$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: dQCbdEg0rd1PvctgwjeZ0mzZ9S7OXlOSmuMm6QktXd8= Subject key identifier: 83:FB:A2:EC:91:D8:6E:3B:25:1C:8C:E2:18:DA:68:ED:90:22:45:63 Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 4A Signing time: Thu 03 Jul 2025 07:37:18 +0000 Manifest this update: Thu 03 Jul 2025 07:37:18 +0000 Manifest next update: Thu 10 Jul 2025 07:37:18 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: hgvnWtXxQaEzy8FQfRek9QEqyHOaeUwn9lxPAmt87vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: Jul 3 07:37:18 2025 GMT Not After : Jul 10 07:37:18 2025 GMT Subject: CN=6866332e-e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:ce:b6:60:68:4e:f5:11:55:ce:b7:86:e9: de:e9:b7:19:e7:90:fb:14:a1:8e:f0:76:ca:dc:9a: 3d:1e:49:5f:9d:ed:11:6f:87:35:8a:dc:a4:3e:1c: 86:34:ac:3d:4b:bf:f6:ac:95:ee:8d:1a:57:1f:4c: 74:4d:17:b2:82:10:a7:01:5b:1c:33:8a:1a:09:1d: 8f:1a:24:c9:1a:8a:e7:57:26:b9:b6:db:99:07:9d: 11:b3:37:ae:3b:1c:05:0e:46:d0:17:e2:d2:63:6c: c2:17:25:fb:5d:82:dc:4e:39:9e:d0:7e:5b:a9:3e: c9:ba:5c:e5:44:94:b8:d8:ab:4d:9b:de:0c:72:78: d1:eb:15:fe:2b:8b:71:1c:b6:6b:b3:8c:c3:d7:34: 8d:09:7e:28:52:16:14:e3:4f:6a:0f:ce:5c:57:91: c4:cc:fd:3d:12:45:b2:76:b3:eb:30:9b:a3:1e:74: ea:02:b1:17:84:bf:26:8e:53:46:29:f0:fa:47:bd: 99:41:4f:c6:b3:a0:00:e7:87:48:35:fb:b8:ad:63: e8:be:c1:b2:dc:12:4e:22:81:97:18:fd:1d:ce:ac: 79:04:10:45:cb:49:e9:be:4f:e2:30:e4:89:44:99: 4a:3e:60:5e:33:b9:f8:1b:da:c8:93:74:75:bd:99: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:A2:EC:91:D8:6E:3B:25:1C:8C:E2:18:DA:68:ED:90:22:45:63 X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:48:12:b1:67:17:84:66:20:d9:c5:9a:f7:88:d4:81:79:f2: a9:80:20:ae:09:66:6e:20:13:e5:5e:d8:1e:48:31:81:57:b8: c2:ed:af:4f:c3:c1:97:83:a9:27:e5:69:21:9d:0d:57:e2:84: ae:3c:e0:fa:9e:a3:07:57:f4:5c:f7:1c:ab:6f:dd:0e:9a:e5: 5f:e0:40:97:bc:0d:b5:a8:c0:17:b6:17:18:db:1c:37:d3:a4: 7f:fc:19:a6:d0:63:ff:f8:28:d2:83:18:f8:40:da:6d:d2:de: dd:71:99:2a:62:34:51:0c:74:57:fd:07:00:e8:e3:46:87:aa: 31:c8:18:14:c1:00:83:b4:86:48:04:e5:83:25:04:55:bf:c1: 93:46:6b:32:15:03:68:23:0a:ed:cd:de:f5:a1:77:e9:f8:57: e1:9d:0f:22:3b:a3:77:53:95:c8:e4:fc:ff:e8:d6:8b:08:6c: e9:f9:88:6a:12:0b:fc:55:61:62:73:82:f0:65:6f:e4:89:2a: f4:63:f6:9e:9e:59:0c:fe:16:a4:e2:f1:e5:00:9d:15:ce:c3: 1b:f7:bf:b9:3d:9e:c0:16:68:46:6a:f3:cc:80:2e:fc:4b:c4: ee:a6:1a:3f:e4:5f:67:75:1a:7d:7d:8a:a9:ec:75:32:29:b0: aa:4a:b4:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA3MDMwNzM3MThaFw0yNTA3MTAwNzM3MThaMBgxFjAUBgNV BAMTDTY4NjYzMzJlLWU1ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5zs62YGhO9RFVzreG6d7ptxnnkPsUoY7wdsrcmj0eSV+d7RFvhzWK3KQ+HIY0 rD1Lv/asle6NGlcfTHRNF7KCEKcBWxwzihoJHY8aJMkaiudXJrm225kHnRGzN647 HAUORtAX4tJjbMIXJftdgtxOOZ7QflupPsm6XOVElLjYq02b3gxyeNHrFf4ri3Ec tmuzjMPXNI0JfihSFhTjT2oPzlxXkcTM/T0SRbJ2s+swm6MedOoCsReEvyaOU0Yp 8PpHvZlBT8azoADnh0g1+7itY+i+wbLcEk4igZcY/R3OrHkEEEXLSem+T+Iw5IlE mUo+YF4zufgb2siTdHW9mXdDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg/ui7JHY bjslHIziGNpo7ZAiRWMwHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1IErFnF4RmINnFmveI1IF58qmAIK4JZm4gE+Ve2B5IMYFXuMLtr0/D wZeDqSflaSGdDVfihK484PqeowdX9Fz3HKtv3Q6a5V/gQJe8DbWowBe2FxjbHDfT pH/8GabQY//4KNKDGPhA2m3S3t1xmSpiNFEMdFf9BwDo40aHqjHIGBTBAIO0hkgE 5YMlBFW/wZNGazIVA2gjCu3N3vWhd+n4V+GdDyI7o3dTlcjk/P/o1osIbOn5iGoS C/xVYWJzgvBlb+SJKvRj9p6eWQz+FqTi8eUAnRXOwxv3v7k9nsAWaEZq88yALvxL xO6mGj/kX2d1Gn19iqnsdTIpsKpKtHE= -----END CERTIFICATE-----Generated at Thu Jul 3 11:43:08 2025 by rpki-client