$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: pxovtBkAUeVVhuRjBUnZcHNmlXSeh+DbZ1qA2LvFhZo= Subject key identifier: FC:3D:87:10:1F:A6:2E:32:04:3B:5E:96:EB:C9:D9:EF:AA:B0:7B:35 Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 52 Signing time: Sat 19 Jul 2025 07:32:00 +0000 Manifest this update: Sat 19 Jul 2025 07:31:59 +0000 Manifest next update: Sat 26 Jul 2025 07:31:59 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: 9JboN7XRN3RmAHEoloKDGEQlsPDAsG9XZu1alSbHrqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: Jul 19 07:31:59 2025 GMT Not After : Jul 26 07:31:59 2025 GMT Subject: CN=687b49f0-d463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:a9:21:81:b9:f7:e4:11:15:b4:e9:5f:59: c6:20:d3:f8:db:c1:48:99:41:d0:d7:cf:98:88:bf: 01:38:70:4c:ea:30:be:a5:7d:0f:36:30:e0:0a:f2: 4b:bd:c6:aa:39:2c:48:70:84:58:52:8d:97:29:1a: 86:1a:86:ba:99:d2:37:17:d2:87:f2:24:2a:2f:91: 04:b3:fc:1c:4c:15:04:4e:cb:7f:c4:ce:f0:17:d2: 0f:c4:3d:cd:a4:bc:4c:2b:5b:b4:59:8d:af:47:2f: ff:04:01:75:2a:65:87:8c:b9:99:39:67:73:b6:a1: f5:31:70:ec:54:9e:75:12:3e:bd:9e:f1:50:31:91: df:00:69:3d:d7:1b:a4:dd:0c:ab:8d:e0:4f:3f:fc: 8c:ee:f1:83:7d:e7:f2:fb:b1:5b:dc:fd:47:cf:20: 97:f7:47:c9:bb:b3:84:f5:10:d9:e7:7e:14:05:e8: e3:a3:24:db:d9:60:0a:6f:ac:45:90:d5:c1:96:86: b4:82:b5:e6:7e:39:1a:a4:48:35:03:a1:01:c9:12: 4a:bf:81:8c:91:36:e9:6f:a0:a8:54:1f:b1:2e:7f: 77:fd:80:2c:43:7c:49:60:a0:8c:9e:bd:aa:59:3c: 5c:30:db:25:a0:d8:eb:63:b7:18:69:e5:63:9c:50: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3D:87:10:1F:A6:2E:32:04:3B:5E:96:EB:C9:D9:EF:AA:B0:7B:35 X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e9:f5:c0:a1:e8:e0:b2:d8:cf:8f:99:3d:53:2f:62:06:a0: 53:17:52:09:71:f5:14:d7:15:b6:34:21:b0:2a:26:fb:76:1d: 63:f5:ea:5e:61:74:fe:46:31:15:90:a0:ed:f2:eb:fb:56:06: 5f:a4:0e:05:f5:78:90:b7:de:a6:2a:41:f6:46:ec:54:34:df: 36:da:79:2f:6c:a4:41:f5:82:1c:a5:9e:68:33:ba:55:e7:e3: f6:d3:67:ee:0b:61:93:1e:5c:a8:f6:ac:ed:a6:7f:d9:d0:07: c4:c2:13:d9:c5:0c:2f:c7:98:54:8b:3e:09:1a:48:8c:47:0b: d1:05:b1:79:ca:97:38:6c:49:14:36:92:f4:79:a2:03:90:c7: b2:bf:2b:fd:c6:85:d4:d4:d1:6e:c1:a2:83:44:ba:ac:dc:7b: 02:f0:81:7e:8d:16:1d:3d:7c:db:c9:39:9c:bc:58:f3:05:5f: e0:d7:c3:ab:ce:df:30:e4:cd:8f:7f:27:65:f1:98:43:92:45: 1f:7e:58:73:9f:a5:a3:7b:02:11:c2:6f:33:65:ec:ce:54:17: 73:59:1a:25:31:fd:6e:3a:46:96:59:fd:c3:dc:df:49:99:a3: 48:a1:5f:e8:d3:ec:ec:b4:0a:f3:eb:22:37:04:a7:58:73:f4: e7:d7:16:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA3MTkwNzMxNTlaFw0yNTA3MjYwNzMxNTlaMBgxFjAUBgNV BAMTDTY4N2I0OWYwLWQ0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbRKkhgbn35BEVtOlfWcYg0/jbwUiZQdDXz5iIvwE4cEzqML6lfQ82MOAK8ku9 xqo5LEhwhFhSjZcpGoYahrqZ0jcX0ofyJCovkQSz/BxMFQROy3/EzvAX0g/EPc2k vEwrW7RZja9HL/8EAXUqZYeMuZk5Z3O2ofUxcOxUnnUSPr2e8VAxkd8AaT3XG6Td DKuN4E8//Izu8YN95/L7sVvc/UfPIJf3R8m7s4T1ENnnfhQF6OOjJNvZYApvrEWQ 1cGWhrSCteZ+ORqkSDUDoQHJEkq/gYyRNulvoKhUH7Euf3f9gCxDfElgoIyevapZ PFww2yWg2Otjtxhp5WOcUDONAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/D2HEB+m LjIEO16W68nZ76qwezUwHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADHp9cCh6OCy2M+PmT1TL2IGoFMXUglx9RTXFbY0IbAqJvt2HWP16l5h dP5GMRWQoO3y6/tWBl+kDgX1eJC33qYqQfZG7FQ03zbaeS9spEH1ghylnmgzulXn 4/bTZ+4LYZMeXKj2rO2mf9nQB8TCE9nFDC/HmFSLPgkaSIxHC9EFsXnKlzhsSRQ2 kvR5ogOQx7K/K/3GhdTU0W7BooNEuqzcewLwgX6NFh09fNvJOZy8WPMFX+DXw6vO 3zDkzY9/J2XxmEOSRR9+WHOfpaN7AhHCbzNl7M5UF3NZGiUx/W46RpZZ/cPc30mZ o0ihX+jT7Oy0CvPrIjcEp1hz9OfXFsQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:04:43 2025 by rpki-client