$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: iRWqScsRC7oKYRXi/M1vubdtQO/gpDLsUedJ3yxUgag= Subject key identifier: 69:57:53:90:C5:39:E9:87:E0:21:0F:DE:E3:21:88:3E:21:03:83:D4 Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 0737 Signing time: Fri 04 Jul 2025 22:07:20 +0000 Manifest this update: Fri 04 Jul 2025 22:07:20 +0000 Manifest next update: Fri 11 Jul 2025 22:07:20 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: Q31ao/nwLK3/Ha1tRf9vwXC6uIL3cDx0QPWlX0sIrTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: Jul 4 22:07:20 2025 GMT Not After : Jul 11 22:07:20 2025 GMT Subject: CN=68685098-755e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:14:30:7e:b6:e8:18:e1:d8:5d:89:9b:d4: 76:4f:ec:26:21:9a:b9:e0:dd:08:a8:b4:1d:bc:aa: 72:00:83:d9:df:5f:6c:93:62:4c:f0:72:98:d8:b4: 6c:aa:89:85:9e:39:0d:a6:6c:81:d0:59:de:50:a0: 55:12:28:8e:26:f1:1b:a6:9e:d1:82:e3:fc:fa:8c: 5b:7e:00:13:b1:5d:64:42:a0:57:8f:d7:c2:90:29: 00:be:b1:ac:6a:0a:93:f1:a4:fe:b7:f2:8d:33:54: 86:07:57:ae:2e:92:ca:f8:df:bf:73:c8:09:86:26: 86:1b:91:ab:c2:ab:53:a4:90:1b:c1:9d:78:f2:06: ff:71:b0:11:75:e0:d5:ac:0c:9b:c1:f0:55:16:ad: 43:75:ea:a8:25:37:81:21:10:22:bc:8a:14:aa:c5: 59:33:df:14:60:70:ef:76:2b:b7:02:89:f5:4a:de: dd:82:c6:90:68:a9:b9:d3:10:53:0c:71:d8:07:4d: b1:d8:59:18:6a:ca:64:58:d5:59:b7:9e:ef:80:d7: e5:c0:d4:ce:1a:8a:3a:de:fb:75:c9:5e:42:73:83: 61:ec:5d:75:4c:6a:4e:36:f0:7e:a8:6d:3a:e4:e8: a5:a3:db:a3:1e:04:f0:ec:e5:1c:61:dc:5d:ac:9d: d1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:53:90:C5:39:E9:87:E0:21:0F:DE:E3:21:88:3E:21:03:83:D4 X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:fb:87:53:79:df:81:36:d3:de:fb:59:3c:9a:0d:7f:e8:70: 85:e3:5c:09:57:e6:4a:bb:29:c4:d8:97:3c:83:51:a0:68:c7: 64:60:91:b6:40:66:52:d0:01:86:f7:e8:f6:ed:93:97:a5:2b: 9b:d6:06:eb:1d:1f:86:96:b5:53:05:5d:49:57:89:ce:ec:ca: d0:32:7b:3a:b8:14:c1:b6:15:4b:eb:77:55:3c:b4:76:ce:02: 8c:a8:f5:ac:ad:8f:58:8e:73:59:a1:a9:c3:dd:30:62:5c:9c: 46:00:45:32:ce:1f:e6:e0:be:72:b2:07:65:61:40:b2:89:e6: 39:37:d6:d9:cc:96:9d:c9:76:1a:a6:18:80:09:69:7f:2a:45: 57:63:b8:91:92:7d:83:4f:50:16:c6:bb:88:97:ea:8e:c1:76: 01:0e:df:4d:42:a0:62:81:4a:23:a1:c3:3a:63:11:28:3d:17: ff:c9:f6:d6:4f:ae:1b:d9:0e:25:f6:2b:db:a3:0d:42:84:df: 7e:e9:65:c4:81:76:6d:c3:d4:bf:db:d7:5b:41:a8:76:dd:00: ca:5d:45:22:cb:d7:40:7b:3b:19:90:b0:8d:48:19:ad:00:8d: 6d:04:f7:b4:87:aa:e4:e5:a9:6d:08:f8:a0:be:d0:aa:cf:fe: f3:de:0a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUwNzA0MjIwNzIwWhcNMjUwNzExMjIwNzIwWjAYMRYwFAYD VQQDEw02ODY4NTA5OC03NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvoUMH626Bjh2F2Jm9R2T+wmIZq54N0IqLQdvKpyAIPZ319sk2JM8HKY2LRs qomFnjkNpmyB0FneUKBVEiiOJvEbpp7RguP8+oxbfgATsV1kQqBXj9fCkCkAvrGs agqT8aT+t/KNM1SGB1euLpLK+N+/c8gJhiaGG5GrwqtTpJAbwZ148gb/cbARdeDV rAybwfBVFq1DdeqoJTeBIRAivIoUqsVZM98UYHDvdiu3Aon1St7dgsaQaKm50xBT DHHYB02x2FkYaspkWNVZt57vgNflwNTOGoo63vt1yV5Cc4Nh7F11TGpONvB+qG06 5Oilo9ujHgTw7OUcYdxdrJ3RCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlXU5DF OemH4CEP3uMhiD4hA4PUMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM+4dTed+BNtPe+1k8mg1/6HCF41wJV+ZKuynE2Jc8g1GgaMdkYJG2 QGZS0AGG9+j27ZOXpSub1gbrHR+GlrVTBV1JV4nO7MrQMns6uBTBthVL63dVPLR2 zgKMqPWsrY9YjnNZoanD3TBiXJxGAEUyzh/m4L5ysgdlYUCyieY5N9bZzJadyXYa phiACWl/KkVXY7iRkn2DT1AWxruIl+qOwXYBDt9NQqBigUojocM6YxEoPRf/yfbW T64b2Q4l9ivbow1ChN9+6WXEgXZtw9S/29dbQah23QDKXUUiy9dAezsZkLCNSBmt AI1tBPe0h6rk5altCPigvtCqz/7z3gpa -----END CERTIFICATE-----Generated at Sat Jul 5 21:31:30 2025 by rpki-client