$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft File: tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json) Hash identifier: bb/x3WDlV/bC3ba9/XIs/lXknZ0l+Wjjtqn4XZYq0m0= Subject key identifier: 76:9C:3B:5F:FC:AE:9B:F7:A5:D2:94:97:33:59:81:9D:94:3C:D2:AD Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 16:16:15 +0000 Manifest this update: Fri 04 Jul 2025 16:16:15 +0000 Manifest next update: Fri 11 Jul 2025 16:16:15 +0000 Files and hashes: 1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: 03qpxKlbR4jxDlUEnm/6NWOVDol/yHLLTsglLsIoCeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Jul 2025 16:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Validity Not Before: Jul 4 16:16:15 2025 GMT Not After : Jul 11 16:16:15 2025 GMT Subject: CN=6867fe4f-67da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:f9:7c:72:dc:60:48:64:3d:4f:cf:c2:0b: 27:94:0d:16:8f:65:f0:f7:ec:10:e7:6d:a3:dc:c0: 41:f6:ad:33:c7:17:74:24:3a:da:6b:71:75:f1:28: 1b:71:e9:9c:ec:7f:74:1c:f6:ee:eb:3e:e7:d5:99: 75:9c:0d:9c:e9:26:94:2f:60:0c:92:14:5a:01:91: 82:66:d9:d5:24:94:67:f9:22:ed:20:5f:38:4e:cd: 8f:62:0e:bc:d1:8a:c9:de:d7:f5:9f:32:f8:80:ad: 96:f7:2c:c5:0b:71:40:c0:9a:a5:52:a1:26:56:82: a3:a5:b8:06:01:f3:10:3d:00:c3:36:9b:3c:f7:66: 38:e6:91:d7:61:c2:27:9d:db:e6:a5:f8:bd:2f:c9: 65:e1:cf:0a:46:b3:7c:91:dd:97:50:ef:0b:3c:b0: 20:82:bd:f5:5d:c9:33:c4:58:b9:a5:15:b2:5f:4d: c2:53:86:9d:5a:45:b9:57:f7:8c:6f:a1:87:a7:90: d1:0d:cc:a7:31:c0:f1:4e:c5:2c:05:60:6c:81:ee: a2:07:56:e7:c6:41:f3:ed:fa:44:10:45:2e:fe:d3: 2f:c2:12:31:ec:01:ae:45:a7:98:56:75:7b:7f:1a: 30:11:fc:12:58:69:a5:66:94:39:67:35:bd:cb:e8: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:3B:5F:FC:AE:9B:F7:A5:D2:94:97:33:59:81:9D:94:3C:D2:AD X509v3 Authority Key Identifier: keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:25:dd:42:6f:e3:8b:a6:07:65:86:46:67:a7:8e:86:c6:0d: 3a:21:d8:aa:76:cd:ff:7c:3c:1a:90:15:5b:c2:18:77:74:ce: ad:96:65:06:8b:ec:32:9e:0e:a5:e7:7e:bf:d9:42:d0:d4:6f: 59:cf:34:1a:95:c4:d9:30:a6:a5:7f:da:08:0a:f8:93:7c:14: 94:d1:d0:b9:48:d0:be:10:ba:b0:37:3e:58:81:63:41:03:1d: f8:1f:3e:48:54:d3:24:35:47:67:a0:3d:31:73:5c:e1:7b:93: 7a:73:7b:7f:e4:a5:e1:97:d1:b8:4c:dc:5d:2e:a0:44:13:99: 03:cc:cf:f0:4c:06:bd:99:39:4b:85:f4:44:ea:f5:80:b1:60: 8d:a5:05:15:05:bc:32:30:8f:37:a2:6a:24:ff:9a:cd:b2:fc: 4a:1b:65:d7:12:f2:05:32:ce:9d:b7:4d:42:85:35:12:96:5f: 35:d3:c7:46:3e:bf:80:62:39:62:51:cb:08:26:26:03:0f:7a: d1:36:d6:1b:38:9a:05:62:e4:d1:ff:42:9b:e9:3d:fd:c9:8f: 46:1a:52:55:72:1d:52:29:1f:d4:7c:e7:be:fc:b3:11:37:15: 4b:ca:3d:59:16:5c:ef:68:2f:86:68:5c:1b:0a:f1:cd:14:83: 26:d4:80:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoQjU1NDlGNjE4MUZGQTdBRjI1RDhEMjNBNjY3MzA1NERD NDU2NkMwQzAeFw0yNTA3MDQxNjE2MTVaFw0yNTA3MTExNjE2MTVaMBgxFjAUBgNV BAMTDTY4NjdmZTRmLTY3ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuKPl8ctxgSGQ9T8/CCyeUDRaPZfD37BDnbaPcwEH2rTPHF3QkOtprcXXxKBtx 6Zzsf3Qc9u7rPufVmXWcDZzpJpQvYAySFFoBkYJm2dUklGf5Iu0gXzhOzY9iDrzR isne1/WfMviArZb3LMULcUDAmqVSoSZWgqOluAYB8xA9AMM2mzz3Zjjmkddhwied 2+al+L0vyWXhzwpGs3yR3ZdQ7ws8sCCCvfVdyTPEWLmlFbJfTcJThp1aRblX94xv oYenkNENzKcxwPFOxSwFYGyB7qIHVufGQfPt+kQQRS7+0y/CEjHsAa5Fp5hWdXt/ GjAR/BJYaaVmlDlnNb3L6FRNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdpw7X/yu m/el0pSXM1mBnZQ80q0wHwYDVR0jBBgwFoAUtVSfYYH/p68l2NI6ZnMFTcRWbAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzE5OEVFNTNFNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFZTZllZSF9wNjhsMk5JNlpuTUZUY1JXYkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzE5OEVFNTNFNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4 bDJOSTZabk1GVGNSV2JBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIl3UJv44umB2WGRmenjobGDToh2Kp2zf98PBqQFVvCGHd0zq2WZQaL 7DKeDqXnfr/ZQtDUb1nPNBqVxNkwpqV/2ggK+JN8FJTR0LlI0L4QurA3PliBY0ED HfgfPkhU0yQ1R2egPTFzXOF7k3pze3/kpeGX0bhM3F0uoEQTmQPMz/BMBr2ZOUuF 9ETq9YCxYI2lBRUFvDIwjzeiaiT/ms2y/EobZdcS8gUyzp23TUKFNRKWXzXTx0Y+ v4BiOWJRywgmJgMPetE21hs4mgVi5NH/QpvpPf3Jj0YaUlVyHVIpH9R85778sxE3 FUvKPVkWXO9oL4ZoXBsK8c0UgybUgMs= -----END CERTIFICATE-----Generated at Mon Jul 7 08:40:20 2025 by rpki-client