$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: vcoNDD9xa+XEVguPozO45jPXZv/3BNjdebkGkqQ/2r8= Subject key identifier: F2:57:0D:CE:1E:61:10:8A:0D:55:46:67:9B:FC:EB:FA:EC:46:97:E8 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0F24 Signing time: Mon 30 Jun 2025 21:37:02 +0000 Manifest this update: Mon 30 Jun 2025 21:37:01 +0000 Manifest next update: Mon 07 Jul 2025 21:37:01 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: FZ3GMYw63BL2FmwKWyZik23a5jHkJlBRV4Lmly3hQz8=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Jun 30 21:37:01 2025 GMT Not After : Jul 7 21:37:01 2025 GMT Subject: CN=6863037d-2440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:87:96:d2:44:d2:b3:04:65:53:84:a6:5f: 30:34:8c:8f:55:e7:47:c2:5e:f7:c9:cf:97:a9:86: 9c:0d:0f:73:2b:9d:45:12:bf:d1:d0:d1:9f:db:e0: b1:e2:87:44:cd:26:b5:04:2f:84:cc:2f:c7:2a:48: 3f:36:c9:d3:b6:3e:d8:65:a9:0f:5a:f2:35:6b:83: c5:db:cf:11:b7:c0:5a:53:b4:46:72:4e:de:a4:35: 3c:0a:9a:35:36:81:d6:a8:e4:2a:61:b4:44:b9:87: 8c:09:85:28:86:74:c6:b9:1c:c0:5c:06:dc:c7:75: f0:01:cf:60:6c:ad:aa:3c:d1:15:e1:14:7b:99:f8: 8c:7a:d1:97:76:44:5a:f2:8d:bd:75:8f:ef:5c:13: 61:53:73:6f:52:53:26:f5:28:56:16:83:b0:5f:a9: 5a:8f:78:d5:6c:77:a5:6d:b2:3c:09:06:e7:8f:32: 3d:ec:6e:10:a2:9e:83:c2:37:e7:aa:3c:d1:4f:10: b5:ca:9f:f0:61:54:6a:8f:25:74:c1:98:af:11:68: 1a:e0:b6:ac:9d:40:3d:aa:fe:22:18:a1:84:9e:cf: f6:24:b5:f5:62:24:dc:5d:49:68:c2:5c:6e:a4:43: 84:29:31:cb:bb:f6:ba:58:54:82:3e:50:88:16:2b: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:0D:CE:1E:61:10:8A:0D:55:46:67:9B:FC:EB:FA:EC:46:97:E8 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:35:92:10:35:7b:51:88:5e:10:9c:93:c8:7c:24:64:8f:59: 9d:65:33:f9:59:b9:a0:87:5a:42:f4:db:9f:b4:69:99:1b:4b: d0:8e:f3:3a:0a:48:50:b4:44:9f:49:e3:2c:0a:70:af:21:50: 27:33:73:d0:1f:f8:b7:b7:61:13:07:b9:d8:63:47:3e:cf:90: 06:21:2f:49:fc:63:1f:29:50:5f:e2:a9:11:8d:86:32:69:66: cf:99:21:4a:55:fe:db:4b:3b:4f:db:60:54:e3:03:1e:e4:c7: d4:64:a8:31:22:be:10:7f:36:c5:09:e2:5f:9c:76:d4:d2:f2: c3:f0:3d:ad:ca:1f:4c:5d:f1:23:f8:44:dd:e4:ac:83:c1:15: d5:19:e5:22:7b:c9:d5:f5:c3:55:b4:a6:fb:e4:4a:49:80:2e: cd:d6:ee:43:c6:13:e4:3a:e3:ba:da:10:c8:33:00:2b:0c:8e: f4:77:2d:15:c2:44:16:86:b7:b5:4a:5c:e1:e1:b6:76:aa:ac: 79:3b:67:85:c7:b5:62:e5:a9:b9:79:0f:2f:36:9e:67:52:5e: 78:9f:20:7b:ad:67:0f:d5:5a:48:82:e0:32:af:f0:3e:4a:6f: f0:6e:5a:62:6c:7f:7c:7e:72:3b:2e:66:50:14:75:6c:74:50: 05:24:49:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUwNjMwMjEzNzAxWhcNMjUwNzA3MjEzNzAxWjAYMRYwFAYD VQQDEw02ODYzMDM3ZC0yNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy+HltJE0rMEZVOEpl8wNIyPVedHwl73yc+XqYacDQ9zK51FEr/R0NGf2+Cx 4odEzSa1BC+EzC/HKkg/NsnTtj7YZakPWvI1a4PF288Rt8BaU7RGck7epDU8Cpo1 NoHWqOQqYbREuYeMCYUohnTGuRzAXAbcx3XwAc9gbK2qPNEV4RR7mfiMetGXdkRa 8o29dY/vXBNhU3NvUlMm9ShWFoOwX6laj3jVbHelbbI8CQbnjzI97G4Qop6Dwjfn qjzRTxC1yp/wYVRqjyV0wZivEWga4LasnUA9qv4iGKGEns/2JLX1YiTcXUlowlxu pEOEKTHLu/a6WFSCPlCIFiv0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJXDc4e YRCKDVVGZ5v86/rsRpfoMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChNZIQNXtRiF4QnJPIfCRkj1mdZTP5Wbmgh1pC9NuftGmZG0vQjvM6 CkhQtESfSeMsCnCvIVAnM3PQH/i3t2ETB7nYY0c+z5AGIS9J/GMfKVBf4qkRjYYy aWbPmSFKVf7bSztP22BU4wMe5MfUZKgxIr4QfzbFCeJfnHbU0vLD8D2tyh9MXfEj +ETd5KyDwRXVGeUie8nV9cNVtKb75EpJgC7N1u5DxhPkOuO62hDIMwArDI70dy0V wkQWhre1Slzh4bZ2qqx5O2eFx7Vi5am5eQ8vNp5nUl54nyB7rWcP1VpIguAyr/A+ Sm/wblpibH98fnI7LmZQFHVsdFAFJElU -----END CERTIFICATE-----Generated at Tue Jul 1 13:18:10 2025 by rpki-client