$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft File: -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json) Hash identifier: k3pJSZ2/bYFQkPtsKICeDc3GHWkMUHH30GtQxQkiHbw= Subject key identifier: 01:B2:7C:44:4F:78:CB:DA:93:01:9D:A7:4B:20:25:E9:92:22:22:D6 Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB Certificate issuer: /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Certificate serial: 0B6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft Manifest number: 0B66 Signing time: Sat 02 Aug 2025 19:18:25 +0000 Manifest this update: Sat 02 Aug 2025 19:18:25 +0000 Manifest next update: Sat 09 Aug 2025 19:18:25 +0000 Files and hashes: 1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: 1tRBWaCm9r1wMYOfXfHzqwR3AhnXsjhn55aqzToWI8U=) 2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 88DAO3QlO8H0+j4IQqrGiQaCtaGiXiNDQrSD6ob+BaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2926 (0xb6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB Validity Not Before: Aug 2 19:18:25 2025 GMT Not After : Aug 9 19:18:25 2025 GMT Subject: CN=688e6481-b261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ae:28:17:a9:7d:11:16:30:a6:17:60:f2:98: 3f:9b:9d:bf:17:86:0a:df:9b:42:02:ce:48:aa:0b: 15:69:72:5a:6b:52:02:f6:3c:65:e7:64:0d:c0:66: 53:f3:6e:19:60:43:63:a8:bc:7d:37:68:25:93:c2: ea:ab:87:37:fd:bd:29:98:b6:8a:b8:1c:a5:9c:c7: 9b:6c:85:4e:a6:84:9c:c6:f1:a5:0c:94:eb:26:4e: 16:8e:a9:83:9e:05:83:71:a5:b9:25:43:8c:a6:4a: 3e:97:3f:88:cd:22:36:e7:5f:4a:e3:78:09:5f:a1: 86:b0:8b:fc:d6:8b:24:65:d9:4f:5e:87:d3:0a:55: 12:b4:ae:c6:b1:49:24:56:53:7b:48:90:19:a9:ca: 3c:98:a5:48:04:5c:8b:1b:5c:36:f3:eb:47:f5:2c: 51:69:df:23:13:e5:b2:d2:88:71:c5:1f:a0:91:47: 10:ab:3c:7e:c4:3e:1a:f5:af:25:f7:7a:1e:ce:0c: 97:12:c8:5c:30:c3:5f:f9:d5:f7:84:35:5e:42:c6: a9:ed:e9:89:f5:97:f0:a3:86:1c:40:e5:94:8b:1e: 92:66:26:02:a4:0d:8f:99:b1:a4:c0:c4:66:b7:a1: 39:57:77:d6:de:91:31:cd:df:ef:2e:c3:55:82:d5: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B2:7C:44:4F:78:CB:DA:93:01:9D:A7:4B:20:25:E9:92:22:22:D6 X509v3 Authority Key Identifier: keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f2:91:94:dc:c1:57:b5:4a:b4:3f:09:99:01:ec:1a:21:02: 22:88:d3:6e:12:4f:a1:a8:3f:49:3f:98:51:a7:05:31:d8:55: ca:cd:7a:69:ee:8f:50:34:5c:e4:1e:94:c8:73:c7:ae:11:8a: 33:ee:66:10:f9:13:97:3b:9a:4c:09:43:2b:bf:47:89:00:8e: 25:e9:67:07:7f:d7:50:e8:03:5b:63:86:be:5f:4a:81:d9:3e: 44:b2:d5:75:2b:21:25:fd:d2:48:49:da:f6:da:12:b5:e7:ca: eb:83:28:9e:af:49:20:50:51:1a:f3:02:4a:b9:57:fe:5f:e5: e7:ed:4c:e1:3d:09:12:0b:e4:ab:fe:20:1f:8f:58:4d:59:0d: e1:ce:57:04:a7:4d:cf:7c:68:e0:9f:90:8f:aa:82:4c:ab:15: 7d:e4:8e:8e:1e:e5:eb:43:9d:44:ab:e5:1c:08:59:f4:be:cf: 96:65:23:54:74:4b:f5:96:8d:02:c2:b4:d4:b1:2d:92:4c:38: 04:38:dc:c0:0f:de:2a:58:26:d5:d7:9c:07:fc:cb:db:d8:42: 0d:58:7a:10:cb:ca:80:a5:1b:e7:65:3e:f4:37:cd:d5:05:0c: ea:03:d3:f1:61:75:cc:e7:f0:bd:48:fd:a5:4e:dc:e4:bd:ae: d4:88:8d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MkMxMTAvBgNVBAUTKEZBRDRDNjc1RDkzODk2RThGNzVENkQyRDk4RDdGQTVG RTE0ODQ0QkIwHhcNMjUwODAyMTkxODI1WhcNMjUwODA5MTkxODI1WjAYMRYwFAYD VQQDEw02ODhlNjQ4MS1iMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9K4oF6l9ERYwphdg8pg/m52/F4YK35tCAs5IqgsVaXJaa1IC9jxl52QNwGZT 824ZYENjqLx9N2glk8Lqq4c3/b0pmLaKuBylnMebbIVOpoScxvGlDJTrJk4WjqmD ngWDcaW5JUOMpko+lz+IzSI2519K43gJX6GGsIv81oskZdlPXofTClUStK7GsUkk VlN7SJAZqco8mKVIBFyLG1w28+tH9SxRad8jE+Wy0ohxxR+gkUcQqzx+xD4a9a8l 93oezgyXEshcMMNf+dX3hDVeQsap7emJ9Zfwo4YcQOWUix6SZiYCpA2PmbGkwMRm t6E5V3fW3pExzd/vLsNVgtXmRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGyfERP eMvakwGdp0sgJemSIiLWMB8GA1UdIwQYMBaAFPrUxnXZOJbo911tLZjX+l/hSES7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyQy9DNjVEMDVDODM2 REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1ajNYVzB0bU5mNlgtRklS THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10VEdkZGs0bHVqM1hXMHRtTmY2WC1GSVJMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyQy9DNjVEMDVDODM2REMxMUVBODYxOThDNzNDNEY5QUUwMi8tdFRHZGRrNGx1 ajNYVzB0bU5mNlgtRklSTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ8pGU3MFXtUq0PwmZAewaIQIiiNNuEk+hqD9JP5hRpwUx2FXKzXpp 7o9QNFzkHpTIc8euEYoz7mYQ+ROXO5pMCUMrv0eJAI4l6WcHf9dQ6ANbY4a+X0qB 2T5EstV1KyEl/dJISdr22hK158rrgyier0kgUFEa8wJKuVf+X+Xn7UzhPQkSC+Sr /iAfj1hNWQ3hzlcEp03PfGjgn5CPqoJMqxV95I6OHuXrQ51Eq+UcCFn0vs+WZSNU dEv1lo0CwrTUsS2STDgEONzAD94qWCbV15wH/Mvb2EINWHoQy8qApRvnZT70N83V BQzqA9PxYXXM5/C9SP2lTtzkva7UiI2J -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:56 2025 by rpki-client