$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft File: tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json) Hash identifier: hXM5HAQ926fm8tcizcs64be8cvAh5miWsh0paHXGMcA= Subject key identifier: BE:84:E9:BD:79:5C:10:41:A1:E3:E4:9E:F2:53:A2:08:6F:8A:B5:EC Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft Manifest number: 1D Signing time: Sat 23 Aug 2025 08:09:07 +0000 Manifest this update: Sat 23 Aug 2025 08:09:06 +0000 Manifest next update: Sat 30 Aug 2025 08:09:06 +0000 Files and hashes: 1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: 56D+l5/pasabpJLw5BxwAqnAYNDWO+vs+rRjdJxs3x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Validity Not Before: Aug 23 08:09:06 2025 GMT Not After : Aug 30 08:09:06 2025 GMT Subject: CN=68a97722-bafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:47:14:21:a8:55:b9:42:5e:79:e6:44:45:15: 0a:c2:82:03:70:01:88:26:9a:a2:2e:9e:dc:dd:8c: 34:ed:95:5c:42:81:4a:01:65:7b:0d:cf:bf:79:d7: f9:64:a8:19:53:48:d3:48:22:59:7b:5e:a0:c4:b7: 45:37:77:a2:0d:50:6b:d5:e8:d9:ae:8a:53:e7:dd: 97:91:82:2b:2c:9e:52:93:e1:c2:85:ce:dc:34:7f: f0:ef:93:f8:e4:49:cd:c1:22:6d:72:24:19:78:ba: fc:8f:60:ee:b5:72:54:bf:89:b8:f9:18:5a:cc:c2: 4d:5c:af:48:db:2b:f2:17:38:4b:80:f3:08:3d:99: 95:b8:dc:ef:dc:9a:32:7c:53:5e:3a:c5:96:c5:ce: 89:a1:91:a2:16:e7:d4:e3:a2:22:d2:21:65:1f:e7: c6:c6:5e:54:92:88:e0:53:6c:7a:cb:a9:6e:06:53: a3:f2:2a:b2:1d:5a:a9:be:66:13:72:f4:46:17:b2: 8e:80:2a:4d:77:08:b1:e7:0c:78:fc:da:26:e1:2f: ab:16:34:ff:09:8a:e1:c5:3b:4e:7e:1a:3a:c5:92: 88:1b:8c:79:fc:af:c6:d1:12:71:d3:a9:f4:f7:c4: 4f:b5:30:a7:84:3f:ed:4e:48:c1:b6:20:8e:03:de: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:E9:BD:79:5C:10:41:A1:E3:E4:9E:F2:53:A2:08:6F:8A:B5:EC X509v3 Authority Key Identifier: keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a6:51:20:c1:ff:b5:17:78:68:e4:24:77:75:83:1c:c2:3b: ba:17:e1:98:a9:42:c8:53:42:0e:e9:93:a0:fd:d5:72:d6:f5: 2e:7d:30:78:91:26:b7:4b:f0:36:ef:70:29:48:f8:89:9b:1b: 21:9f:b5:0e:dc:93:a4:cd:41:fa:9e:19:a5:77:5d:24:7d:91: df:33:f2:52:7a:59:13:41:e9:af:67:4c:96:f7:bc:ed:a0:91: 35:20:6e:21:6a:21:36:77:6a:c4:22:2f:94:ac:e4:dc:80:1c: c0:4b:44:9a:86:c6:b1:02:66:b6:4f:19:56:f7:91:e3:ad:d8: 34:4b:7f:a9:8d:77:b1:ab:3a:b9:f1:cc:44:03:3d:1e:73:bc: 95:1f:00:ae:f9:cd:db:72:75:76:a8:1d:33:b7:16:2f:17:f1: 95:b5:1e:6f:03:6a:61:57:23:7d:06:ec:41:de:8b:c4:a2:e9: d1:4c:ee:b3:a2:83:57:0f:90:1d:95:d9:6e:3a:b3:0e:24:d2: a8:b9:c8:13:6f:7b:a2:44:06:d5:c8:34:55:6a:fa:6e:c4:ba: 8a:97:48:27:8e:df:38:e1:92:c9:b2:81:71:a3:89:9a:5d:30: aa:5d:87:54:e7:72:f5:23:71:a1:84:3b:f8:09:84:22:04:d5: f0:1f:00:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoQjU1NDlGNjE4MUZGQTdBRjI1RDhEMjNBNjY3MzA1NERD NDU2NkMwQzAeFw0yNTA4MjMwODA5MDZaFw0yNTA4MzAwODA5MDZaMBgxFjAUBgNV BAMTDTY4YTk3NzIyLWJhZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuRxQhqFW5Ql555kRFFQrCggNwAYgmmqIuntzdjDTtlVxCgUoBZXsNz7951/lk qBlTSNNIIll7XqDEt0U3d6INUGvV6NmuilPn3ZeRgissnlKT4cKFztw0f/Dvk/jk Sc3BIm1yJBl4uvyPYO61clS/ibj5GFrMwk1cr0jbK/IXOEuA8wg9mZW43O/cmjJ8 U146xZbFzomhkaIW59TjoiLSIWUf58bGXlSSiOBTbHrLqW4GU6PyKrIdWqm+ZhNy 9EYXso6AKk13CLHnDHj82ibhL6sWNP8JiuHFO05+GjrFkogbjHn8r8bREnHTqfT3 xE+1MKeEP+1OSMG2II4D3okLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvoTpvXlc EEGh4+Se8lOiCG+KtewwHwYDVR0jBBgwFoAUtVSfYYH/p68l2NI6ZnMFTcRWbAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzE5OEVFNTNFNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFZTZllZSF9wNjhsMk5JNlpuTUZUY1JXYkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzE5OEVFNTNFNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4 bDJOSTZabk1GVGNSV2JBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWmUSDB/7UXeGjkJHd1gxzCO7oX4ZipQshTQg7pk6D91XLW9S59MHiR JrdL8DbvcClI+ImbGyGftQ7ck6TNQfqeGaV3XSR9kd8z8lJ6WRNB6a9nTJb3vO2g kTUgbiFqITZ3asQiL5Ss5NyAHMBLRJqGxrECZrZPGVb3keOt2DRLf6mNd7GrOrnx zEQDPR5zvJUfAK75zdtydXaoHTO3Fi8X8ZW1Hm8DamFXI30G7EHei8Si6dFM7rOi g1cPkB2V2W46sw4k0qi5yBNve6JEBtXINFVq+m7EuoqXSCeO3zjhksmygXGjiZpd MKpdh1TncvUjcaGEO/gJhCIE1fAfAJA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:54 2025 by rpki-client