$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: OgOfHU+SKlQuDJQwCbRys4h3/GzLe/zprulepAfwze8= Subject key identifier: FC:27:67:7A:92:4C:BC:29:CA:56:87:A3:ED:82:40:D0:DE:FB:7B:E5 Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: AA Signing time: Sat 19 Jul 2025 06:21:10 +0000 Manifest this update: Sat 19 Jul 2025 06:21:09 +0000 Manifest next update: Sat 26 Jul 2025 06:21:09 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: XRo0vXMek6lj/yVVWer/MXRT1Oos+HlZvA2fgh+uAbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Jul 19 06:21:09 2025 GMT Not After : Jul 26 06:21:09 2025 GMT Subject: CN=687b3956-fdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:44:9f:61:04:0a:98:f8:e7:b7:e3:9c:d8: 9f:2d:cc:8b:b0:d9:88:72:ee:49:e7:3e:32:89:ea: a2:94:dd:01:16:17:ad:af:d6:be:52:c6:5d:6b:d9: f1:68:60:1a:7c:ef:00:92:da:bf:3a:75:1e:85:52: 11:ac:3b:36:a9:e3:4b:b3:d6:65:de:d7:41:94:ee: 0b:8a:3f:6c:58:7e:d5:cb:8d:d5:3c:e2:fd:4d:c4: 14:5a:ce:27:6d:de:ee:34:39:fa:16:7e:b2:85:e5: 3a:d3:6e:61:a3:b9:2c:81:c7:22:33:e7:95:29:c8: 14:67:94:91:cb:bf:00:70:e3:c6:33:ea:5a:c0:fc: 75:64:70:61:11:44:13:7e:32:c2:19:81:b3:74:2b: 75:3a:36:75:88:5b:d0:4c:1a:f7:30:da:d1:32:29: 35:e2:ad:4c:6c:53:1b:96:97:45:cd:25:0a:2f:06: 50:c3:95:7e:23:74:1d:07:cf:fc:97:87:b5:eb:ac: ed:d9:fc:95:1b:b6:e6:d0:5b:aa:c0:62:b1:e8:2b: 3c:0d:27:05:c3:b6:d7:9d:eb:33:64:28:08:dc:20: 65:9a:04:e0:9e:64:b2:42:b1:df:5e:2c:e0:c1:42: 4c:6e:8f:de:79:0b:79:98:5d:e9:55:eb:b7:20:83: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:67:7A:92:4C:BC:29:CA:56:87:A3:ED:82:40:D0:DE:FB:7B:E5 X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:59:f8:b4:ee:b5:86:de:9d:77:4e:35:71:f9:7c:96:0b:b7: dd:b9:a6:3a:ad:3b:88:41:66:fd:bf:7b:4d:3d:26:36:e4:29: 20:7b:c4:85:31:29:cc:50:4b:de:13:c0:08:75:84:ca:6c:9d: 73:76:4a:78:66:29:e7:5a:73:d2:18:c7:ff:97:aa:90:05:97: 07:f4:65:b6:fa:a1:4b:c6:17:83:7c:3e:6e:55:7a:04:27:60: 65:c6:a8:76:97:80:9e:10:9d:f4:aa:a6:43:3b:8c:b8:f9:95: dc:48:7e:da:74:86:1d:d0:9b:59:ca:2f:3a:36:14:48:1d:03: 1b:37:e1:00:68:7b:e3:4e:04:d6:e2:46:b7:82:1e:d6:2c:a9: 88:9a:5a:e2:93:b6:93:33:08:65:c1:3d:59:e2:e7:98:2c:d5: 19:7b:78:74:8d:15:d2:8f:10:50:87:91:00:d7:b1:ef:6e:80: 36:51:e1:fc:6f:87:16:82:b6:db:ab:f0:09:57:1e:e9:d7:55: 87:ac:0b:6a:7c:e9:5a:25:36:51:ad:09:48:b0:2f:1a:09:e9: 0a:b1:56:68:ca:94:cb:c4:45:11:87:7a:01:29:f7:1b:11:d1: 13:2d:92:38:85:d7:02:e6:1d:d7:e0:09:06:7f:9d:a4:42:91: 28:ae:f8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUwNzE5MDYyMTA5WhcNMjUwNzI2MDYyMTA5WjAYMRYwFAYD VQQDEw02ODdiMzk1Ni1mZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkFEn2EECpj457fjnNifLcyLsNmIcu5J5z4yieqilN0BFhetr9a+UsZda9nx aGAafO8Aktq/OnUehVIRrDs2qeNLs9Zl3tdBlO4Lij9sWH7Vy43VPOL9TcQUWs4n bd7uNDn6Fn6yheU6025ho7ksgcciM+eVKcgUZ5SRy78AcOPGM+pawPx1ZHBhEUQT fjLCGYGzdCt1OjZ1iFvQTBr3MNrRMik14q1MbFMblpdFzSUKLwZQw5V+I3QdB8/8 l4e166zt2fyVG7bm0FuqwGKx6Cs8DScFw7bXneszZCgI3CBlmgTgnmSyQrHfXizg wUJMbo/eeQt5mF3pVeu3IIMgtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwnZ3qS TLwpylaHo+2CQNDe+3vlMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Wfi07rWG3p13TjVx+XyWC7fduaY6rTuIQWb9v3tNPSY25Ckge8SF MSnMUEveE8AIdYTKbJ1zdkp4ZinnWnPSGMf/l6qQBZcH9GW2+qFLxheDfD5uVXoE J2Blxqh2l4CeEJ30qqZDO4y4+ZXcSH7adIYd0JtZyi86NhRIHQMbN+EAaHvjTgTW 4ka3gh7WLKmImlrik7aTMwhlwT1Z4ueYLNUZe3h0jRXSjxBQh5EA17HvboA2UeH8 b4cWgrbbq/AJVx7p11WHrAtqfOlaJTZRrQlIsC8aCekKsVZoypTLxEURh3oBKfcb EdETLZI4hdcC5h3X4AkGf52kQpEorvji -----END CERTIFICATE-----Generated at Sun Jul 20 08:00:37 2025 by rpki-client