$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: CuN0f/S05oLDVIVsi5BJ4gN50nAZF7jeusQR5Yluxck= Subject key identifier: FC:77:9A:FC:4B:37:10:A4:5B:AC:64:57:3A:35:3C:5C:B3:79:FD:28 Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 34A1 Signing time: Fri 18 Jul 2025 14:45:38 +0000 Manifest this update: Fri 18 Jul 2025 14:45:38 +0000 Manifest next update: Fri 25 Jul 2025 14:45:38 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: v2duPIF/N8kFhSr2Ci2EBMiXM07oIgt8DTcay+QNhRo=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Jul 18 14:45:38 2025 GMT Not After : Jul 25 14:45:38 2025 GMT Subject: CN=687a5e12-28af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:38:10:e5:77:bb:f3:ad:3b:c5:88:ec:86: 72:ba:2f:ea:f2:1e:18:d3:af:84:4b:91:28:6d:f9: a5:34:52:ce:f2:ea:c1:ad:56:c8:d3:a6:54:7d:ff: 4f:e3:b0:58:cf:00:a4:9a:49:6b:b9:76:9e:14:eb: a6:8f:95:7e:0e:0e:f9:ac:44:fe:fe:0c:53:10:27: 57:fd:28:06:a8:63:ea:41:68:85:17:db:19:0e:2b: 29:39:80:a8:39:5a:38:45:e6:40:ec:b1:8f:b2:a4: b1:1d:30:25:b6:2a:b7:39:91:28:2e:e3:db:f7:3f: 6d:0f:e7:a2:f3:02:05:4f:52:f6:7a:09:36:bd:71: b7:06:6a:5f:a6:28:80:98:7d:57:f7:b0:e1:79:b6: 74:7b:cf:74:a1:b6:ee:a2:1e:86:e2:54:92:28:10: 3d:18:d7:f9:54:c8:a9:ea:2d:5a:31:12:72:aa:00: 92:4f:cd:e5:1e:22:2e:a4:7b:83:30:52:e1:f9:f3: 94:f8:b4:59:62:0f:bb:f4:12:aa:ff:bd:0e:24:54: 00:65:c4:18:be:43:3b:7d:d2:4b:dd:2c:51:71:fc: dc:db:02:81:58:91:ad:9b:b1:cf:3f:80:b8:90:6e: e7:7b:d3:50:7b:cd:a6:da:8f:4d:e8:ac:6e:97:d2: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:77:9A:FC:4B:37:10:A4:5B:AC:64:57:3A:35:3C:5C:B3:79:FD:28 X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:19:3f:12:72:03:74:ed:05:86:9a:89:1b:fb:8a:da:6e:8b: de:37:53:90:9d:e4:8c:db:62:0c:19:8f:fe:8e:12:de:91:f6: 0b:02:1f:2f:29:57:4d:92:95:63:7b:c0:a6:83:51:55:8c:d7: 09:08:8a:90:d2:26:21:10:bb:e3:94:81:f2:f8:9f:67:35:56: 88:f8:73:f2:a0:cc:32:95:22:4d:9b:42:52:d6:02:df:6c:c9: 03:fd:f4:02:56:11:23:b4:4b:49:46:1d:93:96:67:00:4f:4f: 48:a8:97:76:e8:74:64:d1:fd:85:2f:a9:9d:64:f1:54:7e:c7: 06:17:46:6e:7e:51:bc:21:e8:ab:81:8c:f7:b6:67:67:1a:fb: ae:f7:f8:f1:40:90:7a:7b:19:23:b5:1a:44:eb:f9:80:93:2b: 2c:91:5f:ec:d4:25:32:ac:3d:63:4c:37:29:ef:d3:e5:41:0f: 5f:23:05:54:15:ea:dc:b9:d4:4c:6c:06:ae:a6:26:6d:9f:04: ca:35:96:08:0b:82:d0:86:69:94:f4:97:da:00:95:ba:ab:1d: 34:04:2d:73:59:57:ce:2f:16:7f:f8:6e:8e:a0:f7:03:23:ba: d5:c4:6e:b2:3a:c8:bb:49:cb:ff:12:19:39:26:1b:9a:ff:6d: df:1d:ed:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUwNzE4MTQ0NTM4WhcNMjUwNzI1MTQ0NTM4WjAYMRYwFAYD VQQDEw02ODdhNWUxMi0yOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkU4EOV3u/OtO8WI7IZyui/q8h4Y06+ES5EobfmlNFLO8urBrVbI06ZUff9P 47BYzwCkmklruXaeFOumj5V+Dg75rET+/gxTECdX/SgGqGPqQWiFF9sZDispOYCo OVo4ReZA7LGPsqSxHTAltiq3OZEoLuPb9z9tD+ei8wIFT1L2egk2vXG3BmpfpiiA mH1X97DhebZ0e890obbuoh6G4lSSKBA9GNf5VMip6i1aMRJyqgCST83lHiIupHuD MFLh+fOU+LRZYg+79BKq/70OJFQAZcQYvkM7fdJL3SxRcfzc2wKBWJGtm7HPP4C4 kG7ne9NQe82m2o9N6Kxul9L6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx3mvxL NxCkW6xkVzo1PFyzef0oMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSGT8ScgN07QWGmokb+4raboveN1OQneSM22IMGY/+jhLekfYLAh8v KVdNkpVje8Cmg1FVjNcJCIqQ0iYhELvjlIHy+J9nNVaI+HPyoMwylSJNm0JS1gLf bMkD/fQCVhEjtEtJRh2TlmcAT09IqJd26HRk0f2FL6mdZPFUfscGF0ZuflG8Ieir gYz3tmdnGvuu9/jxQJB6exkjtRpE6/mAkysskV/s1CUyrD1jTDcp79PlQQ9fIwVU FercudRMbAaupiZtnwTKNZYIC4LQhmmU9JfaAJW6qx00BC1zWVfOLxZ/+G6OoPcD I7rVxG6yOsi7Scv/Ehk5Jhua/23fHe0j -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:32 2025 by rpki-client