$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: dK5pyhAV8ceh+09BODlmfKD5QmDmP/387CoKesfjy90= Subject key identifier: 28:5C:AB:01:B0:F9:3B:97:A2:C4:12:6F:3D:C3:7E:6F:DC:28:03:C9 Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 9B Signing time: Thu 19 Jun 2025 05:39:52 +0000 Manifest this update: Thu 19 Jun 2025 05:39:51 +0000 Manifest next update: Thu 26 Jun 2025 05:39:51 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: 83gqJ0Y+CF1bfwMHQ4iyPa5hjEecBCzMQRHXZoHopOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Jun 19 05:39:51 2025 GMT Not After : Jun 26 05:39:51 2025 GMT Subject: CN=6853a2a7-9c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:65:98:33:ef:4d:a3:f4:91:bf:85:d5:25: 6e:16:47:90:80:61:1f:d2:00:51:67:cf:77:6c:13: 52:be:0b:bd:d9:ec:ad:69:70:ea:4e:e9:63:fd:ac: 5c:e6:5e:7c:9c:bf:15:b3:36:b1:aa:a6:84:d7:ce: 96:e8:e3:f6:2a:9f:fe:fc:52:21:70:2b:07:c9:38: f4:72:05:3d:b1:30:58:50:49:b9:18:ec:ca:aa:ad: 89:28:48:cc:e7:63:54:4d:05:d3:dd:eb:93:74:ef: 37:fd:d3:18:ab:79:7f:51:9a:a5:f2:10:66:7e:3e: c4:3f:c7:fb:d8:e6:af:64:1d:0a:d3:08:c5:ae:07: d4:3b:b9:5f:05:40:74:db:d8:d9:b0:f1:89:46:9c: d0:b5:18:ae:b9:67:ce:20:46:73:1b:5e:b1:b5:ad: 0d:0e:38:a2:7d:9f:80:23:c1:0e:0d:f7:53:63:88: 8d:2d:75:21:5e:cd:68:18:b7:d1:da:e6:d6:02:57: bd:48:e3:bd:17:2a:17:39:da:f3:69:7c:a2:5d:8f: 8a:a4:c9:3b:e2:56:f5:73:4b:28:ff:99:b3:0a:6c: 1c:69:b1:5d:ca:90:a7:8d:43:96:18:f1:89:08:6c: ca:73:cc:7d:67:a1:8c:f8:c8:6c:d8:22:62:c3:3f: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5C:AB:01:B0:F9:3B:97:A2:C4:12:6F:3D:C3:7E:6F:DC:28:03:C9 X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e5:8b:88:0c:42:5f:d2:c7:5e:e4:fa:d9:56:98:4f:fb:36: 23:5c:23:d9:69:a2:d8:33:a5:0d:53:23:9b:e9:d7:3d:ab:dc: db:32:c1:a8:49:f6:db:db:0f:4f:9f:b9:40:6d:bc:40:ac:07: 26:94:be:ca:0f:24:21:72:b8:10:3b:97:9c:a4:c6:86:ba:77: 74:2a:2e:9b:21:8b:21:1a:2e:77:d3:6d:41:52:6f:03:33:26: ec:21:11:55:e3:4e:64:ec:34:1e:e5:05:2f:ce:0b:57:4d:d9: 0c:af:83:3f:91:51:0f:f7:22:e7:8d:70:79:3d:c8:a6:43:77: b7:20:df:18:b7:fa:4a:a8:52:33:68:03:68:b1:05:03:97:6f: 4f:e7:62:de:09:81:97:db:0a:04:88:1e:57:62:47:e3:34:19: 27:b8:a6:2d:64:5d:17:b0:3f:b0:52:4d:4b:c5:16:41:99:04: ab:a5:f4:21:b2:ab:fa:d8:55:34:30:1c:a6:18:3a:7c:0e:c1: 63:ab:57:45:55:d4:13:ad:17:e1:b1:24:73:98:f3:72:20:a1: e2:68:26:74:d2:c1:1a:75:9e:f6:d6:37:18:ed:54:d8:c8:32: d7:d7:a8:66:47:f9:48:cb:85:00:1f:b4:99:f7:86:d5:3d:68: 7f:57:5c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUwNjE5MDUzOTUxWhcNMjUwNjI2MDUzOTUxWjAYMRYwFAYD VQQDEw02ODUzYTJhNy05YzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKVlmDPvTaP0kb+F1SVuFkeQgGEf0gBRZ893bBNSvgu92eytaXDqTulj/axc 5l58nL8VszaxqqaE186W6OP2Kp/+/FIhcCsHyTj0cgU9sTBYUEm5GOzKqq2JKEjM 52NUTQXT3euTdO83/dMYq3l/UZql8hBmfj7EP8f72OavZB0K0wjFrgfUO7lfBUB0 29jZsPGJRpzQtRiuuWfOIEZzG16xta0NDjiifZ+AI8EODfdTY4iNLXUhXs1oGLfR 2ubWAle9SOO9FyoXOdrzaXyiXY+KpMk74lb1c0so/5mzCmwcabFdypCnjUOWGPGJ CGzKc8x9Z6GM+Mhs2CJiwz/JCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChcqwGw +TuXosQSbz3Dfm/cKAPJMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC35YuIDEJf0sde5PrZVphP+zYjXCPZaaLYM6UNUyOb6dc9q9zbMsGo Sfbb2w9Pn7lAbbxArAcmlL7KDyQhcrgQO5ecpMaGund0Ki6bIYshGi53021BUm8D MybsIRFV405k7DQe5QUvzgtXTdkMr4M/kVEP9yLnjXB5PcimQ3e3IN8Yt/pKqFIz aANosQUDl29P52LeCYGX2woEiB5XYkfjNBknuKYtZF0XsD+wUk1LxRZBmQSrpfQh sqv62FU0MBymGDp8DsFjq1dFVdQTrRfhsSRzmPNyIKHiaCZ00sEadZ721jcY7VTY yDLX16hmR/lIy4UAH7SZ94bVPWh/V1xS -----END CERTIFICATE-----Generated at Sat Jun 21 04:57:32 2025 by rpki-client