$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json) Hash identifier: 3nyZgV9rN+dbz07cTSHE8jMlm0kUae0hXnJZeDRHLM0= Subject key identifier: 67:D1:BC:1D:F0:D8:6B:22:66:33:A2:9A:7A:03:CF:9E:5E:79:A8:23 Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft Manifest number: 5E Signing time: Mon 11 Aug 2025 07:23:41 +0000 Manifest this update: Mon 11 Aug 2025 07:23:40 +0000 Manifest next update: Mon 18 Aug 2025 07:23:40 +0000 Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: kbZgFdm5FbMWOuyJExrUP/1ZIy0OFHXlD/ZaCtuJzs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E Validity Not Before: Aug 11 07:23:40 2025 GMT Not After : Aug 18 07:23:40 2025 GMT Subject: CN=68999a7d-6a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:96:88:ed:7a:a3:0e:4e:86:45:7e:3d:ce: e5:61:ef:cc:ff:42:43:89:cb:c6:22:7c:0c:8b:f4: 41:d1:93:77:f2:5b:62:7b:26:70:65:16:33:40:0e: d5:c1:00:b9:ea:a0:58:5b:65:3e:28:dd:a0:2b:36: 03:df:af:4d:1c:0b:ed:77:74:50:05:3a:f1:5e:7a: 45:7c:5d:6c:ac:cd:bf:c6:b8:69:7a:c8:00:a0:f4: cd:17:7c:2e:9d:fd:f9:a0:20:e5:c1:d9:99:36:1e: 7e:55:e5:be:0e:89:8f:56:72:4a:55:cd:0b:f2:fe: 11:3d:c7:71:ef:f6:a9:80:97:81:9b:e3:d2:6d:ab: a7:5e:a9:75:8e:b7:58:bf:84:4f:c7:0a:5e:41:d0: ac:f0:71:7c:75:81:e6:10:33:c4:d5:0f:c5:84:5c: 0d:d0:d0:4c:a8:73:e3:94:6d:a7:53:6e:30:88:ae: ee:7c:02:55:d5:3a:ac:ac:93:ff:ad:7e:43:e3:33: 77:69:f0:1e:a1:27:9c:43:41:a5:5d:01:a7:64:61: db:0c:d7:0d:94:4b:21:3a:ed:73:69:73:e5:aa:f5: 5b:d9:f5:a0:de:2a:61:39:53:fe:57:9c:d4:3c:c6: 3f:2d:ee:00:24:ae:2e:49:31:32:11:e3:13:23:bc: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:BC:1D:F0:D8:6B:22:66:33:A2:9A:7A:03:CF:9E:5E:79:A8:23 X509v3 Authority Key Identifier: keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:06:d6:74:b9:98:cc:b6:eb:0d:3c:1c:69:f6:7e:ea:8f:ef: 0c:6e:5f:9f:db:d3:8b:80:4f:a5:af:a3:4a:77:f4:14:a0:e0: 5f:a9:8c:9f:ae:ae:0e:bb:bb:83:63:d9:be:a0:e5:93:0a:b4: dd:68:1f:62:04:21:29:47:30:5c:65:66:d3:fc:a6:54:c1:9f: fd:aa:31:18:01:37:07:23:86:a4:bc:76:c0:e8:e1:68:e7:f9: 1a:73:0c:80:e4:f2:fb:e8:85:47:4c:47:34:8e:02:e2:87:4f: ae:82:3f:29:b1:28:a7:03:a7:b7:eb:a2:80:5f:17:4b:62:81: 6c:83:26:a4:2c:10:73:48:fd:7c:28:a1:86:89:14:cb:d2:9b: 22:30:41:41:2d:8f:41:ab:4f:8f:4e:4d:75:d9:bf:4e:63:2e: 74:f3:75:41:22:00:7e:42:c1:04:3a:7f:6d:5f:f3:37:da:7b: 94:9e:a8:ee:51:94:3b:c4:fd:3e:63:f1:1b:02:5d:30:7c:c3: e9:c8:f0:75:65:76:9f:03:c5:27:41:46:d4:25:e9:70:8b:bd: f1:db:c4:11:f7:dd:a0:66:60:40:b1:28:95:f9:be:c1:57:c0: 58:b3:a5:8d:18:a6:62:d1:0e:5c:fc:3a:22:83:44:f9:40:1d: f2:dc:89:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoQjUxNEZBQTUyMzk4RTdERTI1Q0JCOEQ3Nzk0MzlCMUUz MDM3NDcwRTAeFw0yNTA4MTEwNzIzNDBaFw0yNTA4MTgwNzIzNDBaMBgxFjAUBgNV BAMTDTY4OTk5YTdkLTZhNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC85paI7XqjDk6GRX49zuVh78z/QkOJy8YifAyL9EHRk3fyW2J7JnBlFjNADtXB ALnqoFhbZT4o3aArNgPfr00cC+13dFAFOvFeekV8XWyszb/GuGl6yACg9M0XfC6d /fmgIOXB2Zk2Hn5V5b4OiY9WckpVzQvy/hE9x3Hv9qmAl4Gb49Jtq6deqXWOt1i/ hE/HCl5B0KzwcXx1geYQM8TVD8WEXA3Q0Eyoc+OUbadTbjCIru58AlXVOqysk/+t fkPjM3dp8B6hJ5xDQaVdAadkYdsM1w2USyE67XNpc+Wq9VvZ9aDeKmE5U/5XnNQ8 xj8t7gAkri5JMTIR4xMjvIlbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ9G8HfDY ayJmM6KaegPPnl55qCMwHwYDVR0jBBgwFoAUtRT6pSOY594ly7jXeUObHjA3Rw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0Y2MUQ4OUM2RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFJUNnBTT1k1OTRseTdqWGVVT2JIakEzUnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0Y2MUQ4OUM2RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyL3RSVDZwU09ZNTk0 bHk3alhlVU9iSGpBM1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwG1nS5mMy26w08HGn2fuqP7wxuX5/b04uAT6Wvo0p39BSg4F+pjJ+u rg67u4Nj2b6g5ZMKtN1oH2IEISlHMFxlZtP8plTBn/2qMRgBNwcjhqS8dsDo4Wjn +RpzDIDk8vvohUdMRzSOAuKHT66CPymxKKcDp7frooBfF0tigWyDJqQsEHNI/Xwo oYaJFMvSmyIwQUEtj0GrT49OTXXZv05jLnTzdUEiAH5CwQQ6f21f8zfae5SeqO5R lDvE/T5j8RsCXTB8w+nI8HVldp8DxSdBRtQl6XCLvfHbxBH33aBmYECxKJX5vsFX wFizpY0YpmLRDlz8OiKDRPlAHfLciZ4= -----END CERTIFICATE-----Generated at Mon Aug 11 08:57:16 2025 by rpki-client