$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: LRzt/zH23kvPnKaSPcG6+BxAWx5F5Wy2dyhqg2amcJo= Subject key identifier: F2:8C:CE:F1:19:48:BB:42:EA:11:39:D5:63:BB:A8:65:BF:3B:37:D2 Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 40 Signing time: Sat 23 Aug 2025 07:42:08 +0000 Manifest this update: Sat 23 Aug 2025 07:42:07 +0000 Manifest next update: Sat 30 Aug 2025 07:42:07 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: 7RErkoYCtpqfIiORvggtQNZRPXARuxHMgmALMvskMT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Aug 23 07:42:07 2025 GMT Not After : Aug 30 07:42:07 2025 GMT Subject: CN=68a970cf-1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:7d:e1:05:80:f3:1e:bd:86:71:c8:cb:c7: 00:a8:e5:0c:ca:3c:b2:38:a7:c2:35:b8:a5:31:ab: 50:ba:b7:4d:9f:d0:b8:f3:37:ca:15:06:f5:9b:cc: a0:07:64:8f:13:96:75:6b:21:3e:19:e6:65:0d:2b: 87:0c:b0:59:a1:5e:ff:ae:90:4b:8a:69:bc:0d:4f: 1a:45:17:ea:5b:6f:68:25:cd:5c:69:de:4c:89:62: a4:b9:96:07:e9:ce:58:93:aa:14:e7:dd:3f:d6:d1: e6:35:59:31:1e:1f:94:1e:a5:13:05:09:49:91:b0: 94:85:a1:22:30:53:f6:94:38:1c:39:71:1a:96:77: f8:ba:e1:b7:c1:90:21:60:2c:f3:49:e0:de:48:9a: fa:a0:c8:84:cd:14:af:28:6c:c2:d2:63:46:c6:79: 89:b2:8b:4f:6b:9b:bb:5b:82:55:f2:c7:5f:6c:ac: 5b:56:f1:af:09:ff:b3:b3:27:75:de:1e:ed:e3:d1: f5:1a:ec:cf:f4:d6:48:82:33:a3:6d:29:e5:22:fb: 2f:be:51:40:d7:32:e9:a8:7d:7f:4c:a6:51:a2:b6: 60:ea:e6:b0:87:83:d1:41:f9:a8:5d:8e:2d:f6:c3: b7:19:04:eb:ea:8d:06:a1:35:78:50:23:8f:16:2e: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:CE:F1:19:48:BB:42:EA:11:39:D5:63:BB:A8:65:BF:3B:37:D2 X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:b1:cb:02:33:20:72:58:8b:8e:23:8d:27:6a:16:a9:2a: 0a:20:34:3e:3c:fc:a7:b1:86:35:8a:d5:30:c2:cc:d8:50:fd: 1a:6a:d0:49:62:35:07:aa:ea:c6:d2:69:10:87:14:07:92:16: b5:a4:5f:20:37:41:40:dd:b1:78:2d:e9:74:d8:0e:de:46:e7: fc:17:2e:8c:9e:f3:ef:71:67:87:a0:f1:c8:ec:91:9c:ba:34: c7:50:67:2c:a7:e9:a5:10:c7:72:da:32:8f:6e:5e:99:27:b7: d3:d5:34:c7:52:58:b1:eb:7c:3a:0b:e0:10:97:51:5b:e8:6b: 7a:d2:13:f2:5b:a5:6c:a5:d0:e5:6f:fd:8b:b1:d5:fe:5d:59: 0b:14:cd:a0:60:f9:3e:c0:f1:6d:31:0f:f1:e6:22:be:6c:7d: 42:9a:70:4a:6b:b3:af:cc:a5:5e:26:f7:7f:60:11:f7:06:ae: 63:4f:dc:2f:2f:a6:b8:34:85:f6:08:d3:02:70:3e:5d:5f:27: 51:cf:7b:68:d5:24:e0:52:96:55:07:b9:04:61:65:ad:0a:c1: 68:db:53:df:d2:e7:cb:02:e7:a6:2c:26:ed:45:7e:0d:d0:fa: 7a:b4:eb:0d:9a:bb:14:e2:0a:8e:9d:32:c8:f7:9b:ef:c4:23: 95:f9:c7:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTA4MjMwNzQyMDdaFw0yNTA4MzAwNzQyMDdaMBgxFjAUBgNV BAMTDTY4YTk3MGNmLTFkN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4n3hBYDzHr2GccjLxwCo5QzKPLI4p8I1uKUxq1C6t02f0LjzN8oVBvWbzKAH ZI8TlnVrIT4Z5mUNK4cMsFmhXv+ukEuKabwNTxpFF+pbb2glzVxp3kyJYqS5lgfp zliTqhTn3T/W0eY1WTEeH5QepRMFCUmRsJSFoSIwU/aUOBw5cRqWd/i64bfBkCFg LPNJ4N5ImvqgyITNFK8obMLSY0bGeYmyi09rm7tbglXyx19srFtW8a8J/7OzJ3Xe Hu3j0fUa7M/01kiCM6NtKeUi+y++UUDXMumofX9MplGitmDq5rCHg9FB+ahdji32 w7cZBOvqjQahNXhQI48WLpFjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8ozO8RlI u0LqETnVY7uoZb87N9IwHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtmscsCMyByWIuOI40nahapKgogND48/KexhjWK1TDCzNhQ/Rpq0Eli NQeq6sbSaRCHFAeSFrWkXyA3QUDdsXgt6XTYDt5G5/wXLoye8+9xZ4eg8cjskZy6 NMdQZyyn6aUQx3LaMo9uXpknt9PVNMdSWLHrfDoL4BCXUVvoa3rSE/JbpWyl0OVv /Yux1f5dWQsUzaBg+T7A8W0xD/HmIr5sfUKacEprs6/MpV4m939gEfcGrmNP3C8v prg0hfYI0wJwPl1fJ1HPe2jVJOBSllUHuQRhZa0KwWjbU9/S58sC56YsJu1Ffg3Q +nq06w2auxTiCo6dMsj3m+/EI5X5x9c= -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:57 2025 by rpki-client