$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: 2SZVTcL098oz4zXWbtHpF2M4FWiNUKf6ae6MseRag3I= Subject key identifier: DB:7C:88:4A:43:09:F7:C0:E8:2C:16:6F:CF:3D:52:95:AB:0B:49:53 Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 24 Signing time: Sun 29 Jun 2025 06:49:33 +0000 Manifest this update: Sun 29 Jun 2025 06:49:32 +0000 Manifest next update: Sun 06 Jul 2025 06:49:32 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: kHoD3/SnIAbuD14Rj5OQkxOFnRkuYFEgnKCeTF1xcZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Jun 29 06:49:32 2025 GMT Not After : Jul 6 06:49:32 2025 GMT Subject: CN=6860e1fd-973f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:61:6c:2c:bd:17:d5:f5:32:ff:c4:9d:a5: e3:ec:8f:64:54:4a:10:ca:b8:bc:e2:54:32:73:b1: 9c:33:88:fb:41:b7:ca:a5:36:9a:57:e5:ee:c3:e5: 32:72:82:b7:fb:8b:57:50:24:58:dc:99:cc:c8:78: 0b:b7:c7:e4:6f:1b:16:6b:db:84:38:cd:77:c3:d3: 5d:9f:17:ca:77:13:c1:94:ce:d5:e7:5d:62:2d:84: fe:de:e9:49:b6:f9:d2:10:e4:90:fe:b5:a2:86:8e: 82:e0:ec:b3:7e:ad:5a:5c:19:9c:dd:37:56:e0:f9: 24:bf:70:22:3a:68:b4:57:d3:22:3c:83:6d:c7:57: b7:83:84:ea:fb:e9:a3:71:71:c3:48:ab:3a:c3:ac: a6:3c:22:f6:82:c0:43:19:ce:18:48:04:11:42:f4: d6:fb:bd:a6:86:6e:3a:3e:4c:7c:d1:66:72:a0:0c: b1:3b:0a:20:b4:9a:6c:a5:8f:df:e6:18:df:48:85: 08:0e:ab:56:87:a4:bc:52:5f:32:03:50:db:d6:6d: c8:9c:51:b5:72:f0:71:57:bb:bf:47:63:e4:dd:5e: b7:b5:4e:fa:45:d6:e0:f9:ba:bf:d4:66:d5:d6:86: 3d:ee:32:72:6b:06:f4:0b:cb:7b:bd:67:f8:00:7a: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7C:88:4A:43:09:F7:C0:E8:2C:16:6F:CF:3D:52:95:AB:0B:49:53 X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8d:44:d6:53:c6:8b:ab:27:dc:dd:74:4e:64:e0:72:99:1f: f2:82:c2:56:61:7c:7e:99:b9:6f:f7:22:41:97:1a:23:97:ec: e8:f4:63:af:fe:22:9d:54:64:27:d8:ee:32:34:ab:93:19:3b: cd:6c:f0:71:7b:f4:52:74:bf:d4:a9:86:b9:79:ed:9f:e5:ef: 92:ee:12:3b:f2:74:ad:7d:8b:db:bc:22:d2:eb:30:31:31:0f: 39:d2:34:bc:f7:99:ce:8d:06:49:73:ad:50:0a:0c:5a:0f:06: 39:2a:85:e9:68:e0:66:90:4c:94:97:4e:f2:2c:e2:e6:ea:b8: 4d:5b:29:0d:19:c2:57:ee:84:89:15:0c:83:6d:4f:66:57:63: ff:2a:e3:7c:fc:07:24:a8:e7:74:28:2b:6c:86:bc:a4:ef:f3: 27:38:5a:78:f6:5f:fc:11:82:36:90:50:27:bd:d7:19:51:82: d9:25:74:00:69:2f:7e:ca:49:1c:ae:05:7b:3f:d8:ca:43:08: 9d:18:48:f8:9c:7d:df:60:82:8a:be:38:af:ba:75:e1:b1:3e: a0:19:26:05:33:1b:9c:8d:0d:90:28:4d:96:a5:57:dd:fb:d3: 1f:2c:1c:89:6e:68:5b:8d:46:cb:6c:94:55:54:dd:02:58:94: 22:30:8d:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTA2MjkwNjQ5MzJaFw0yNTA3MDYwNjQ5MzJaMBgxFjAUBgNV BAMTDTY4NjBlMWZkLTk3M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOt2FsLL0X1fUy/8SdpePsj2RUShDKuLziVDJzsZwziPtBt8qlNppX5e7D5TJy grf7i1dQJFjcmczIeAu3x+RvGxZr24Q4zXfD012fF8p3E8GUztXnXWIthP7e6Um2 +dIQ5JD+taKGjoLg7LN+rVpcGZzdN1bg+SS/cCI6aLRX0yI8g23HV7eDhOr76aNx ccNIqzrDrKY8IvaCwEMZzhhIBBFC9Nb7vaaGbjo+THzRZnKgDLE7CiC0mmylj9/m GN9IhQgOq1aHpLxSXzIDUNvWbcicUbVy8HFXu79HY+TdXre1TvpF1uD5ur/UZtXW hj3uMnJrBvQLy3u9Z/gAegRVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU23yISkMJ 98DoLBZvzz1SlasLSVMwHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqNRNZTxourJ9zddE5k4HKZH/KCwlZhfH6ZuW/3IkGXGiOX7Oj0Y6/+ Ip1UZCfY7jI0q5MZO81s8HF79FJ0v9Sphrl57Z/l75LuEjvydK19i9u8ItLrMDEx DznSNLz3mc6NBklzrVAKDFoPBjkqhelo4GaQTJSXTvIs4ubquE1bKQ0ZwlfuhIkV DINtT2ZXY/8q43z8BySo53QoK2yGvKTv8yc4Wnj2X/wRgjaQUCe91xlRgtkldABp L37KSRyuBXs/2MpDCJ0YSPicfd9ggoq+OK+6deGxPqAZJgUzG5yNDZAoTZalV937 0x8sHIluaFuNRstslFVU3QJYlCIwjfY= -----END CERTIFICATE-----Generated at Mon Jun 30 21:12:44 2025 by rpki-client