$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: 23zvBeU3JZuTRth6M6gYmGmHU6Uop7OirRXKdCquhgY= Subject key identifier: 25:63:B5:C6:4D:15:D6:7B:4E:29:76:CF:41:5E:D6:AB:19:72:64:B1 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 46 Signing time: Mon 21 Jul 2025 07:38:10 +0000 Manifest this update: Mon 21 Jul 2025 07:38:10 +0000 Manifest next update: Mon 28 Jul 2025 07:38:10 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: syLnzTNYU7gsau+PLjjB1xXR6J5/6oWEIPfOzt3q8EY=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: xErSiwEVGbEN6QlFmGLkFVWsdMEkeNM0TxyRejXCRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Jul 21 07:38:10 2025 GMT Not After : Jul 28 07:38:10 2025 GMT Subject: CN=687dee62-0852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:1a:63:0c:5f:3c:85:ef:3c:d5:32:9c:08: 05:53:aa:9b:ac:06:7c:73:7c:75:8c:af:78:17:2e: 0b:82:69:5e:54:9b:71:61:ef:72:a5:1c:d6:ca:f4: fc:76:5d:43:3b:96:9a:39:94:9c:2f:03:51:15:9a: 9c:31:f2:45:41:f2:4d:02:70:93:e7:96:1e:49:b6: 07:35:15:04:21:2e:af:a8:56:a0:a1:8b:df:77:72: e1:9c:03:ab:f1:0e:38:bc:4a:63:54:09:79:db:80: bf:b8:ed:c8:c6:6f:a3:18:ed:b9:ba:4e:d4:bc:1e: 3e:91:36:4b:65:70:b8:e4:97:bb:ef:f8:87:ae:da: 94:58:ff:9c:f3:c6:10:9e:40:ab:3e:fb:e6:7d:de: 96:ac:7b:ea:e8:bd:90:22:30:a1:0f:9c:cb:21:04: 60:2a:c1:27:cb:bc:4a:47:9e:a3:75:ea:95:e4:90: 7a:7e:72:7e:ea:bb:7b:0e:64:e1:ee:fb:01:1c:b8: c4:44:c0:16:8c:af:fe:59:ea:1b:dc:24:3e:13:7b: ee:5a:84:34:11:91:80:32:8f:ef:59:a1:c2:40:14: 1f:6f:8d:23:1c:d0:bb:08:bd:24:8a:08:c2:50:0e: b5:7e:64:1f:87:6c:22:ee:fe:b6:71:1c:23:69:fc: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:63:B5:C6:4D:15:D6:7B:4E:29:76:CF:41:5E:D6:AB:19:72:64:B1 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3f:04:19:f7:f2:db:c3:2c:b2:b2:04:c6:82:d1:1e:ac:3a: 63:2a:12:08:17:fc:45:87:80:91:bc:64:f7:ee:2c:6a:14:a9: 8d:b0:b3:91:51:94:95:88:a9:cc:03:44:97:a2:b2:a2:a7:b4: 6d:c9:51:d3:1c:b6:24:0c:b9:40:1b:7d:34:5a:a1:ba:e5:e5: ca:c5:2b:f8:3e:7e:79:71:70:10:9d:40:67:15:88:12:12:5e: 5a:bd:c3:1d:11:0b:6f:c8:e6:de:40:81:11:67:bc:aa:45:8a: 28:2d:93:f1:14:ef:b2:31:2f:03:f1:4e:d5:9e:17:c6:d9:3c: 32:93:9d:3c:fe:c0:af:f8:d2:3e:25:7d:55:06:c2:d3:21:7e: 26:19:02:f2:8d:e4:4a:18:7c:f4:ba:79:14:c1:2f:af:dc:ee: 2f:88:1c:72:d8:5e:23:d4:e7:8b:05:4d:23:60:86:18:3f:fb: 19:43:51:6b:21:b4:08:a1:be:96:f5:bc:44:65:21:63:7f:96: e8:a0:ee:9b:5b:a7:e4:6f:e9:e1:ec:6c:49:e9:4f:c7:5f:5a: 66:5b:cb:05:ae:84:6e:d4:71:1d:bd:6a:77:03:86:fc:1a:32: cd:c5:8f:9b:97:ee:76:d4:21:a9:6b:c5:1d:d0:2f:d5:3b:a7: 47:0d:1b:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0FERTExMC8GA1UEBRMoRDkzMjBCRkRBQzBDOTBCMzQyOEE0NEZDN0RDQTBFMkY3 OTA5Nzc0MTAeFw0yNTA3MjEwNzM4MTBaFw0yNTA3MjgwNzM4MTBaMBgxFjAUBgNV BAMTDTY4N2RlZTYyLTA4NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCztRpjDF88he881TKcCAVTqpusBnxzfHWMr3gXLguCaV5Um3Fh73KlHNbK9Px2 XUM7lpo5lJwvA1EVmpwx8kVB8k0CcJPnlh5Jtgc1FQQhLq+oVqChi993cuGcA6vx Dji8SmNUCXnbgL+47cjGb6MY7bm6TtS8Hj6RNktlcLjkl7vv+Ieu2pRY/5zzxhCe QKs+++Z93pase+rovZAiMKEPnMshBGAqwSfLvEpHnqN16pXkkHp+cn7qu3sOZOHu +wEcuMREwBaMr/5Z6hvcJD4Te+5ahDQRkYAyj+9ZocJAFB9vjSMc0LsIvSSKCMJQ DrV+ZB+HbCLu/rZxHCNp/HaTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJWO1xk0V 1ntOKXbPQV7WqxlyZLEwHwYDVR0jBBgwFoAU2TIL/awMkLNCikT8fcoOL3kJd0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QURFLzg5QTQ5M0UyRkU0 RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRJTF9hd01rTE5DaWtUOGZjb09MM2tKZDBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QURFLzg5QTQ5M0UyRkU0RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xO Q2lrVDhmY29PTDNrSmQwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACo/BBn38tvDLLKyBMaC0R6sOmMqEggX/EWHgJG8ZPfuLGoUqY2ws5FR lJWIqcwDRJeisqKntG3JUdMctiQMuUAbfTRaobrl5crFK/g+fnlxcBCdQGcViBIS Xlq9wx0RC2/I5t5AgRFnvKpFiigtk/EU77IxLwPxTtWeF8bZPDKTnTz+wK/40j4l fVUGwtMhfiYZAvKN5EoYfPS6eRTBL6/c7i+IHHLYXiPU54sFTSNghhg/+xlDUWsh tAihvpb1vERlIWN/luig7ptbp+Rv6eHsbEnpT8dfWmZbywWuhG7UcR29ancDhvwa Ms3Fj5uX7nbUIalrxR3QL9U7p0cNG7I= -----END CERTIFICATE-----Generated at Mon Jul 21 12:31:03 2025 by rpki-client