$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json) Hash identifier: iZQphOcVA4EMgRds/LgpYuwy1C7m4bdcPrC4vTVCS44= Subject key identifier: AE:8B:24:A3:6E:6F:95:92:57:4A:BB:61:D0:4B:FB:7F:1D:57:12:94 Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft Manifest number: 0197 Signing time: Wed 02 Jul 2025 20:30:18 +0000 Manifest this update: Wed 02 Jul 2025 20:30:18 +0000 Manifest next update: Wed 09 Jul 2025 20:30:18 +0000 Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: uwXPxVA+jFOmLgjAo4fM/KPp1Wx6GIC7Z23pr8QZujk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Validity Not Before: Jul 2 20:30:18 2025 GMT Not After : Jul 9 20:30:18 2025 GMT Subject: CN=686596da-ef93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2c:39:5b:8f:35:e7:37:9c:93:00:76:3b:f0: f9:61:32:60:1f:c3:3a:d7:a4:4d:a0:f7:e8:96:d5: 19:33:34:75:c9:60:51:4d:bc:8a:b7:27:ea:30:8c: f6:b5:2c:c6:b2:27:43:f9:93:33:b5:3f:2b:a4:37: 4e:37:1b:c3:6c:ef:b2:4f:a8:4a:f3:14:e5:ec:6e: 2a:f2:98:23:72:e1:8a:7e:b9:5f:69:db:05:e3:48: b5:80:fd:84:e1:1c:4c:08:f2:ef:fb:14:67:44:02: e1:e9:6f:6e:81:9c:1d:60:1b:68:31:36:0b:35:10: 2c:c6:81:87:d9:3d:ad:9b:e9:1a:de:2a:f3:78:ff: f9:28:e2:51:67:80:80:92:3b:0c:b2:0d:b7:ba:78: 08:e8:52:4c:d5:df:d7:47:73:3f:e5:4b:e9:01:a9: 6e:9d:e4:47:13:0d:72:09:1b:eb:55:69:3f:7c:06: 23:70:19:49:4b:27:37:27:c7:a0:d3:85:c2:ca:d6: 4d:d2:5d:11:67:1e:41:a2:1a:8c:10:43:76:a8:5a: c7:2d:a1:05:ec:b8:b5:d7:92:93:e5:02:ea:87:9d: 47:9b:3e:8f:12:4a:7d:f4:7c:5b:72:c3:bd:e3:46: 90:d7:6a:99:ee:9e:7b:e8:d3:60:f2:61:f5:fe:3e: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:24:A3:6E:6F:95:92:57:4A:BB:61:D0:4B:FB:7F:1D:57:12:94 X509v3 Authority Key Identifier: keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:41:31:49:ca:22:14:5e:b7:96:81:42:e0:0b:03:62:a0:21: 28:6c:06:64:47:ea:b0:3f:9c:0e:4a:74:3e:99:13:07:4e:e7: 34:58:29:0e:8f:6f:ff:d0:ad:1f:f2:cc:38:93:40:e2:70:e3: b2:0b:63:9f:06:be:43:5b:af:29:ce:75:13:27:18:a4:8b:37: 04:25:31:d6:ac:02:5b:20:4e:82:3c:36:4b:19:a9:5a:c2:c5: 3d:5f:c6:32:02:2b:13:9f:ab:20:f7:79:f5:5c:81:c4:53:98: 42:6d:71:f4:a5:66:73:ec:e2:0f:7d:08:53:b5:2b:4a:53:e2: 13:3c:03:7b:11:22:6b:fe:ea:9d:f6:d1:e1:cb:92:15:77:67: fc:fd:fa:a6:56:94:01:66:cc:a1:2b:d2:95:b5:9e:b3:c0:40: cf:d7:9a:00:f6:aa:e8:3b:70:bb:8f:50:39:46:3b:8f:51:3f: 8e:a5:e7:84:c0:4c:eb:67:56:c9:6c:a8:5d:1f:b1:c5:cf:86: 06:40:35:21:4b:f8:1f:ec:f9:4b:5d:2f:80:01:5e:44:ff:10: d9:45:db:f1:87:45:73:a8:38:37:f5:16:a0:9d:6d:f2:cc:d2: 07:bd:c6:58:79:7d:f0:eb:c0:cd:96:a8:32:6e:48:5f:4d:59: 1f:30:3d:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0 MEZDMDUxQjIwHhcNMjUwNzAyMjAzMDE4WhcNMjUwNzA5MjAzMDE4WjAYMRYwFAYD VQQDEw02ODY1OTZkYS1lZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyw5W4815zeckwB2O/D5YTJgH8M616RNoPfoltUZMzR1yWBRTbyKtyfqMIz2 tSzGsidD+ZMztT8rpDdONxvDbO+yT6hK8xTl7G4q8pgjcuGKfrlfadsF40i1gP2E 4RxMCPLv+xRnRALh6W9ugZwdYBtoMTYLNRAsxoGH2T2tm+ka3irzeP/5KOJRZ4CA kjsMsg23ungI6FJM1d/XR3M/5UvpAaluneRHEw1yCRvrVWk/fAYjcBlJSyc3J8eg 04XCytZN0l0RZx5BohqMEEN2qFrHLaEF7Li115KT5QLqh51Hmz6PEkp99HxbcsO9 40aQ12qZ7p576NNg8mH1/j4iHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6LJKNu b5WSV0q7YdBL+38dVxKUMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiQTFJyiIUXreWgULgCwNioCEobAZkR+qwP5wOSnQ+mRMHTuc0WCkO j2//0K0f8sw4k0DicOOyC2OfBr5DW68pznUTJxikizcEJTHWrAJbIE6CPDZLGala wsU9X8YyAisTn6sg93n1XIHEU5hCbXH0pWZz7OIPfQhTtStKU+ITPAN7ESJr/uqd 9tHhy5IVd2f8/fqmVpQBZsyhK9KVtZ6zwEDP15oA9qroO3C7j1A5RjuPUT+OpeeE wEzrZ1bJbKhdH7HFz4YGQDUhS/gf7PlLXS+AAV5E/xDZRdvxh0VzqDg39RagnW3y zNIHvcZYeX3w68DNlqgybkhfTVkfMD2r -----END CERTIFICATE-----Generated at Fri Jul 4 18:02:15 2025 by rpki-client