$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft File: TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json) Hash identifier: uHbJgogkgwYilg9HBW2Ctf9vh3uR4oa40kZ4NmtVVio= Subject key identifier: 5C:17:96:D1:8E:D9:86:41:10:CE:BB:38:8C:E5:B3:EE:A1:05:42:49 Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft Manifest number: 15 Signing time: Thu 21 Aug 2025 08:15:13 +0000 Manifest this update: Thu 21 Aug 2025 08:15:13 +0000 Manifest next update: Thu 28 Aug 2025 08:15:13 +0000 Files and hashes: 1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: sWbxtOkPdqMZZtWsx3KTUO5vOh5JjK0+eiiDoT4vWYo=) 2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: n1d9JBQkYzZszHXWzHvHiVJmG5oLenIhoEtEgvVSpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Validity Not Before: Aug 21 08:15:13 2025 GMT Not After : Aug 28 08:15:13 2025 GMT Subject: CN=68a6d591-7ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0e:77:ea:d4:18:9d:a6:82:14:34:45:e9:0c: 7e:eb:76:eb:18:8d:51:68:74:16:5a:f0:5b:03:3b: f3:b9:06:8d:34:d2:bc:3c:af:68:af:dc:60:5b:7b: 06:f0:f4:20:bd:2f:51:4f:5e:cb:d0:a7:8d:43:18: a0:f1:b5:1a:47:a4:4c:61:16:9b:8a:31:1c:cd:7b: 1b:ec:9b:06:1e:39:78:64:4c:9a:d5:5b:a4:ce:93: 39:24:b1:16:a6:d6:6d:21:19:9e:a3:dc:00:40:fd: e1:bd:17:a1:f5:1d:16:88:00:46:03:d0:7f:4e:97: 41:e6:6e:f0:f2:06:cf:24:10:79:a2:a2:31:2c:fb: 91:d8:92:17:43:6d:7c:71:ed:dd:ed:94:a3:0c:41: 91:34:49:05:d3:64:87:d8:11:6d:32:27:5b:8d:db: 56:06:97:98:43:33:c5:28:9f:ac:65:9d:b2:f0:21: 4b:1d:5c:c5:be:56:ec:71:17:04:28:3e:9b:f2:3a: ef:a5:ea:36:f7:9a:a5:96:d0:fb:a1:19:98:f7:2c: 5c:19:36:48:65:21:37:a9:2a:45:43:b1:b0:92:ba: 60:b7:c7:df:e4:1b:e4:8a:a2:50:ae:68:33:13:78: 3f:33:f2:ef:3f:56:80:26:92:00:e6:fa:b1:19:6d: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:17:96:D1:8E:D9:86:41:10:CE:BB:38:8C:E5:B3:EE:A1:05:42:49 X509v3 Authority Key Identifier: keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:30:e1:fb:e7:30:70:ac:9d:59:87:48:6d:44:4c:fe:f4:42: 52:ef:54:fb:2c:18:b6:1c:eb:79:7f:6e:a4:0b:ca:e4:91:d8: b2:52:be:64:85:53:26:8e:23:24:df:0c:03:15:73:a2:4b:fb: 6f:90:2c:53:b9:ae:e8:3e:86:c0:e6:b3:44:9f:28:64:75:e8: e8:45:f0:c8:72:1b:a0:10:b9:de:f2:41:27:96:93:96:34:a2: 67:1d:d0:a2:4e:8f:14:11:fd:50:ce:9e:65:fe:8b:fc:a9:5c: c4:af:a3:97:88:70:aa:36:d5:95:04:cb:f3:f9:a4:bb:77:64: 96:1b:f8:41:f4:02:26:80:92:22:a6:80:13:62:23:69:16:24: b3:ce:ac:8a:85:63:d5:cc:d3:90:7c:d7:88:38:37:01:ff:8a: a4:6e:27:57:a0:fc:0a:00:64:57:46:82:bd:b9:fa:93:75:8d: 1a:aa:1b:7d:04:df:47:0b:dd:fc:95:5e:3c:55:34:c9:3f:5a: 43:52:0d:ff:01:e0:94:9d:5f:36:dd:d0:79:45:b8:1d:a7:9f: 45:21:e2:0c:b5:bf:9d:d4:07:a2:a6:ba:db:83:cc:d1:6d:6f: 87:0f:ea:27:de:68:a3:be:b4:18:ee:35:d3:06:30:ea:f8:53: ae:1c:de:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoNEQ4RjU4MEM4RjU3NTk0NjdEQjhFQTBGMDhDMzExQTk2 RDNCM0ZCQjAeFw0yNTA4MjEwODE1MTNaFw0yNTA4MjgwODE1MTNaMBgxFjAUBgNV BAMTDTY4YTZkNTkxLTdmZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsDnfq1BidpoIUNEXpDH7rdusYjVFodBZa8FsDO/O5Bo000rw8r2iv3GBbewbw 9CC9L1FPXsvQp41DGKDxtRpHpExhFpuKMRzNexvsmwYeOXhkTJrVW6TOkzkksRam 1m0hGZ6j3ABA/eG9F6H1HRaIAEYD0H9Ol0HmbvDyBs8kEHmiojEs+5HYkhdDbXxx 7d3tlKMMQZE0SQXTZIfYEW0yJ1uN21YGl5hDM8Uon6xlnbLwIUsdXMW+VuxxFwQo PpvyOu+l6jb3mqWW0PuhGZj3LFwZNkhlITepKkVDsbCSumC3x9/kG+SKolCuaDMT eD8z8u8/VoAmkgDm+rEZbb4dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXBeW0Y7Z hkEQzrs4jOWz7qEFQkkwHwYDVR0jBBgwFoAUTY9YDI9XWUZ9uOoPCMMRqW07P7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzVCQjA3NDNDNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1VaOXVPb1BDTU1ScVcwN1A3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFk5WURJOVhXVVo5dU9vUENNTVJxVzA3UDdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzVCQjA3NDNDNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1Va OXVPb1BDTU1ScVcwN1A3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEw4fvnMHCsnVmHSG1ETP70QlLvVPssGLYc63l/bqQLyuSR2LJSvmSF UyaOIyTfDAMVc6JL+2+QLFO5rug+hsDms0SfKGR16OhF8MhyG6AQud7yQSeWk5Y0 omcd0KJOjxQR/VDOnmX+i/ypXMSvo5eIcKo21ZUEy/P5pLt3ZJYb+EH0AiaAkiKm gBNiI2kWJLPOrIqFY9XM05B814g4NwH/iqRuJ1eg/AoAZFdGgr25+pN1jRqqG30E 30cL3fyVXjxVNMk/WkNSDf8B4JSdXzbd0HlFuB2nn0Uh4gy1v53UB6KmutuDzNFt b4cP6ifeaKO+tBjuNdMGMOr4U64c3sw= -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client