$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: C2ZDxWqaVb+CCHOCijcyHM6Em7CREPbz6DsIpvYCNhI= Subject key identifier: 34:83:05:6E:94:53:E7:E9:AF:02:79:7F:60:87:05:42:DD:21:76:4C Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 0749 Signing time: Fri 08 Aug 2025 22:05:09 +0000 Manifest this update: Fri 08 Aug 2025 22:05:09 +0000 Manifest next update: Fri 15 Aug 2025 22:05:09 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: 2cGtb+XEZsYlx2hIkQuDAE/YpLSG1kYy/kibgp9dAXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: Aug 8 22:05:09 2025 GMT Not After : Aug 15 22:05:09 2025 GMT Subject: CN=68967495-6c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:fe:8e:1a:13:99:0e:d3:f1:c4:51:2e:c6: aa:73:5e:fd:9f:08:bd:8d:a9:c0:0f:0b:52:90:03: 7b:c2:e7:d3:f7:65:17:47:78:81:aa:52:f5:99:ce: 0f:55:2d:dd:cf:08:24:1c:2a:07:ed:d9:f0:12:78: 90:a7:5c:7b:56:ee:d1:c1:8a:aa:d8:32:8f:d9:15: c6:6a:31:a9:98:02:54:51:ba:6a:bb:d9:b8:7f:31: 9b:c3:83:ea:0d:0c:ab:87:24:bb:5b:96:70:36:3b: d2:1f:32:4f:4d:47:86:df:61:7c:37:91:eb:21:b7: 0f:d9:b8:cb:ca:f7:c1:7b:f4:a8:27:e7:9f:25:97: 6f:18:2c:ea:6d:f8:0a:1d:3f:77:22:19:74:1d:e0: f4:a9:7f:da:85:1a:e9:e1:7e:b3:cb:85:48:d6:aa: 10:a5:f2:f5:cd:91:fd:49:52:6b:07:8b:37:43:50: 4c:e6:3c:41:c6:54:3e:fb:a6:0a:b8:b3:22:43:2e: 14:c1:28:2b:e0:c2:60:a5:6a:0f:16:00:06:5d:7c: 7e:d2:05:13:0d:8c:3b:74:c3:4a:d7:01:99:82:ee: da:c1:53:d5:da:26:98:77:03:ac:04:59:23:f5:dc: 7c:61:d0:dc:bb:8e:0a:15:2e:48:31:80:bf:7f:67: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:05:6E:94:53:E7:E9:AF:02:79:7F:60:87:05:42:DD:21:76:4C X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c9:dd:bf:e6:c3:cc:d3:b3:34:78:78:89:33:6b:02:6e:3d: 39:00:e5:17:a1:c3:8b:24:b3:e3:5c:7a:24:9b:d9:da:a6:e7: 8e:91:52:0d:bb:09:09:43:4e:40:ef:9f:ad:7a:32:56:24:af: c7:56:b4:c5:25:b4:c1:b4:0f:83:1f:a2:22:f8:4e:b8:0c:c1: 9a:9b:2b:ac:4e:5a:fa:d0:4c:ed:ea:41:a3:8b:18:c4:24:b2: e5:0b:28:30:7b:1c:2d:0d:4e:63:18:a1:17:79:a8:fd:a1:d4: a2:2f:42:10:32:8f:e5:63:61:e9:fc:a3:bf:37:ee:e7:77:cc: 7c:38:a1:93:ca:d2:5e:bf:96:6c:0b:be:9f:af:56:70:91:69: 1a:ce:e4:16:ee:f7:3e:9b:2d:9d:17:c4:66:bb:c8:be:8c:9d: 54:9b:07:63:07:a0:65:98:6f:4f:70:3c:c2:38:1a:ef:25:41: 8f:fa:6a:8f:f7:88:af:dc:5f:f9:cf:89:fb:0c:d9:e4:b8:41: b3:2c:04:c9:f5:77:11:d6:b1:ee:6e:ef:44:c2:ff:21:9b:47: 4b:65:61:f9:55:52:7f:1f:70:e3:ec:44:1e:e9:f0:39:27:82: c4:7b:3a:a7:53:6b:1a:b0:84:13:7c:27:55:f1:12:a4:36:80: 8c:bd:e2:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUwODA4MjIwNTA5WhcNMjUwODE1MjIwNTA5WjAYMRYwFAYD VQQDEw02ODk2NzQ5NS02YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42L+jhoTmQ7T8cRRLsaqc179nwi9janADwtSkAN7wufT92UXR3iBqlL1mc4P VS3dzwgkHCoH7dnwEniQp1x7Vu7RwYqq2DKP2RXGajGpmAJUUbpqu9m4fzGbw4Pq DQyrhyS7W5ZwNjvSHzJPTUeG32F8N5HrIbcP2bjLyvfBe/SoJ+efJZdvGCzqbfgK HT93Ihl0HeD0qX/ahRrp4X6zy4VI1qoQpfL1zZH9SVJrB4s3Q1BM5jxBxlQ++6YK uLMiQy4UwSgr4MJgpWoPFgAGXXx+0gUTDYw7dMNK1wGZgu7awVPV2iaYdwOsBFkj 9dx8YdDcu44KFS5IMYC/f2dtaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSDBW6U U+fprwJ5f2CHBULdIXZMMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMyd2/5sPM07M0eHiJM2sCbj05AOUXocOLJLPjXHokm9napueOkVIN uwkJQ05A75+tejJWJK/HVrTFJbTBtA+DH6Ii+E64DMGamyusTlr60Ezt6kGjixjE JLLlCygwexwtDU5jGKEXeaj9odSiL0IQMo/lY2Hp/KO/N+7nd8x8OKGTytJev5Zs C76fr1ZwkWkazuQW7vc+my2dF8Rmu8i+jJ1UmwdjB6BlmG9PcDzCOBrvJUGP+mqP 94iv3F/5z4n7DNnkuEGzLATJ9XcR1rHubu9Ewv8hm0dLZWH5VVJ/H3Dj7EQe6fA5 J4LEezqnU2sasIQTfCdV8RKkNoCMveL4 -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:29 2025 by rpki-client