$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: oXJtIyo8QEhc7SuKzcBnbaFLjZsr7Dz20qVvmdNPB8c= Subject key identifier: 0C:AE:B3:BA:E2:1A:3C:81:92:66:35:3C:0F:64:2B:5C:22:68:19:2A Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 012C Signing time: Fri 19 Sep 2025 05:16:24 +0000 Manifest this update: Fri 19 Sep 2025 05:16:24 +0000 Manifest next update: Fri 26 Sep 2025 05:16:24 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: jBocD/JNLRKuzZEir2x664nYUQ+4IInHAOOhCoYB2FM=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Sep 19 05:16:24 2025 GMT Not After : Sep 26 05:16:24 2025 GMT Subject: CN=68cce728-ca0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:7e:a0:08:25:b9:ad:c7:34:f1:62:1d:40: d5:fd:b4:67:dd:44:ad:83:5b:4e:65:07:91:71:b4: 63:38:9c:1b:09:de:c9:ce:02:47:12:7a:1a:4f:32: 00:af:c0:7b:6d:27:ea:9d:4a:8f:0c:7f:3f:64:51: 14:93:77:c6:c4:93:ce:3f:84:8d:f9:f8:65:25:98: 07:8b:af:a2:e6:49:4b:ac:b7:c2:e8:c9:a0:81:cb: 7b:bf:f8:16:f8:4a:11:4f:09:18:19:2f:e3:d3:6c: a9:67:8c:0c:6d:04:1c:6b:ed:8b:54:8c:27:fb:0c: f1:68:a1:d9:9e:ea:0c:4d:eb:ff:09:f6:37:7d:02: 0c:e8:f2:7f:04:1c:c1:6d:5c:e1:a1:ed:c6:fd:32: 2f:30:80:af:81:a4:ae:63:44:3f:ac:c5:75:7b:63: a8:3d:48:03:1d:35:65:b8:2b:bb:60:74:c6:af:f5: ce:6b:83:fe:98:d2:33:f2:3a:20:f4:6d:9c:f4:b8: d3:bd:86:93:c8:27:fa:22:8e:7a:67:32:a1:d1:61: e0:ca:7b:6b:bc:30:e8:ca:f7:f1:a7:38:26:93:7c: bc:3b:26:ee:04:a2:3b:11:0c:67:f7:41:ed:e1:19: 33:22:cf:45:a8:d9:60:35:01:37:f9:d4:69:bd:fe: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AE:B3:BA:E2:1A:3C:81:92:66:35:3C:0F:64:2B:5C:22:68:19:2A X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:b5:aa:71:56:f7:4e:5b:e6:d8:39:ba:d4:d5:f8:7b:4d:11: fa:79:58:3a:b3:b1:6f:65:ba:b8:1d:f5:c0:ec:0d:62:f2:77: 84:cf:a1:79:74:b6:41:44:70:37:2e:03:77:7e:53:f0:4e:38: 6d:96:23:09:17:3a:b9:f1:c5:8c:15:30:50:0d:f7:2f:c4:cc: a4:f8:e7:7b:68:f9:c0:9e:82:f6:e9:6b:b1:c3:24:70:5e:d8: b8:07:b1:c2:3b:57:06:18:46:59:5e:c6:60:29:08:c9:70:75: 23:d8:97:3f:fd:41:bc:1a:ed:bd:52:1d:6f:27:75:1d:7f:40: ce:24:4e:40:4d:79:56:07:c9:5e:b2:8f:e8:b3:ef:a3:d2:f4: 9c:ea:f0:a1:40:7f:18:32:52:82:a6:8d:9b:65:a2:7a:20:1f: 90:e1:f0:21:5e:f6:18:71:52:de:31:c5:87:f5:15:24:ac:19: 8e:2b:2c:13:0c:9a:2a:f3:7d:6e:e1:83:15:65:e2:c4:64:5d: e7:66:bc:b5:4b:31:20:62:e3:df:ee:57:f6:37:cf:81:e7:4f: cb:c3:fa:c8:f1:c8:f6:57:05:9c:e2:44:b7:83:04:ca:98:f2: 46:63:e5:c9:0d:a6:f6:56:f9:ee:33:f2:38:a6:40:bc:95:0a: 5f:24:3b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjUwOTE5MDUxNjI0WhcNMjUwOTI2MDUxNjI0WjAYMRYwFAYD VQQDEw02OGNjZTcyOC1jYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05R+oAglua3HNPFiHUDV/bRn3UStg1tOZQeRcbRjOJwbCd7JzgJHEnoaTzIA r8B7bSfqnUqPDH8/ZFEUk3fGxJPOP4SN+fhlJZgHi6+i5klLrLfC6Mmggct7v/gW +EoRTwkYGS/j02ypZ4wMbQQca+2LVIwn+wzxaKHZnuoMTev/CfY3fQIM6PJ/BBzB bVzhoe3G/TIvMICvgaSuY0Q/rMV1e2OoPUgDHTVluCu7YHTGr/XOa4P+mNIz8jog 9G2c9LjTvYaTyCf6Io56ZzKh0WHgyntrvDDoyvfxpzgmk3y8OybuBKI7EQxn90Ht 4RkzIs9FqNlgNQE3+dRpvf4bEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyus7ri GjyBkmY1PA9kK1wiaBkqMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5tapxVvdOW+bYObrU1fh7TRH6eVg6s7FvZbq4HfXA7A1i8neEz6F5 dLZBRHA3LgN3flPwTjhtliMJFzq58cWMFTBQDfcvxMyk+Od7aPnAnoL26WuxwyRw Xti4B7HCO1cGGEZZXsZgKQjJcHUj2Jc//UG8Gu29Uh1vJ3Udf0DOJE5ATXlWB8le so/os++j0vSc6vChQH8YMlKCpo2bZaJ6IB+Q4fAhXvYYcVLeMcWH9RUkrBmOKywT DJoq831u4YMVZeLEZF3nZry1SzEgYuPf7lf2N8+B50/Lw/rI8cj2VwWc4kS3gwTK mPJGY+XJDab2VvnuM/I4pkC8lQpfJDst -----END CERTIFICATE-----Generated at Fri Sep 19 18:30:35 2025 by rpki-client