$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: 9DJhcpBJTEN9h2RuWSjmYMFWpCLxmcbZd+hD0xyvyWU= Subject key identifier: 97:2A:8F:9A:89:45:C7:1F:A3:AE:CE:EC:90:0D:81:49:D1:0D:D3:44 Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 15 Signing time: Sat 31 May 2025 07:33:08 +0000 Manifest this update: Sat 31 May 2025 07:33:07 +0000 Manifest next update: Sat 07 Jun 2025 07:33:07 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: JicOsqZtSw57+HqeZYeK5qWRvdyTUFG6vvNXloOU0sE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: May 31 07:33:07 2025 GMT Not After : Jun 7 07:33:07 2025 GMT Subject: CN=683ab0b4-3f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:57:e1:03:4c:13:16:9e:dd:f9:f8:f3:2b: 22:ca:d0:86:3a:66:50:ab:d1:be:43:33:38:04:91: f7:34:d6:18:cd:0f:8e:64:e9:2d:91:e1:28:b4:0f: b9:c0:15:f2:05:a1:aa:ff:ea:9f:a3:06:df:bf:ea: c4:fb:30:4c:8f:c0:49:d1:07:7b:7b:6b:85:53:35: c4:bd:b2:e2:42:b9:49:a3:76:4f:d7:0e:ef:06:5e: b8:fc:e9:79:ed:99:30:1d:5f:fb:fb:27:f1:bd:a2: 3c:96:03:4b:ea:15:cd:b2:6d:74:03:07:51:a4:ab: 87:bf:64:1b:e5:59:b0:8e:7b:9d:31:a8:f5:28:95: 9e:31:de:87:03:66:cd:65:08:01:e4:14:13:30:c6: 02:25:64:64:f3:6e:69:2f:d7:a3:88:a0:ac:dd:e8: 9d:ae:8e:62:bf:e7:07:ba:b3:b3:5e:a0:0a:1a:2c: ae:1a:c7:c0:2e:43:18:32:43:a6:3a:b7:cf:86:a6: b4:b5:73:05:80:91:b8:e3:98:49:49:c2:ba:21:7f: cf:cc:98:b2:f0:e4:99:66:6b:c4:d0:51:9c:46:7e: 52:18:f8:e3:8e:8e:00:a2:a0:06:a7:a9:27:f3:38: 97:bd:a6:e4:e3:cc:40:30:d0:13:1b:f8:54:c8:f2: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2A:8F:9A:89:45:C7:1F:A3:AE:CE:EC:90:0D:81:49:D1:0D:D3:44 X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:99:d7:db:85:c2:14:58:aa:67:8e:ef:a9:48:b6:da:cc:02: 70:a4:03:85:b7:02:b3:63:c7:ed:c2:b1:a7:cc:b4:a1:05:71: 8b:4d:40:b0:8d:46:3a:07:09:d4:b0:d0:13:32:c6:3b:6b:9a: 49:00:1d:01:ae:4a:12:bf:36:66:fe:45:8a:f3:f0:6d:50:3a: 19:26:ed:c1:ca:d3:a2:96:ab:35:22:8a:35:b4:fc:b5:37:ec: 3c:21:95:6d:43:b2:4a:56:16:1f:c2:71:59:a8:25:95:3e:a0: 7e:2d:8d:5d:4d:bc:38:b4:b0:f3:80:cd:17:cc:e5:52:3f:51: ab:f9:7d:f8:f6:6d:9e:93:63:9a:65:3e:6c:33:22:ba:a1:87: 91:a0:c4:00:30:1e:5d:78:fd:c0:2a:87:e7:ff:31:4a:6a:63: 89:5e:8f:ec:2f:36:46:29:86:12:1b:b9:49:33:b8:92:14:94: 77:41:b8:66:fc:0c:eb:de:04:a0:61:17:ad:b1:61:43:b1:26: 9e:c3:67:ae:62:ab:5b:27:4e:c6:67:0a:31:cf:ab:4b:36:7c: 65:73:5d:c2:75:b4:5d:79:c7:05:cf:0b:15:7e:44:be:90:0f: a3:fd:e2:89:ec:4c:25:b3:bd:b0:35:99:2e:2d:c2:7f:80:73: c3:47:9e:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTA1MzEwNzMzMDdaFw0yNTA2MDcwNzMzMDdaMBgxFjAUBgNV BAMTDTY4M2FiMGI0LTNmMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF81fhA0wTFp7d+fjzKyLK0IY6ZlCr0b5DMzgEkfc01hjND45k6S2R4Si0D7nA FfIFoar/6p+jBt+/6sT7MEyPwEnRB3t7a4VTNcS9suJCuUmjdk/XDu8GXrj86Xnt mTAdX/v7J/G9ojyWA0vqFc2ybXQDB1Gkq4e/ZBvlWbCOe50xqPUolZ4x3ocDZs1l CAHkFBMwxgIlZGTzbmkv16OIoKzd6J2ujmK/5we6s7NeoAoaLK4ax8AuQxgyQ6Y6 t8+GprS1cwWAkbjjmElJwrohf8/MmLLw5Jlma8TQUZxGflIY+OOOjgCioAanqSfz OJe9puTjzEAw0BMb+FTI8i3rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlyqPmolF xx+jrs7skA2BSdEN00QwHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiZ19uFwhRYqmeO76lIttrMAnCkA4W3ArNjx+3CsafMtKEFcYtNQLCN RjoHCdSw0BMyxjtrmkkAHQGuShK/Nmb+RYrz8G1QOhkm7cHK06KWqzUiijW0/LU3 7DwhlW1DskpWFh/CcVmoJZU+oH4tjV1NvDi0sPOAzRfM5VI/Uav5ffj2bZ6TY5pl PmwzIrqhh5GgxAAwHl14/cAqh+f/MUpqY4lej+wvNkYphhIbuUkzuJIUlHdBuGb8 DOveBKBhF62xYUOxJp7DZ65iq1snTsZnCjHPq0s2fGVzXcJ1tF15xwXPCxV+RL6Q D6P94onsTCWzvbA1mS4twn+Ac8NHnh4= -----END CERTIFICATE-----Generated at Sat May 31 16:35:02 2025 by rpki-client