$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: j9IcSQJi9KhFSDfaO62aTyoj/Kh0mcuMRzqEy2FaYqE= Subject key identifier: 96:B7:46:37:9F:D8:3A:74:45:B0:3F:97:05:5C:69:BF:AD:C2:26:85 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 4F Signing time: Thu 07 Aug 2025 07:56:42 +0000 Manifest this update: Thu 07 Aug 2025 07:56:42 +0000 Manifest next update: Thu 14 Aug 2025 07:56:42 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: tGDzCNtA+JVEFQEh6tPq5BjcQ+G9I5Dleq0TTZnq1Hg=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: xErSiwEVGbEN6QlFmGLkFVWsdMEkeNM0TxyRejXCRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Aug 7 07:56:42 2025 GMT Not After : Aug 14 07:56:42 2025 GMT Subject: CN=68945c3a-f01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:0b:f0:0f:f4:66:ae:b7:31:4b:b9:44:67: dc:ea:6b:d7:78:9b:38:36:6b:f0:f8:36:5c:09:b7: 9a:90:4f:a1:10:b0:be:8b:9f:00:8b:37:13:ce:47: 21:20:9c:56:0a:7b:74:a6:c4:dd:bc:f4:9d:cd:fc: 92:79:40:d1:5d:f3:f4:01:a3:9b:a2:b1:9e:f4:a7: 1a:62:13:00:92:db:5c:9b:95:3f:28:09:3e:eb:7a: 73:7e:8f:bb:e3:6d:b2:7f:6b:42:48:af:13:8b:82: b2:2d:9c:15:04:4a:9c:03:5f:18:0f:7a:02:18:1d: 57:84:fb:5b:a9:48:92:75:78:e2:6b:a2:c1:54:0e: b4:3f:55:13:ed:e4:4d:08:dc:47:8e:4f:db:6d:e7: 5f:94:63:16:d0:b7:8d:37:1e:6f:ba:16:f4:f5:00: b3:97:0b:47:af:46:90:28:73:a6:59:3d:c5:bb:3e: bb:13:bd:7c:ca:db:b7:28:03:2a:16:99:ae:0b:a0: e6:47:d2:6a:25:3f:3b:3d:d0:08:6c:14:5c:2b:c8: a9:c3:c1:98:fa:40:10:04:61:e4:aa:a4:75:8f:20: dd:02:70:6f:c2:cf:e0:79:dc:13:3e:43:f0:f8:d4: ba:de:3c:23:da:ac:2a:92:de:ad:0c:1d:84:c5:fb: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:46:37:9F:D8:3A:74:45:B0:3F:97:05:5C:69:BF:AD:C2:26:85 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:86:f1:51:9d:ef:2f:42:bb:cb:f1:46:5f:71:2b:2e:0d:2a: eb:6f:4b:a1:03:70:1f:66:0f:2f:b5:f0:5c:f0:88:3f:9c:4a: b6:ec:02:a8:54:d5:bf:10:26:79:e3:c2:ef:90:3b:e3:58:89: e8:cc:87:9a:eb:59:f0:26:c2:83:46:15:23:ef:16:84:14:0f: 48:f1:28:4f:1b:df:6f:cb:48:d7:85:0f:07:f5:c4:e4:81:6f: fa:b3:f4:4d:7b:e5:8b:13:44:1e:5b:cf:4e:55:27:8a:6f:62: 85:ce:85:91:f9:97:36:a1:bb:c3:16:77:e7:cc:38:21:6a:36: 75:29:b5:91:2b:43:77:ad:80:c3:73:26:1b:50:7d:3f:a1:eb: b3:f0:e6:49:3b:46:78:bb:46:9e:bc:f1:01:f7:3a:47:02:ad: c3:3e:68:e8:c8:ae:4b:89:eb:9c:cc:53:83:27:44:8b:20:f1: 62:ec:f9:09:06:1b:cf:86:03:6e:17:cf:8b:16:15:c3:7a:96: f1:ee:cd:bc:1c:3b:f7:6f:49:6b:6c:65:2f:6b:5d:d4:89:97: a4:9f:55:97:37:76:b2:77:93:61:db:74:a6:5b:1b:a7:81:7c: 2a:f7:8c:90:d8:11:a2:ec:f6:ea:ea:0a:34:7d:e3:5c:6e:c3: ae:0c:d3:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0FERTExMC8GA1UEBRMoRDkzMjBCRkRBQzBDOTBCMzQyOEE0NEZDN0RDQTBFMkY3 OTA5Nzc0MTAeFw0yNTA4MDcwNzU2NDJaFw0yNTA4MTQwNzU2NDJaMBgxFjAUBgNV BAMTDTY4OTQ1YzNhLWYwMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf0gvwD/RmrrcxS7lEZ9zqa9d4mzg2a/D4NlwJt5qQT6EQsL6LnwCLNxPORyEg nFYKe3SmxN289J3N/JJ5QNFd8/QBo5uisZ70pxpiEwCS21yblT8oCT7renN+j7vj bbJ/a0JIrxOLgrItnBUESpwDXxgPegIYHVeE+1upSJJ1eOJrosFUDrQ/VRPt5E0I 3EeOT9tt51+UYxbQt403Hm+6FvT1ALOXC0evRpAoc6ZZPcW7PrsTvXzK27coAyoW ma4LoOZH0molPzs90AhsFFwryKnDwZj6QBAEYeSqpHWPIN0CcG/Cz+B53BM+Q/D4 1LrePCParCqS3q0MHYTF+68/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlrdGN5/Y OnRFsD+XBVxpv63CJoUwHwYDVR0jBBgwFoAU2TIL/awMkLNCikT8fcoOL3kJd0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QURFLzg5QTQ5M0UyRkU0 RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRJTF9hd01rTE5DaWtUOGZjb09MM2tKZDBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QURFLzg5QTQ5M0UyRkU0RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xO Q2lrVDhmY29PTDNrSmQwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACaG8VGd7y9Cu8vxRl9xKy4NKutvS6EDcB9mDy+18FzwiD+cSrbsAqhU 1b8QJnnjwu+QO+NYiejMh5rrWfAmwoNGFSPvFoQUD0jxKE8b32/LSNeFDwf1xOSB b/qz9E175YsTRB5bz05VJ4pvYoXOhZH5lzahu8MWd+fMOCFqNnUptZErQ3etgMNz JhtQfT+h67Pw5kk7Rni7Rp688QH3OkcCrcM+aOjIrkuJ65zMU4MnRIsg8WLs+QkG G8+GA24Xz4sWFcN6lvHuzbwcO/dvSWtsZS9rXdSJl6SfVZc3drJ3k2HbdKZbG6eB fCr3jJDYEaLs9urqCjR941xuw64M078= -----END CERTIFICATE-----Generated at Sat Aug 9 01:05:45 2025 by rpki-client