$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: R8aBlpDGGJqicYSDUKGLG3DZvXkmRwnMvFKv9LCwchM= Subject key identifier: 6E:61:16:37:01:BD:1F:CD:29:3F:C8:21:28:B9:0A:8E:6F:C5:E9:A5 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 33 Signing time: Fri 13 Jun 2025 06:34:35 +0000 Manifest this update: Fri 13 Jun 2025 06:34:35 +0000 Manifest next update: Fri 20 Jun 2025 06:34:35 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: W2GFHF0QItRZNcV9T+Lwjmm034pXGifWNOBO4hccuzk=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: xErSiwEVGbEN6QlFmGLkFVWsdMEkeNM0TxyRejXCRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Jun 13 06:34:35 2025 GMT Not After : Jun 20 06:34:35 2025 GMT Subject: CN=684bc67b-bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:32:9c:e2:eb:4a:0f:2b:8e:af:17:cf:0b: 70:3d:9e:86:20:40:f0:17:fb:17:0d:75:de:37:31: 59:fb:b8:85:ba:29:0e:2f:d3:35:44:29:f9:e9:af: 7d:d0:23:bf:9d:3a:e1:dc:a2:0b:3f:b8:df:69:8d: f8:dc:f6:b6:1e:fa:ce:77:ba:b3:3f:8f:f7:83:95: b6:46:49:1d:ca:4a:2e:05:9d:ad:fc:00:99:b9:f4: c2:4f:de:87:dd:44:3b:9f:32:4b:56:91:30:33:76: 1e:b1:85:93:fb:fc:dd:4d:f8:ad:99:39:77:ca:1a: 16:cf:16:b6:10:b9:34:11:d5:70:ba:21:bf:11:fb: 30:d0:d6:fb:93:d2:03:27:a8:6e:43:5c:99:e4:79: 2b:a7:7b:c2:4b:65:c2:b8:54:4a:98:ed:cc:9a:52: d9:46:df:be:73:ee:e8:0b:35:72:16:27:84:28:7d: 1b:9f:7e:00:df:bc:28:fd:2d:51:c8:fb:95:7d:8d: 30:3f:48:94:78:86:17:eb:3f:94:54:01:bd:7b:83: d4:88:1f:30:fb:e5:3a:f0:d6:ad:f8:e6:60:7a:58: f8:c9:c2:37:e6:18:47:84:b3:5c:9f:56:f7:55:36: 15:fc:69:87:a8:1f:9f:de:73:1e:1e:40:ed:4f:a9: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:16:37:01:BD:1F:CD:29:3F:C8:21:28:B9:0A:8E:6F:C5:E9:A5 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:46:b0:7d:50:6c:95:56:47:cf:3b:35:11:b0:8a:07:c0:8e: 7c:23:8e:5e:01:a2:ce:28:e7:94:a2:56:1b:f8:fc:2c:70:e9: 15:26:d4:f7:c5:fb:ed:f4:e7:63:64:f4:a1:4b:32:99:c1:5a: 62:09:17:1c:e7:19:93:3a:8e:7b:c2:0c:82:e2:fe:3d:4e:bc: 4f:a5:eb:08:0f:e1:39:9a:5c:9d:86:83:5b:37:2f:b6:4b:29: 44:c9:f7:cf:22:be:33:66:ca:bd:ff:c4:19:20:43:ed:e4:1b: a2:86:e8:3d:1e:f6:4c:b4:55:21:c8:20:89:2d:c9:ed:dc:64: 31:3f:61:c2:d2:9c:ba:8e:8c:22:ce:5f:cb:c7:76:94:f1:a6: 2d:79:8a:1a:bb:0e:41:bc:7b:42:a6:b3:4f:48:5a:4a:a5:7e: 65:9b:e1:15:bc:57:dc:f2:b4:28:d6:99:0a:bc:0e:7c:9e:db: f8:ab:ff:0b:0f:92:1b:fb:10:da:3e:18:38:8d:14:22:0e:4e: 72:ca:c4:9c:1e:0b:56:92:bf:06:db:6e:78:ce:e7:11:58:d1: c3:bc:b6:6f:36:0a:0e:56:2a:fe:50:a4:a9:17:3c:e3:ad:5c: 76:ed:84:88:4d:2b:d6:60:c8:84:b6:37:60:89:ac:35:52:13: 30:5f:ba:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0FERTExMC8GA1UEBRMoRDkzMjBCRkRBQzBDOTBCMzQyOEE0NEZDN0RDQTBFMkY3 OTA5Nzc0MTAeFw0yNTA2MTMwNjM0MzVaFw0yNTA2MjAwNjM0MzVaMBgxFjAUBgNV BAMTDTY4NGJjNjdiLWJjZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1LzKc4utKDyuOrxfPC3A9noYgQPAX+xcNdd43MVn7uIW6KQ4v0zVEKfnpr33Q I7+dOuHcogs/uN9pjfjc9rYe+s53urM/j/eDlbZGSR3KSi4Fna38AJm59MJP3ofd RDufMktWkTAzdh6xhZP7/N1N+K2ZOXfKGhbPFrYQuTQR1XC6Ib8R+zDQ1vuT0gMn qG5DXJnkeSune8JLZcK4VEqY7cyaUtlG375z7ugLNXIWJ4QofRuffgDfvCj9LVHI +5V9jTA/SJR4hhfrP5RUAb17g9SIHzD75Trw1q345mB6WPjJwjfmGEeEs1yfVvdV NhX8aYeoH5/ecx4eQO1Pqb8HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbmEWNwG9 H80pP8ghKLkKjm/F6aUwHwYDVR0jBBgwFoAU2TIL/awMkLNCikT8fcoOL3kJd0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QURFLzg5QTQ5M0UyRkU0 RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRJTF9hd01rTE5DaWtUOGZjb09MM2tKZDBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QURFLzg5QTQ5M0UyRkU0RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xO Q2lrVDhmY29PTDNrSmQwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9GsH1QbJVWR887NRGwigfAjnwjjl4Bos4o55SiVhv4/Cxw6RUm1PfF ++3052Nk9KFLMpnBWmIJFxznGZM6jnvCDILi/j1OvE+l6wgP4TmaXJ2Gg1s3L7ZL KUTJ988ivjNmyr3/xBkgQ+3kG6KG6D0e9ky0VSHIIIktye3cZDE/YcLSnLqOjCLO X8vHdpTxpi15ihq7DkG8e0Kms09IWkqlfmWb4RW8V9zytCjWmQq8Dnye2/ir/wsP khv7ENo+GDiNFCIOTnLKxJweC1aSvwbbbnjO5xFY0cO8tm82Cg5WKv5QpKkXPOOt XHbthIhNK9ZgyIS2N2CJrDVSEzBfugc= -----END CERTIFICATE-----Generated at Sat Jun 14 18:57:36 2025 by rpki-client