$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: lEdfu/6tVh6KFRbKzqBf6xjYM2MvysiEBYoeMVm3AuE= Subject key identifier: 6C:D3:CC:66:F8:4E:EB:6D:AB:4E:8B:AF:62:20:BF:6A:CB:9F:44:19 Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: A2 Signing time: Thu 03 Jul 2025 06:25:31 +0000 Manifest this update: Thu 03 Jul 2025 06:25:30 +0000 Manifest next update: Thu 10 Jul 2025 06:25:30 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: c0Y37tOqU6sR1jqZaRWYmVrP3TqmCX3zC0EYBCivdfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Jul 3 06:25:30 2025 GMT Not After : Jul 10 06:25:30 2025 GMT Subject: CN=6866225b-7ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:1f:8d:f5:02:6a:12:3f:b4:ed:f5:47:2d: 02:09:d7:f3:95:61:e5:c7:ed:54:bb:23:1f:be:1f: 8a:95:73:ec:44:f0:32:cd:6d:87:c3:27:0e:37:0d: 48:16:18:7e:3b:54:86:b4:9c:d5:99:b5:71:04:4b: bf:e8:15:04:d8:b4:d4:fd:3d:1b:52:15:a5:df:1c: cb:9e:14:5f:c2:3a:52:4a:04:f6:d1:d8:36:89:6b: b1:df:82:46:4c:bb:f1:97:b4:d1:48:23:43:d2:e8: 7f:0e:dd:f0:d7:7c:3d:d7:e4:0d:44:b6:c0:ee:20: 15:67:e6:6b:0c:7b:05:4b:ee:c9:43:a2:82:d9:47: d2:d4:4f:9c:de:5c:78:66:de:c1:11:54:9a:68:31: e7:9a:9b:88:9e:c6:15:88:16:e9:c7:79:52:b1:a5: cc:8f:e0:b1:74:9a:7c:39:9d:e1:7a:67:90:c6:b8: 00:b1:47:da:b6:d0:af:30:cb:3f:4c:73:66:fa:97: 81:b5:3f:e2:e4:c4:c4:eb:84:28:27:2a:e5:30:e5: c4:aa:e4:bc:f6:2b:74:4e:86:1a:bd:6b:d0:c9:c0: 7a:57:b3:42:49:36:e0:0a:39:fd:0e:33:42:3c:11: 47:7a:3b:60:71:2e:50:7e:5f:25:7c:02:97:0b:8b: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D3:CC:66:F8:4E:EB:6D:AB:4E:8B:AF:62:20:BF:6A:CB:9F:44:19 X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:6e:b6:7d:94:e6:00:f1:9c:e7:b6:ab:1a:7a:c5:e1:57: e5:dd:af:5e:4f:43:e8:99:5b:d1:3c:a9:0b:a9:2d:f8:73:35: 97:54:c5:6c:e2:49:ae:7e:32:8b:6f:91:66:ae:87:a3:d8:e2: ab:e5:1d:39:37:a6:c4:44:e3:ad:8a:ca:7a:bf:e8:b4:18:61: c1:9c:ed:3d:d0:69:19:20:76:0e:84:c9:70:78:9b:c2:6d:89: 25:69:f3:47:5b:5c:e1:59:bc:82:7c:c9:fb:0c:62:32:d4:0a: 29:69:61:9e:79:4a:2b:16:ce:91:d1:b2:93:7c:53:d1:27:11: 4b:e0:c3:dc:bf:72:91:72:09:ab:b6:9a:54:0c:b1:e6:4d:6a: 17:1c:44:65:1c:75:4f:04:50:3e:39:e2:4b:dd:95:00:16:92: ed:08:ec:a3:64:34:d2:62:97:11:4e:98:c5:72:4a:93:fc:20: a4:ae:ad:44:a6:27:fb:81:fd:ce:4a:cb:06:84:b0:21:20:0a: a2:ab:27:24:02:66:47:7c:ca:d5:1e:ed:e5:92:25:80:d4:7d: 11:00:6a:72:5f:b9:31:03:23:6e:60:36:4d:d3:4c:44:d9:85: 45:5c:e6:9b:4c:f7:3e:97:e5:2d:46:91:01:39:c1:c9:b6:20: 85:01:f1:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUwNzAzMDYyNTMwWhcNMjUwNzEwMDYyNTMwWjAYMRYwFAYD VQQDEw02ODY2MjI1Yi03YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BAfjfUCahI/tO31Ry0CCdfzlWHlx+1UuyMfvh+KlXPsRPAyzW2HwycONw1I Fhh+O1SGtJzVmbVxBEu/6BUE2LTU/T0bUhWl3xzLnhRfwjpSSgT20dg2iWux34JG TLvxl7TRSCND0uh/Dt3w13w91+QNRLbA7iAVZ+ZrDHsFS+7JQ6KC2UfS1E+c3lx4 Zt7BEVSaaDHnmpuInsYViBbpx3lSsaXMj+CxdJp8OZ3hemeQxrgAsUfattCvMMs/ THNm+peBtT/i5MTE64QoJyrlMOXEquS89it0ToYavWvQycB6V7NCSTbgCjn9DjNC PBFHejtgcS5Qfl8lfAKXC4sKhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzTzGb4 Tuttq06Lr2Igv2rLn0QZMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACoW62fZTmAPGc57arGnrF4Vfl3a9eT0PomVvRPKkLqS34czWXVMVs 4kmufjKLb5Fmroej2OKr5R05N6bEROOtisp6v+i0GGHBnO090GkZIHYOhMlweJvC bYklafNHW1zhWbyCfMn7DGIy1AopaWGeeUorFs6R0bKTfFPRJxFL4MPcv3KRcgmr tppUDLHmTWoXHERlHHVPBFA+OeJL3ZUAFpLtCOyjZDTSYpcRTpjFckqT/CCkrq1E pif7gf3OSssGhLAhIAqiqyckAmZHfMrVHu3lkiWA1H0RAGpyX7kxAyNuYDZN00xE 2YVFXOabTPc+l+UtRpEBOcHJtiCFAfE8 -----END CERTIFICATE-----Generated at Thu Jul 3 15:06:28 2025 by rpki-client