$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: xHpZhS6bDL6L5eMOMarCDcN+oyVw1t7NzWrFWs6zinE= Subject key identifier: 6E:41:DD:60:D5:2D:04:C0:DE:85:AF:C6:38:BB:36:88:17:6F:F9:A7 Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 21B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 2199 Signing time: Wed 02 Jul 2025 16:01:15 +0000 Manifest this update: Wed 02 Jul 2025 16:01:14 +0000 Manifest next update: Wed 09 Jul 2025 16:01:14 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: QM4POcl8BLl0SsSWq9+mCkvg+xpcOR2aHpj4OBHr0p8=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: xq1A/DwEya72JUauXcCDXoZyXlE8M2olRWGCrYUUkIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8626 (0x21b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: Jul 2 16:01:14 2025 GMT Not After : Jul 9 16:01:14 2025 GMT Subject: CN=686557cb-416d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:23:2b:68:3e:db:00:ab:42:b8:63:77:31: d1:bb:05:0a:10:72:55:d4:9b:5c:1a:90:62:6d:6e: 9d:50:8e:9a:a4:37:75:99:32:17:a1:87:d7:ad:53: 32:1f:1e:a5:cd:c9:2c:77:1a:4a:20:91:e4:c1:4b: 08:8d:02:be:46:87:41:b3:3f:3e:61:d6:11:9a:94: d4:be:c5:ed:dd:21:59:6c:a4:f8:5e:34:f7:09:15: 2c:d4:f9:48:05:4c:1d:31:2b:71:12:76:97:5a:fd: eb:1f:29:38:6e:eb:c0:95:ba:59:d3:fa:98:3e:6d: c5:f6:39:49:64:6c:1a:48:9b:dd:35:eb:f6:65:40: 9f:f4:b5:47:a7:7f:65:db:35:03:5a:bf:57:e3:50: c9:60:7d:e0:55:97:90:55:73:b9:c7:35:a5:38:5e: 56:97:80:07:d2:d4:a4:d2:40:42:73:c7:2d:6f:d1: 50:86:83:27:71:a6:44:35:58:80:a4:67:db:65:17: ff:32:46:e7:b7:33:4e:3b:20:60:74:6e:04:eb:7b: c0:95:af:91:1c:1d:4d:09:14:71:bb:13:90:68:33: 0d:1f:51:73:af:76:2f:bb:4c:90:68:4f:12:25:73: 03:4a:52:ec:38:4c:c8:17:9d:f9:d5:e8:ff:fe:61: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:41:DD:60:D5:2D:04:C0:DE:85:AF:C6:38:BB:36:88:17:6F:F9:A7 X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:07:67:1f:7b:7e:78:75:2e:6f:c5:c3:27:dc:37:e8:13:d7: 94:22:37:49:50:e1:ad:d1:f1:0f:3f:c5:15:fe:75:0e:66:f4: 07:52:2a:4c:cd:24:60:26:dc:d2:f3:41:7d:96:d2:5e:61:e3: 2b:07:7a:cc:97:a6:2e:aa:36:d5:b1:5e:b3:c9:fd:2b:42:cc: 80:0e:2d:7b:c1:70:e1:44:ae:dd:5e:79:3b:43:8e:e9:bc:19: 22:f6:63:8c:ff:ad:13:22:d6:45:23:0a:09:35:09:fb:a5:cf: 1c:52:35:dd:82:0c:cc:d0:c4:1f:ca:47:07:7a:d9:25:3d:96: 55:b6:b6:cd:6a:63:cb:3e:e8:46:80:19:81:5f:bf:40:8b:b9: b1:c6:81:2f:e3:2e:59:29:5d:e6:56:e7:b0:54:cc:f9:10:26: df:c7:4b:94:dd:8b:2e:b6:f6:1f:d9:14:01:6a:f7:8f:cd:95: e6:da:08:26:fb:69:2b:7b:48:fb:07:01:ea:a9:30:ac:2a:7b: 82:61:db:dc:5c:d1:98:1b:5a:bc:4e:19:f9:17:b3:8b:d1:69: 0f:f0:c4:79:34:31:70:bd:ea:b2:72:64:03:d6:ad:1f:4b:a2: 8a:60:ca:e9:38:f8:02:8f:66:dd:e8:13:45:8a:2f:6a:e9:ae: 9d:7b:e6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjUwNzAyMTYwMTE0WhcNMjUwNzA5MTYwMTE0WjAYMRYwFAYD VQQDEw02ODY1NTdjYi00MTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uwjK2g+2wCrQrhjdzHRuwUKEHJV1JtcGpBibW6dUI6apDd1mTIXoYfXrVMy Hx6lzcksdxpKIJHkwUsIjQK+RodBsz8+YdYRmpTUvsXt3SFZbKT4XjT3CRUs1PlI BUwdMStxEnaXWv3rHyk4buvAlbpZ0/qYPm3F9jlJZGwaSJvdNev2ZUCf9LVHp39l 2zUDWr9X41DJYH3gVZeQVXO5xzWlOF5Wl4AH0tSk0kBCc8ctb9FQhoMncaZENViA pGfbZRf/MkbntzNOOyBgdG4E63vAla+RHB1NCRRxuxOQaDMNH1Fzr3Yvu0yQaE8S JXMDSlLsOEzIF5351ej//mGgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5B3WDV LQTA3oWvxji7NogXb/mnMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxB2cfe354dS5vxcMn3DfoE9eUIjdJUOGt0fEPP8UV/nUOZvQHUipM zSRgJtzS80F9ltJeYeMrB3rMl6YuqjbVsV6zyf0rQsyADi17wXDhRK7dXnk7Q47p vBki9mOM/60TItZFIwoJNQn7pc8cUjXdggzM0MQfykcHetklPZZVtrbNamPLPuhG gBmBX79Ai7mxxoEv4y5ZKV3mVuewVMz5ECbfx0uU3YsutvYf2RQBavePzZXm2ggm +2kre0j7BwHqqTCsKnuCYdvcXNGYG1q8Thn5F7OL0WkP8MR5NDFwveqycmQD1q0f S6KKYMrpOPgCj2bd6BNFii9q6a6de+b2 -----END CERTIFICATE-----Generated at Thu Jul 3 21:10:31 2025 by rpki-client