$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: 4JibS6lcGNDv1CfSv/QKk4Df0hmRl3cFFK1DmefNoIM= Subject key identifier: AF:73:2B:BE:60:92:F4:30:D1:17:6D:8D:56:22:FE:DE:8B:BC:30:14 Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 063A Signing time: Wed 20 Aug 2025 22:48:41 +0000 Manifest this update: Wed 20 Aug 2025 22:48:41 +0000 Manifest next update: Wed 27 Aug 2025 22:48:41 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: +ba+x56jH+/yDCM6amzhv0EZiYMjtHIY5WU0WuF6OmQ=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Aug 20 22:48:41 2025 GMT Not After : Aug 27 22:48:41 2025 GMT Subject: CN=68a650c9-ffc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:bf:ba:c9:3a:cc:6d:78:ab:3b:0a:cb:c7: 74:98:bf:8b:f9:2d:a9:54:c4:9b:1e:2e:45:62:5b: 57:43:78:e5:47:0d:41:07:48:da:54:ab:fd:7a:ed: 2c:b9:b2:73:6a:b8:17:f3:b6:d1:68:53:85:d1:a4: 46:c4:44:86:d8:14:9c:e1:6e:22:8f:23:00:e8:00: dc:94:cd:0e:cd:b6:d0:50:e6:0a:5b:b1:35:6c:3a: 11:fa:76:9b:4e:63:d5:52:53:0a:c5:bf:6a:ce:97: 82:ea:00:78:4a:64:cf:dd:f4:79:3a:11:1b:80:5a: 05:a1:03:53:37:ec:0e:50:c3:d0:44:d1:dc:59:2a: 02:99:19:4d:44:7c:ae:8f:81:fe:01:2c:db:48:07: 25:eb:4c:0c:6b:5e:47:65:dd:88:4e:11:2e:98:96: ff:9a:2e:a7:84:a0:f6:eb:29:9b:40:14:ed:64:37: be:3f:bf:68:f3:25:25:fc:82:23:86:3d:7a:8d:a3: a0:83:8a:45:d6:44:3d:78:1e:ca:d1:9a:42:10:cc: 48:89:a5:56:a6:a3:89:0b:b9:df:05:2a:bd:2d:aa: 57:6d:5c:0c:6e:d0:26:b4:cb:44:4d:db:6d:99:fe: 09:33:13:d8:6d:22:06:4f:11:5b:30:a9:0e:24:db: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:2B:BE:60:92:F4:30:D1:17:6D:8D:56:22:FE:DE:8B:BC:30:14 X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c2:ed:bc:ee:1f:0b:22:62:04:1f:fc:f4:e8:d9:5b:23:f7: a1:29:c3:fd:c2:8b:07:3b:2b:58:d8:06:bb:99:a8:3b:50:41: 5c:25:75:16:65:a6:da:03:5d:a3:ac:a3:f5:ce:72:db:91:a1: f7:05:b9:6e:0a:e8:5e:3e:88:0c:3c:d0:13:37:5b:6f:83:df: 17:bd:ee:b5:0c:88:52:42:42:0a:fd:be:d6:d8:6d:aa:2e:64: 93:15:dc:91:90:da:91:9e:12:0b:fe:53:38:38:a6:74:47:18: 7c:d5:7a:22:ab:28:81:55:50:47:56:fa:41:10:59:4c:b8:a7: 8b:37:6f:aa:f1:2e:bc:1b:6b:c1:96:7a:34:59:a3:8b:d6:e9: 76:13:81:27:f4:98:ed:40:b9:f8:4b:c4:4d:d0:6b:9c:1c:a4: 57:82:f7:14:29:b5:87:6b:26:7a:66:7d:13:29:ab:4c:c1:8f: d9:f8:33:e0:77:41:a2:c2:34:87:bf:4b:59:7c:a4:bd:d8:4b: cd:f6:64:98:f2:77:92:c1:3d:91:1e:92:e2:ac:e3:71:22:5e: 1c:f8:22:bd:45:2a:e9:a4:b2:af:ef:c9:9c:d9:15:4c:5a:44: 2f:0b:61:c9:b7:c2:48:35:e1:f6:d1:52:3b:8f:61:4c:d1:77: af:c3:4b:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUwODIwMjI0ODQxWhcNMjUwODI3MjI0ODQxWjAYMRYwFAYD VQQDEw02OGE2NTBjOS1mZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34e/usk6zG14qzsKy8d0mL+L+S2pVMSbHi5FYltXQ3jlRw1BB0jaVKv9eu0s ubJzargX87bRaFOF0aRGxESG2BSc4W4ijyMA6ADclM0OzbbQUOYKW7E1bDoR+nab TmPVUlMKxb9qzpeC6gB4SmTP3fR5OhEbgFoFoQNTN+wOUMPQRNHcWSoCmRlNRHyu j4H+ASzbSAcl60wMa15HZd2IThEumJb/mi6nhKD26ymbQBTtZDe+P79o8yUl/IIj hj16jaOgg4pF1kQ9eB7K0ZpCEMxIiaVWpqOJC7nfBSq9LapXbVwMbtAmtMtETdtt mf4JMxPYbSIGTxFbMKkOJNsJdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9zK75g kvQw0RdtjVYi/t6LvDAUMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrwu287h8LImIEH/z06NlbI/ehKcP9wosHOytY2Aa7mag7UEFcJXUW ZabaA12jrKP1znLbkaH3BbluCuhePogMPNATN1tvg98Xve61DIhSQkIK/b7W2G2q LmSTFdyRkNqRnhIL/lM4OKZ0Rxh81XoiqyiBVVBHVvpBEFlMuKeLN2+q8S68G2vB lno0WaOL1ul2E4En9JjtQLn4S8RN0GucHKRXgvcUKbWHayZ6Zn0TKatMwY/Z+DPg d0GiwjSHv0tZfKS92EvN9mSY8neSwT2RHpLirONxIl4c+CK9RSrppLKv78mc2RVM WkQvC2HJt8JINeH20VI7j2FM0Xevw0su -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:24 2025 by rpki-client