj9Zoed3BiZpIWbe/MZxNMUTc/ovIjOkCJjsoIyKhVBqI0X+OCB+n n//rxOs1onhlXMVhmUm8N8sjU/9KIO/C+VCtY50J2e+Gl4f41dbNwDuJfgcC6sl2 qWJRbShovU0CwruFZd8Qjq9R17KO4pkr -----END CERTIFICATE-----Generated at Sun Sep 7 11:24:49 2025 by rpki-client