$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json) Hash identifier: V8NXPB9P8sNUO3op8c5Ip27Am+dIjI6AlQTCYaYw4sY= Subject key identifier: 3B:1B:C0:CF:71:2B:33:19:45:A8:CC:03:F3:8E:BD:BE:AB:5B:3D:DC Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft Manifest number: 8D Signing time: Mon 21 Jul 2025 06:41:45 +0000 Manifest this update: Mon 21 Jul 2025 06:41:44 +0000 Manifest next update: Mon 28 Jul 2025 06:41:44 +0000 Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: dTvbXcHt0ONddbLHOOZv9og1/gNadrAkZGmuIRDwkjs=) 2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Validity Not Before: Jul 21 06:41:44 2025 GMT Not After : Jul 28 06:41:44 2025 GMT Subject: CN=687de129-7fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:a5:cb:54:ce:e2:d2:50:25:7e:39:2e:69: 25:a2:51:fc:78:51:69:55:62:f1:e0:4b:32:11:76: 97:48:d4:ab:20:eb:e3:cf:dc:cd:20:ed:d2:84:b0: 4b:08:a4:1a:d6:2d:f8:8c:e6:c2:88:34:39:1c:3d: 0d:d6:6f:4b:03:1a:35:d3:43:0d:09:7c:d5:b8:26: 74:bc:5c:ec:9f:58:f7:bf:92:f4:eb:b0:52:e2:dd: 1d:fa:da:f4:93:5c:6c:ee:4d:a2:f0:4f:fb:a4:b3: 32:bb:79:fe:53:b7:41:87:c2:96:15:bc:9c:4a:cc: b7:cf:cc:7f:af:90:3b:d0:92:89:47:db:1d:04:4a: e4:b7:d6:46:c7:68:38:0a:4c:16:07:c3:5f:1c:d4: 7b:f1:4a:fe:76:62:74:ba:12:d0:b8:92:50:9f:ba: 27:da:d9:c1:e2:a9:cc:af:b5:da:2b:5a:d8:79:30: 47:d0:22:db:79:26:07:67:de:cd:a2:b2:56:3a:9e: 07:08:6d:e9:5d:dc:01:86:46:af:64:fa:0f:3e:92: 5a:6f:fa:48:4d:d9:60:58:bd:8d:0a:24:35:9b:cc: f6:c3:c6:a6:1d:3c:44:52:83:67:7f:1d:5d:15:6f: a9:97:78:85:bc:af:03:be:9d:c2:10:62:c3:4a:bd: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:C0:CF:71:2B:33:19:45:A8:CC:03:F3:8E:BD:BE:AB:5B:3D:DC X509v3 Authority Key Identifier: keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:aa:47:a6:2d:84:6f:92:90:1d:9e:36:3c:08:33:06:02:ea: 9a:b0:cb:27:c9:63:cc:f5:64:81:ec:49:8a:a5:c6:16:d8:bb: a2:9e:b5:4f:67:10:2c:7d:25:bd:18:24:72:d8:ed:1e:f6:b6: 73:66:5c:88:0a:b1:e1:5b:b0:76:77:8a:42:6e:3d:55:23:28: 13:0c:16:18:62:0c:99:97:db:c2:12:45:51:be:0f:9e:32:89: fb:b8:39:42:1b:f0:1f:12:91:d8:8c:02:22:a0:29:83:8a:f3: a4:46:24:68:d1:a4:e1:1a:10:be:67:58:87:6f:d3:00:66:2a: 22:55:a8:bb:5a:5e:98:e7:c2:2e:e4:45:14:d1:71:71:1d:48: bc:a8:ae:73:57:1a:8c:79:06:1a:ce:9a:d3:f9:ae:49:92:51: cb:f3:f9:42:95:2c:0c:60:af:61:a2:7b:c3:14:d5:71:7c:d7: 27:b7:cd:62:2c:d8:58:68:1b:9b:52:6d:b2:32:1e:44:33:3b: c6:96:66:b7:bf:d5:80:14:c0:06:bd:9a:22:a4:08:f8:8d:35: 6f:93:e2:93:45:f4:0e:5d:5c:97:5f:72:ba:e2:04:0d:05:59: d4:b9:d2:cc:df:63:c0:af:10:11:1d:f8:a3:01:9c:cd:2c:58: 29:de:13:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA4MTgxMTAvBgNVBAUTKDRGNDVGQTY5RDlFNUY1NTA4NEREQzkyMjg5NTI3NkE2 NDAyMzlDMUMwHhcNMjUwNzIxMDY0MTQ0WhcNMjUwNzI4MDY0MTQ0WjAYMRYwFAYD VQQDEw02ODdkZTEyOS03ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCyly1TO4tJQJX45LmklolH8eFFpVWLx4EsyEXaXSNSrIOvjz9zNIO3ShLBL CKQa1i34jObCiDQ5HD0N1m9LAxo100MNCXzVuCZ0vFzsn1j3v5L067BS4t0d+tr0 k1xs7k2i8E/7pLMyu3n+U7dBh8KWFbycSsy3z8x/r5A70JKJR9sdBErkt9ZGx2g4 CkwWB8NfHNR78Ur+dmJ0uhLQuJJQn7on2tnB4qnMr7XaK1rYeTBH0CLbeSYHZ97N orJWOp4HCG3pXdwBhkavZPoPPpJab/pITdlgWL2NCiQ1m8z2w8amHTxEUoNnfx1d FW+pl3iFvK8Dvp3CEGLDSr0h2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsbwM9x KzMZRajMA/OOvb6rWz3cMB8GA1UdIwQYMBaAFE9F+mnZ5fVQhN3JIolSdqZAI5wc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDgxOC83NTNDMzAxODkw OUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9UMFg2YWRubDlWQ0UzY2tpaVZKMnBrQWpu QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5Cdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDgxOC83NTNDMzAxODkwOUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9UMFg2YWRubDlW Q0UzY2tpaVZKMnBrQWpuQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOqkemLYRvkpAdnjY8CDMGAuqasMsnyWPM9WSB7EmKpcYW2LuinrVP ZxAsfSW9GCRy2O0e9rZzZlyICrHhW7B2d4pCbj1VIygTDBYYYgyZl9vCEkVRvg+e Mon7uDlCG/AfEpHYjAIioCmDivOkRiRo0aThGhC+Z1iHb9MAZioiVai7Wl6Y58Iu 5EUU0XFxHUi8qK5zVxqMeQYazprT+a5JklHL8/lClSwMYK9honvDFNVxfNcnt81i LNhYaBubUm2yMh5EMzvGlma3v9WAFMAGvZoipAj4jTVvk+KTRfQOXVyXX3K64gQN BVnUudLM32PArxARHfijAZzNLFgp3hMS -----END CERTIFICATE-----Generated at Mon Jul 21 13:14:04 2025 by rpki-client