$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: Qg/Qlw1LRzNIYf6XXV2Nw4DT8lUu3tu9/fIAy7SLZUU= Subject key identifier: C0:4D:BC:91:E8:2A:52:03:EF:D5:35:4B:FB:24:86:62:D3:C2:D3:A6 Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 2E Signing time: Sat 19 Jul 2025 07:57:02 +0000 Manifest this update: Sat 19 Jul 2025 07:57:02 +0000 Manifest next update: Sat 26 Jul 2025 07:57:02 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: hKw74zCCaMgg+ewzQZOjjWYFk/lij2jZekGHCaNCPB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Jul 19 07:57:02 2025 GMT Not After : Jul 26 07:57:02 2025 GMT Subject: CN=687b4fce-2a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:6e:3e:e6:61:f8:fe:a8:bc:16:40:ae:d3: 06:96:b2:f1:36:4f:54:fd:4e:fe:72:4d:f0:ec:6f: 89:d6:a8:d9:d1:63:da:bf:14:04:47:2e:ea:f0:5a: 6e:d8:5b:5c:8a:c2:12:82:05:22:a3:d5:15:14:07: eb:a9:40:21:39:6f:ce:d4:fd:84:17:b8:97:40:9d: ae:b7:bc:32:58:de:6b:78:9e:64:5d:84:c9:69:28: b5:4a:8b:0e:7e:5a:91:8f:ff:7d:da:f4:6d:da:6f: c1:8e:4c:27:d6:40:e8:f4:34:63:b9:9f:28:a4:f5: 7a:87:47:6d:77:67:59:52:87:9e:ad:2e:7d:ac:ab: 11:c3:11:df:a5:ad:d3:d9:7a:63:6a:8b:38:4d:34: 91:58:43:00:37:ff:36:d8:e4:76:e3:5b:62:63:b3: 35:17:ba:48:2c:1b:21:af:7f:5f:fb:c8:75:09:7c: e0:5e:f0:36:dd:14:9e:a1:4a:ee:f8:0b:cf:70:3c: 74:ff:28:d2:d4:ab:23:80:35:f6:30:f0:da:79:c8: 99:90:cc:da:87:ab:5d:1c:bc:2c:52:52:95:e4:7f: d5:cd:5a:60:ad:9e:bf:9a:01:16:04:66:ae:62:8a: 3d:f3:6d:5d:29:eb:7b:4f:e8:80:23:0f:25:cf:b3: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4D:BC:91:E8:2A:52:03:EF:D5:35:4B:FB:24:86:62:D3:C2:D3:A6 X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8c:f9:97:cc:19:f2:f7:48:9c:d3:90:9a:72:dd:63:20:1e: 91:29:9c:a7:d2:e1:b8:77:c0:02:38:03:a5:3d:1f:7d:38:a2: f3:82:47:dc:92:de:0f:ad:dc:23:2e:c1:b0:a1:5e:c4:47:0c: 9d:e1:f2:51:9f:e7:47:2d:f2:f8:09:57:d1:c7:a5:27:ae:3f: 60:9c:d1:83:c7:bb:0e:a5:57:7f:57:3c:09:9a:6e:87:cb:f0: 8b:94:90:43:4b:60:e5:a8:0d:a0:f4:fb:0b:6d:a8:a4:6c:fc: 6d:eb:cf:a0:dd:1a:0a:f3:d0:7b:e1:72:e9:fe:98:4c:cc:b0: 68:1f:c4:87:9f:ec:93:12:19:a7:a9:c7:8b:b6:bd:bb:9c:f5: 5f:21:3e:b2:6a:18:45:2c:de:57:33:55:c8:8a:eb:a3:32:91: bc:a7:e9:0c:78:5b:aa:f5:0d:ef:42:0b:e2:37:79:9d:3d:15: fd:48:1f:fe:27:5b:1e:d6:b9:1d:13:c9:de:a6:42:35:80:32: ce:27:b3:0c:42:5d:06:1d:04:48:e1:63:5f:41:c5:26:3e:82: 73:12:ba:57:99:73:79:76:f1:f6:30:26:ca:3e:00:1c:e2:af: e9:d7:64:53:d9:d4:96:a4:e1:86:00:95:37:78:c1:4d:7e:17: 7e:bc:fa:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTA3MTkwNzU3MDJaFw0yNTA3MjYwNzU3MDJaMBgxFjAUBgNV BAMTDTY4N2I0ZmNlLTJhOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+q24+5mH4/qi8FkCu0waWsvE2T1T9Tv5yTfDsb4nWqNnRY9q/FARHLurwWm7Y W1yKwhKCBSKj1RUUB+upQCE5b87U/YQXuJdAna63vDJY3mt4nmRdhMlpKLVKiw5+ WpGP/33a9G3ab8GOTCfWQOj0NGO5nyik9XqHR213Z1lSh56tLn2sqxHDEd+lrdPZ emNqizhNNJFYQwA3/zbY5HbjW2JjszUXukgsGyGvf1/7yHUJfOBe8DbdFJ6hSu74 C89wPHT/KNLUqyOANfYw8Np5yJmQzNqHq10cvCxSUpXkf9XNWmCtnr+aARYEZq5i ij3zbV0p63tP6IAjDyXPs9ZZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwE28kegq UgPv1TVL+ySGYtPC06YwHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOM+ZfMGfL3SJzTkJpy3WMgHpEpnKfS4bh3wAI4A6U9H304ovOCR9yS 3g+t3CMuwbChXsRHDJ3h8lGf50ct8vgJV9HHpSeuP2Cc0YPHuw6lV39XPAmabofL 8IuUkENLYOWoDaD0+wttqKRs/G3rz6DdGgrz0Hvhcun+mEzMsGgfxIef7JMSGaep x4u2vbuc9V8hPrJqGEUs3lczVciK66Mykbyn6Qx4W6r1De9CC+I3eZ09Ff1IH/4n Wx7WuR0Tyd6mQjWAMs4nswxCXQYdBEjhY19BxSY+gnMSuleZc3l28fYwJso+ABzi r+nXZFPZ1Jak4YYAlTd4wU1+F368+r8= -----END CERTIFICATE-----Generated at Sun Jul 20 03:16:44 2025 by rpki-client