$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft File: tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json) Hash identifier: wZP61UE/sYLLUgtOjSASCQHUBt/LFHG5BfrzdzcvwB8= Subject key identifier: D4:78:15:D2:91:7E:40:B5:5A:3E:BC:F1:7E:FA:92:11:3F:71:B8:3A Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft Manifest number: 12 Signing time: Tue 05 Aug 2025 08:42:28 +0000 Manifest this update: Tue 05 Aug 2025 08:42:27 +0000 Manifest next update: Tue 12 Aug 2025 08:42:27 +0000 Files and hashes: 1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: qeEwg/a5qD3Kt1pCICnMVZipcxn0Rg38CstbrfJ9GpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C Validity Not Before: Aug 5 08:42:27 2025 GMT Not After : Aug 12 08:42:27 2025 GMT Subject: CN=6891c3f3-90df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:69:46:ed:22:77:98:cd:63:15:14:76:09: 4b:22:ca:26:5a:14:76:aa:85:00:2b:fb:1b:12:55: 24:ab:a1:55:43:20:40:fa:75:0d:5e:3b:a9:9a:1e: 7e:64:54:30:ad:4b:7d:be:bf:d9:0c:b0:31:37:b6: d4:25:dd:f4:46:7a:55:a0:a0:08:5f:fe:db:e6:01: 64:23:32:10:12:e3:ae:87:04:32:cf:a2:a4:1d:77: e1:95:39:45:3f:70:67:91:a8:43:06:01:c3:d7:99: c2:61:35:0c:b0:ed:56:2f:e7:c2:8d:17:69:d6:c0: c0:27:42:51:95:11:f5:2f:85:92:71:d9:44:38:71: 72:52:37:3a:e1:1b:ad:cc:a9:7c:e1:8b:13:67:9b: 1b:77:01:d4:c6:a1:65:06:18:cc:56:d9:a4:39:e3: 01:ea:7b:8d:df:6b:03:b3:ee:9c:64:ba:74:15:0e: f3:67:b5:d9:d6:96:fc:35:4c:d8:3d:78:1a:29:ee: e7:c6:82:38:49:96:d5:f0:e4:19:3b:90:8a:64:ee: 5a:53:62:00:ff:19:68:2b:a3:67:dd:96:06:24:60: 8f:27:0f:c5:ce:b2:dc:29:6b:d5:76:6f:8f:2c:af: a7:c0:d0:50:39:b0:e7:6b:e5:bf:e1:c0:30:64:fb: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:78:15:D2:91:7E:40:B5:5A:3E:BC:F1:7E:FA:92:11:3F:71:B8:3A X509v3 Authority Key Identifier: keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2a:c5:5d:a9:7b:e5:df:39:cd:1c:10:f6:7c:1e:66:b8:3a: 64:1c:de:b4:ea:b2:25:76:b5:5a:36:27:da:b5:be:3e:54:cc: 93:83:99:52:2e:78:fa:9c:48:99:ad:de:f8:bf:5a:57:e9:d8: f6:5a:08:85:fe:4c:d3:ca:b6:44:e3:3c:43:55:c9:3b:c9:e8: 3a:3c:40:3d:bf:86:a4:fe:8d:15:6e:02:95:6e:65:cf:18:e1: f3:be:99:ec:fb:bd:22:11:f9:df:a4:53:39:ec:c9:bc:0f:62: de:ab:d9:07:22:2b:ea:25:54:05:4f:82:df:33:3c:49:c0:1c: 74:dd:8e:43:f4:76:de:84:89:f7:de:ee:0f:32:ff:42:9f:7b: 61:70:f1:41:bd:b1:7a:ce:08:c3:3e:82:98:80:a4:89:ab:e1: 47:16:54:a4:76:66:cc:c4:cc:75:66:7c:7a:13:9f:55:c8:b5: 36:bc:42:72:c1:83:9e:56:65:0f:4d:36:17:0b:a1:ee:26:2e: 07:b8:1a:51:5f:ee:27:a6:1b:8a:20:65:2a:8b:a4:fb:b8:be: 1b:77:8d:35:43:4a:59:0d:9d:45:b1:da:5a:10:f3:e0:c6:17: a9:91:37:d9:57:6f:ed:59:a6:94:f0:e3:b8:85:38:8c:5f:01: 5d:97:bc:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoQjU1NDlGNjE4MUZGQTdBRjI1RDhEMjNBNjY3MzA1NERD NDU2NkMwQzAeFw0yNTA4MDUwODQyMjdaFw0yNTA4MTIwODQyMjdaMBgxFjAUBgNV BAMTDTY4OTFjM2YzLTkwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC53mlG7SJ3mM1jFRR2CUsiyiZaFHaqhQAr+xsSVSSroVVDIED6dQ1eO6maHn5k VDCtS32+v9kMsDE3ttQl3fRGelWgoAhf/tvmAWQjMhAS466HBDLPoqQdd+GVOUU/ cGeRqEMGAcPXmcJhNQyw7VYv58KNF2nWwMAnQlGVEfUvhZJx2UQ4cXJSNzrhG63M qXzhixNnmxt3AdTGoWUGGMxW2aQ54wHqe43fawOz7pxkunQVDvNntdnWlvw1TNg9 eBop7ufGgjhJltXw5Bk7kIpk7lpTYgD/GWgro2fdlgYkYI8nD8XOstwpa9V2b48s r6fA0FA5sOdr5b/hwDBk+zWlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1HgV0pF+ QLVaPrzxfvqSET9xuDowHwYDVR0jBBgwFoAUtVSfYYH/p68l2NI6ZnMFTcRWbAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzE5OEVFNTNFNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFZTZllZSF9wNjhsMk5JNlpuTUZUY1JXYkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzE5OEVFNTNFNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL3RWU2ZZWUhfcDY4 bDJOSTZabk1GVGNSV2JBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKgqxV2pe+XfOc0cEPZ8Hma4OmQc3rTqsiV2tVo2J9q1vj5UzJODmVIu ePqcSJmt3vi/Wlfp2PZaCIX+TNPKtkTjPENVyTvJ6Do8QD2/hqT+jRVuApVuZc8Y 4fO+mez7vSIR+d+kUznsybwPYt6r2QciK+olVAVPgt8zPEnAHHTdjkP0dt6Eiffe 7g8y/0Kfe2Fw8UG9sXrOCMM+gpiApImr4UcWVKR2ZszEzHVmfHoTn1XItTa8QnLB g55WZQ9NNhcLoe4mLge4GlFf7iemG4ogZSqLpPu4vht3jTVDSlkNnUWx2loQ8+DG F6mRN9lXb+1ZppTw47iFOIxfAV2XvN0= -----END CERTIFICATE-----Generated at Wed Aug 6 16:18:30 2025 by rpki-client