$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: fqZ98bNBcpihuyzArktRBp72jjvLqygR//m7dJPGQkE= Subject key identifier: DA:83:9C:AC:53:38:8C:5B:FE:85:A0:8A:3D:D4:90:04:98:9D:3D:A2 Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 0C Signing time: Fri 25 Jul 2025 08:31:21 +0000 Manifest this update: Fri 25 Jul 2025 08:31:20 +0000 Manifest next update: Fri 01 Aug 2025 08:31:20 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: yMhQPkU5UPWctRlU0rg5dBM0YPIJRFz815Ipc8GXEVI=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 08:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Jul 25 08:31:20 2025 GMT Not After : Aug 1 08:31:20 2025 GMT Subject: CN=688340d8-9c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:6a:4e:19:cf:a1:ad:93:b8:02:58:be:80: 99:16:46:82:2e:72:03:55:c9:3d:9e:6f:3c:fe:b1: fa:ac:2d:10:86:fd:e5:70:0f:3a:f8:0e:72:85:81: 92:0d:3e:c4:71:ae:c8:b1:27:23:57:15:bb:2d:c8: fc:c9:aa:58:b5:19:29:41:24:b1:bf:66:e6:54:63: 40:a0:d2:78:1a:3e:00:68:52:d3:a3:71:7c:1f:9f: c4:72:bc:fb:dd:eb:3e:05:e1:a9:83:33:c6:74:b5: 83:f0:62:67:d6:29:dc:b4:37:51:9a:02:0c:08:58: 01:f3:e1:c8:2b:d3:18:35:d7:c0:b3:f7:02:11:13: 82:85:b7:d4:b7:b2:55:9c:e9:81:a7:d2:24:ad:2e: 4b:1b:24:52:17:1e:f5:96:b9:3a:de:ee:40:d9:94: 11:a8:1d:b4:54:7c:6b:de:13:b0:bc:86:56:4c:bf: 23:6d:24:ef:e3:97:fc:fc:ab:88:ca:2e:af:06:3b: d5:8d:1c:17:8a:2b:f9:0c:7d:c2:dc:08:be:0c:b3: 43:52:62:1c:83:42:24:59:46:14:3a:de:71:bf:a0: f0:46:cc:5f:6b:4b:ef:8b:03:7e:e1:bf:7d:4f:85: b1:2b:d4:d9:ae:cb:d9:e6:85:f3:f7:f7:38:12:36: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:83:9C:AC:53:38:8C:5B:FE:85:A0:8A:3D:D4:90:04:98:9D:3D:A2 X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:de:63:3d:f0:fa:74:e7:e9:4c:f6:35:6a:24:59:8e:59:9f: 7d:df:e1:e6:0f:6c:17:2e:ff:a2:ce:a9:40:f6:f7:bd:e0:48: e3:5a:06:1c:18:2b:84:fe:9a:90:c3:ec:4e:e3:6b:00:58:b3: 85:22:c1:39:cc:0c:b5:9d:1f:3f:de:1b:1a:cf:5e:77:69:82: b1:d0:1a:85:f1:89:26:0a:1f:1c:62:48:2d:56:f2:da:c4:a6: f9:b3:e0:30:20:b8:ea:a9:2b:a6:67:b5:ba:4b:ea:d4:54:d0: 2f:d2:f6:b4:62:ac:ed:d6:f9:27:42:57:e8:0f:cc:98:69:26: 04:d2:73:71:76:15:61:3e:07:54:35:c7:c2:7c:62:5a:92:8a: cf:00:4c:30:67:0c:e7:d1:7f:b4:55:5b:47:7f:a4:cb:8e:e3: a7:66:d2:6a:69:b1:c9:cb:5f:90:ba:f3:4c:42:8b:04:b6:56: 7d:f7:6e:cd:b7:50:e4:f4:20:ff:ea:da:d5:df:e8:16:23:27: ea:52:d5:de:77:80:58:1f:fe:75:98:25:b6:98:47:80:3c:3a: 38:49:c9:6c:49:26:7b:c5:f9:fd:34:29:ae:fe:49:5c:03:18: eb:db:8e:11:52:6f:b3:31:0d:99:0e:7f:61:82:48:9b:91:32: 68:61:07:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTA3MjUwODMxMjBaFw0yNTA4MDEwODMxMjBaMBgxFjAUBgNV BAMTDTY4ODM0MGQ4LTljMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8q2pOGc+hrZO4Ali+gJkWRoIucgNVyT2ebzz+sfqsLRCG/eVwDzr4DnKFgZIN PsRxrsixJyNXFbstyPzJqli1GSlBJLG/ZuZUY0Cg0ngaPgBoUtOjcXwfn8RyvPvd 6z4F4amDM8Z0tYPwYmfWKdy0N1GaAgwIWAHz4cgr0xg118Cz9wIRE4KFt9S3slWc 6YGn0iStLksbJFIXHvWWuTre7kDZlBGoHbRUfGveE7C8hlZMvyNtJO/jl/z8q4jK Lq8GO9WNHBeKK/kMfcLcCL4Ms0NSYhyDQiRZRhQ63nG/oPBGzF9rS++LA37hv31P hbEr1Nmuy9nmhfP39zgSNmi9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2oOcrFM4 jFv+haCKPdSQBJidPaIwHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPeYz3w+nTn6Uz2NWokWY5Zn33f4eYPbBcu/6LOqUD2973gSONaBhwY K4T+mpDD7E7jawBYs4UiwTnMDLWdHz/eGxrPXndpgrHQGoXxiSYKHxxiSC1W8trE pvmz4DAguOqpK6ZntbpL6tRU0C/S9rRirO3W+SdCV+gPzJhpJgTSc3F2FWE+B1Q1 x8J8YlqSis8ATDBnDOfRf7RVW0d/pMuO46dm0mppscnLX5C680xCiwS2Vn33bs23 UOT0IP/q2tXf6BYjJ+pS1d53gFgf/nWYJbaYR4A8OjhJyWxJJnvF+f00Ka7+SVwD GOvbjhFSb7MxDZkOf2GCSJuRMmhhBwU= -----END CERTIFICATE-----Generated at Fri Jul 25 11:15:07 2025 by rpki-client