$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: gTAaRgtG8hwQcI+BmJMG6aR6h1ZPuQ3YvkfPNzlu+S4= Subject key identifier: DB:50:16:5B:DB:CE:2B:6A:89:3C:69:F2:A9:DE:97:27:61:98:B5:12 Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 64 Signing time: Sat 23 Aug 2025 07:18:10 +0000 Manifest this update: Sat 23 Aug 2025 07:18:10 +0000 Manifest next update: Sat 30 Aug 2025 07:18:10 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: ps23skFSKMktklfhFOV4a5cpI5zYBMnJ7hQbmDeYa2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: Aug 23 07:18:10 2025 GMT Not After : Aug 30 07:18:10 2025 GMT Subject: CN=68a96b32-d67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:0f:b1:a7:90:99:30:3f:73:58:10:0f:ce: ee:fa:6b:c3:6d:96:1e:f4:06:16:89:ac:48:e6:5a: af:fa:ef:e7:4a:96:ca:ba:f1:99:a7:96:dd:75:02: 72:d0:87:e8:b3:ff:fa:54:4e:c3:d4:86:cc:ee:ed: 9a:38:13:dc:96:7e:fe:75:37:c4:a0:47:a8:b7:28: 6b:a1:9f:5b:52:63:c4:81:bf:cc:ad:4e:85:fd:07: 11:b3:81:05:96:4d:b8:2d:24:66:72:d9:06:19:55: 55:be:1e:f3:2d:6e:e3:20:da:c1:13:2d:f1:f6:d4: 29:9a:d2:b3:0c:a7:62:8e:9e:1d:45:a8:d3:71:27: 09:d7:27:d5:be:a7:6d:2c:e7:c6:64:a4:e5:6e:cd: 7c:44:1d:c9:40:4e:33:53:ce:1b:d5:38:00:b6:3f: aa:ae:cf:60:29:ba:2c:fa:b3:a2:c1:b2:33:ad:36: ed:a0:0f:83:b6:86:63:68:da:d3:33:62:5a:12:47: 07:93:b7:0a:15:1b:69:63:7b:04:25:28:dc:ed:36: 2d:61:9f:9a:16:30:87:9c:e9:6a:3c:9d:fc:87:cb: 36:d9:96:a3:8a:d6:a5:a6:61:eb:f2:90:1d:2a:c8: 3e:9f:df:f9:4a:52:e6:7a:5c:06:02:0e:78:9c:50: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:50:16:5B:DB:CE:2B:6A:89:3C:69:F2:A9:DE:97:27:61:98:B5:12 X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:bb:aa:c5:b8:54:66:d5:0a:6f:87:9d:70:f1:77:98:8d:64: fc:83:fa:9b:61:df:6e:c7:ba:b8:1a:6d:6e:44:e3:3e:79:b7: 64:ec:3f:57:41:a3:b2:f0:5e:e1:72:7a:9f:82:25:53:90:d9: f9:5f:91:78:a3:41:7f:d1:0e:d6:d7:19:2e:be:d8:84:b2:58: a0:34:5a:8e:33:b5:e0:f0:45:ba:d1:db:c2:c8:ee:27:3a:85: f8:2b:dc:8e:2b:9f:08:13:46:30:2f:8e:d9:02:4c:a4:33:77: e4:21:4a:29:55:5a:8e:7a:74:98:82:c6:ee:8f:f2:3c:83:53: fc:88:64:a1:6a:f6:88:59:fb:c9:0c:ef:41:81:f4:7f:08:2f: 8d:08:15:89:8a:40:dd:8b:11:19:4a:a3:64:4a:2b:3b:7c:d0: b8:6a:21:1c:bd:47:4b:a5:c4:23:75:d1:21:cc:59:f5:a6:4b: ae:0a:55:87:d0:d1:5c:db:56:72:91:df:f6:83:05:2c:20:de: b9:4b:d2:51:08:3a:b2:f2:46:12:4e:7c:3f:58:d0:fb:f0:31: fc:1f:37:ee:e3:1d:88:1e:bd:24:d3:88:b6:1b:19:fe:bb:c5: f3:1b:1e:ab:6e:a6:2e:db:4a:bd:89:b6:a9:e8:46:10:3e:6e: 41:11:84:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA4MjMwNzE4MTBaFw0yNTA4MzAwNzE4MTBaMBgxFjAUBgNV BAMTDTY4YTk2YjMyLWQ2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/2Q+xp5CZMD9zWBAPzu76a8Ntlh70BhaJrEjmWq/67+dKlsq68Zmnlt11AnLQ h+iz//pUTsPUhszu7Zo4E9yWfv51N8SgR6i3KGuhn1tSY8SBv8ytToX9BxGzgQWW TbgtJGZy2QYZVVW+HvMtbuMg2sETLfH21Cma0rMMp2KOnh1FqNNxJwnXJ9W+p20s 58ZkpOVuzXxEHclATjNTzhvVOAC2P6quz2Apuiz6s6LBsjOtNu2gD4O2hmNo2tMz YloSRweTtwoVG2ljewQlKNztNi1hn5oWMIec6Wo8nfyHyzbZlqOK1qWmYevykB0q yD6f3/lKUuZ6XAYCDnicUI0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU21AWW9vO K2qJPGnyqd6XJ2GYtRIwHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIK7qsW4VGbVCm+HnXDxd5iNZPyD+pth327HurgabW5E4z55t2TsP1dB o7LwXuFyep+CJVOQ2flfkXijQX/RDtbXGS6+2ISyWKA0Wo4zteDwRbrR28LI7ic6 hfgr3I4rnwgTRjAvjtkCTKQzd+QhSilVWo56dJiCxu6P8jyDU/yIZKFq9ohZ+8kM 70GB9H8IL40IFYmKQN2LERlKo2RKKzt80LhqIRy9R0ulxCN10SHMWfWmS64KVYfQ 0VzbVnKR3/aDBSwg3rlL0lEIOrLyRhJOfD9Y0PvwMfwfN+7jHYgevSTTiLYbGf67 xfMbHqtupi7bSr2JtqnoRhA+bkERhEc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:47 2025 by rpki-client