$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft File: aTyLTLomsG0s-roPm-TTffDd_z0.mft (raw, json) Hash identifier: 5s9L4UiznGFk9g+NK5lKrz7s8tjYoA/xj73U0PCnUUo= Subject key identifier: A5:2C:7B:A1:16:D2:6E:50:1A:C0:8D:B7:7C:94:BB:6F:A3:AB:42:EE Authority key identifier: 69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D Certificate issuer: /CN=A911ABF4/serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft Manifest number: 1816 Signing time: Fri 18 Jul 2025 17:45:51 +0000 Manifest this update: Fri 18 Jul 2025 17:45:50 +0000 Manifest next update: Fri 25 Jul 2025 17:45:50 +0000 Files and hashes: 1: aTyLTLomsG0s-roPm-TTffDd_z0.crl (hash: ab9KImZpvk9gy4gyZ9BTnVIEHOYj4fTNMTlvtnpU6UM=) 2: 9A6F15D6624311EFA06D813FC4F9AE02.roa (hash: RLnPHbg0LTWQkZx9moxgJVtKPJEDGEwMkih73Wp0pkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D Validity Not Before: Jul 18 17:45:50 2025 GMT Not After : Jul 25 17:45:50 2025 GMT Subject: CN=687a884e-68f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:bb:4c:3f:ae:d0:3d:8c:91:f0:c6:01:c9: 91:2a:0d:b4:a2:d5:77:86:23:1c:df:3a:e1:1c:fb: ba:01:05:5d:5b:a5:6a:29:47:1c:fa:70:9e:64:e8: b3:37:6c:70:a1:0b:5c:d2:3f:eb:c9:87:ad:d7:96: 70:58:c7:fa:5a:1d:49:7b:92:95:52:6d:d3:ef:f2: d0:ef:94:03:b7:1a:98:94:af:a1:eb:13:18:78:88: 94:ff:85:e3:3a:13:c1:16:f7:7a:82:2c:39:38:dc: f7:f7:b8:96:b4:16:f5:f3:32:68:d2:e3:08:e1:1b: 8a:8b:64:0f:04:28:b3:5c:95:5f:ec:7f:66:aa:f3: 61:da:b4:56:3a:7a:96:75:11:38:f4:cc:76:65:db: f7:55:3b:3e:6d:cf:ad:47:08:aa:80:01:12:40:bc: 5a:22:92:48:a3:9b:44:92:f7:7f:c9:d0:93:5d:8e: 89:e9:60:c2:e0:83:ff:46:49:5f:49:77:07:39:03: 23:7c:7f:e7:f1:da:31:fe:f6:2b:8d:ea:e0:ce:28: 8d:36:16:4e:6c:35:5b:a3:06:b3:4f:ff:2d:34:38: 70:71:39:b0:2e:ee:46:cc:5b:82:20:b2:f8:90:e0: 6b:17:0e:a9:8d:5c:c3:04:8a:c3:f8:81:8a:ed:f4: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2C:7B:A1:16:D2:6E:50:1A:C0:8D:B7:7C:94:BB:6F:A3:AB:42:EE X509v3 Authority Key Identifier: keyid:69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:df:e5:97:cd:e4:9e:d6:88:fc:37:06:d9:15:ca:c6:cf:5b: 6b:12:5d:8b:e7:ea:4e:9b:c5:a4:e1:43:f2:e5:73:2d:5b:83: b4:af:8f:b0:be:92:6a:53:2e:9c:81:70:d6:20:f0:11:bc:b0: 29:83:21:4a:13:33:41:5e:18:7e:24:64:73:5b:fa:9c:83:5c: 8c:a0:3a:94:16:51:7f:60:70:cb:90:5b:4e:8b:a9:59:50:9d: 1c:a5:10:e5:07:7a:d1:f7:72:fd:0e:ea:72:a9:b2:ad:41:96: cd:dc:4f:8b:f9:05:92:af:dd:f6:0e:22:28:12:f0:2f:bb:62: 2a:00:5c:50:08:db:30:9b:20:fa:59:77:7d:d8:b7:55:40:08: bc:7c:89:06:07:e3:be:a8:de:34:b9:96:b6:bd:c0:e2:27:ae: 6b:54:c2:4b:be:d9:f6:7e:73:98:7b:2a:6b:03:71:a0:6c:75: 57:38:95:47:7e:3f:3f:eb:65:d0:78:5c:2d:12:23:5e:48:78: 27:f8:ba:42:3b:1f:af:be:a2:c0:49:a6:f9:ed:6d:33:25:a2: bf:54:ef:1e:b3:c0:9e:73:2b:85:c2:6d:64:f8:e1:80:86:cd: 39:6b:c3:fd:62:21:02:16:fe:54:36:a8:74:ac:4c:e3:cf:bb: 50:2f:f9:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDY5M0M4QjRDQkEyNkIwNkQyQ0ZBQkEwRjlCRTREMzdE RjBEREZGM0QwHhcNMjUwNzE4MTc0NTUwWhcNMjUwNzI1MTc0NTUwWjAYMRYwFAYD VQQDEw02ODdhODg0ZS02OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfG7TD+u0D2MkfDGAcmRKg20otV3hiMc3zrhHPu6AQVdW6VqKUcc+nCeZOiz N2xwoQtc0j/ryYet15ZwWMf6Wh1Je5KVUm3T7/LQ75QDtxqYlK+h6xMYeIiU/4Xj OhPBFvd6giw5ONz397iWtBb18zJo0uMI4RuKi2QPBCizXJVf7H9mqvNh2rRWOnqW dRE49Mx2Zdv3VTs+bc+tRwiqgAESQLxaIpJIo5tEkvd/ydCTXY6J6WDC4IP/Rklf SXcHOQMjfH/n8dox/vYrjergziiNNhZObDVbowazT/8tNDhwcTmwLu5GzFuCILL4 kOBrFw6pjVzDBIrD+IGK7fQquwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUse6EW 0m5QGsCNt3yUu2+jq0LuMB8GA1UdIwQYMBaAFGk8i0y6JrBtLPq6D5vk033w3f89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9hVHlMVExvbXNHMHMtcm9QbS1UVGZmRGRf ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUeUxUTG9tc0cwcy1yb1BtLVRUZmZEZF96MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9hVHlMVExvbXNH MHMtcm9QbS1UVGZmRGRfejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC13+WXzeSe1oj8NwbZFcrGz1trEl2L5+pOm8Wk4UPy5XMtW4O0r4+w vpJqUy6cgXDWIPARvLApgyFKEzNBXhh+JGRzW/qcg1yMoDqUFlF/YHDLkFtOi6lZ UJ0cpRDlB3rR93L9DupyqbKtQZbN3E+L+QWSr932DiIoEvAvu2IqAFxQCNswmyD6 WXd92LdVQAi8fIkGB+O+qN40uZa2vcDiJ65rVMJLvtn2fnOYeyprA3GgbHVXOJVH fj8/62XQeFwtEiNeSHgn+LpCOx+vvqLASab57W0zJaK/VO8es8CecyuFwm1k+OGA hs05a8P9YiECFv5UNqh0rEzjz7tQL/nI -----END CERTIFICATE-----Generated at Sun Jul 20 04:23:51 2025 by rpki-client