$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: +TnaE4r7ImSOrXT4w39jr8eTx+nmIZLuq2sdZYsolSc= Subject key identifier: 1B:93:46:ED:2C:70:E9:CC:0B:04:76:EF:DE:CD:6A:BA:6A:F6:61:09 Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 01C8 Signing time: Sat 19 Jul 2025 03:05:36 +0000 Manifest this update: Sat 19 Jul 2025 03:05:35 +0000 Manifest next update: Sat 26 Jul 2025 03:05:35 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: lboaZ/zZfCF7Iiks3AEGFVvOkSs72qd94JsFLgwM51Y=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Jul 19 03:05:35 2025 GMT Not After : Jul 26 03:05:35 2025 GMT Subject: CN=687b0b7f-101f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:00:8a:b6:9b:1f:ad:6b:14:62:0b:cf:81: 61:26:a0:21:9e:20:37:3b:54:12:79:b3:68:f7:db: 31:e3:8f:93:4f:3a:de:a7:0e:c7:c4:91:88:6f:10: 6f:25:6a:68:d8:d1:6e:1e:6b:f1:94:d7:80:ce:51: 6f:2d:df:bf:e7:fb:c7:71:e1:0a:f6:ab:24:65:6c: bc:5a:fe:c4:cd:4d:2a:8f:cf:6c:1e:4b:c7:4c:3d: f3:db:4c:63:08:4f:6f:d5:28:12:f4:8b:0b:16:2c: d4:cd:69:cc:51:67:72:a2:f6:58:d8:49:c2:88:e6: 63:91:dd:5e:11:e5:5e:5f:37:ae:a1:31:f6:a7:dc: 53:9d:eb:7a:53:fd:92:5e:30:8d:cb:b2:27:82:0b: e0:d6:ad:88:41:0e:2b:69:16:2c:53:16:e3:22:af: 8d:a6:ac:ed:01:9a:cd:98:5a:60:d2:d6:fe:36:4e: cc:28:49:31:9c:bc:d3:bf:f1:33:7b:09:33:7c:22: 80:ab:5a:de:20:73:5a:ff:cd:63:0b:15:f0:37:aa: e0:19:89:c3:b6:39:cc:34:06:bd:6f:6a:1c:c0:dd: fa:6e:96:9b:36:c0:2d:47:b2:aa:75:33:4e:7d:c4: 0c:fc:4e:1f:b2:90:5d:dd:4d:3f:b9:91:c1:00:cd: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:93:46:ED:2C:70:E9:CC:0B:04:76:EF:DE:CD:6A:BA:6A:F6:61:09 X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:91:57:74:69:71:63:b2:5e:74:36:54:af:39:21:c8:e5:1a: b0:be:2b:0d:c0:63:ae:0e:51:bb:50:bd:42:c9:ee:d7:c2:b1: c1:8e:3b:5f:a5:90:53:cb:72:02:36:c4:e0:01:2c:d9:5a:cf: 6c:e7:56:6e:8a:f6:1c:9a:e7:73:a0:b9:d8:2d:d7:72:88:53: 3f:54:98:7b:79:34:a0:07:96:30:6d:f6:28:9f:2e:ac:0f:25: 6d:62:8a:b8:e7:c6:85:0d:62:31:06:8b:bf:5e:f9:92:9b:e4: 2a:82:04:67:de:05:18:0e:01:ca:43:58:21:ee:2e:df:4f:81: 77:a0:d7:b9:66:ed:64:61:8c:c6:98:50:fc:7c:0b:fd:74:b4: 93:23:63:3c:35:54:df:03:3b:0a:4e:1d:60:6b:2a:b3:77:9b: 8c:c8:db:dc:8b:b5:e7:39:ea:18:46:78:b0:a8:a3:35:01:e2: 13:11:ae:aa:d4:b7:76:e7:8c:9e:d8:95:0d:34:51:62:bf:5e: 7a:0e:ab:0d:6e:34:78:1e:cb:e9:ef:86:0f:28:40:08:d3:91: 98:49:f4:66:43:d4:d6:3b:24:22:63:9d:11:84:c9:4e:bb:71: c2:42:33:94:85:fb:0c:b1:5b:42:e5:4a:14:ca:3a:91:0a:98: 08:86:8a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUwNzE5MDMwNTM1WhcNMjUwNzI2MDMwNTM1WjAYMRYwFAYD VQQDEw02ODdiMGI3Zi0xMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAly4AirabH61rFGILz4FhJqAhniA3O1QSebNo99sx44+TTzrepw7HxJGIbxBv JWpo2NFuHmvxlNeAzlFvLd+/5/vHceEK9qskZWy8Wv7EzU0qj89sHkvHTD3z20xj CE9v1SgS9IsLFizUzWnMUWdyovZY2EnCiOZjkd1eEeVeXzeuoTH2p9xTnet6U/2S XjCNy7Inggvg1q2IQQ4raRYsUxbjIq+NpqztAZrNmFpg0tb+Nk7MKEkxnLzTv/Ez ewkzfCKAq1reIHNa/81jCxXwN6rgGYnDtjnMNAa9b2ocwN36bpabNsAtR7KqdTNO fcQM/E4fspBd3U0/uZHBAM0CtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuTRu0s cOnMCwR2797Narpq9mEJMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgkVd0aXFjsl50NlSvOSHI5RqwvisNwGOuDlG7UL1Cye7XwrHBjjtf pZBTy3ICNsTgASzZWs9s51ZuivYcmudzoLnYLddyiFM/VJh7eTSgB5YwbfYony6s DyVtYoq458aFDWIxBou/XvmSm+QqggRn3gUYDgHKQ1gh7i7fT4F3oNe5Zu1kYYzG mFD8fAv9dLSTI2M8NVTfAzsKTh1gayqzd5uMyNvci7XnOeoYRniwqKM1AeITEa6q 1Ld254ye2JUNNFFiv156DqsNbjR4Hsvp74YPKEAI05GYSfRmQ9TWOyQiY50RhMlO u3HCQjOUhfsMsVtC5UoUyjqRCpgIhoq1 -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:20 2025 by rpki-client