$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: sJHHKixOPw02CxHpINF0EWb/KZ2cZ8n+6tIBrI9x/BM= Subject key identifier: FC:B2:D5:F5:BF:E0:D5:AA:25:4D:9D:E7:29:87:21:68:43:CC:29:CF Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0123 Signing time: Sat 19 Jul 2025 05:03:56 +0000 Manifest this update: Sat 19 Jul 2025 05:03:55 +0000 Manifest next update: Sat 26 Jul 2025 05:03:55 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: z/3AfRHVZJLgB4h/HhzVd5xp4jmYQXHe8/zRiZYTn+Y=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Jul 19 05:03:55 2025 GMT Not After : Jul 26 05:03:55 2025 GMT Subject: CN=687b273c-aae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:ed:8a:27:52:dc:db:ea:d7:3d:37:3d:2b: e7:f3:4e:24:7c:9a:75:7e:03:02:f6:8e:8b:d8:7c: 9d:ff:b0:1b:13:c1:4e:55:19:13:23:02:44:26:33: 66:a2:9c:22:ae:ef:86:6f:66:b0:9e:92:71:e1:e4: 75:89:91:03:16:2d:55:26:e8:76:62:1a:c7:7d:44: 62:38:f0:90:3d:0c:66:d3:80:a3:20:86:8b:1e:59: 1d:68:70:a5:9f:b4:05:9f:43:9d:fd:fc:c7:5c:00: 20:6e:77:a5:b3:5c:59:e5:09:6e:2b:38:69:2a:e3: 81:ef:c4:de:01:89:bd:5a:2b:dc:e9:46:8e:0d:8b: 1a:7e:33:9c:76:db:63:42:eb:03:96:a3:b7:7a:c9: 70:3f:f9:9e:b8:83:a8:3e:8d:50:fa:cc:c1:c0:a4: d1:d9:b8:f9:e5:9a:9f:e2:86:8e:46:3d:bd:8a:6c: d0:25:38:80:71:bb:fe:7b:6b:45:67:e7:0c:7b:3c: 69:a6:0a:20:09:32:3c:7c:08:29:d4:9f:c7:64:96: 05:87:d5:b4:f4:32:6a:b2:a6:68:19:df:09:93:84: f6:c8:fd:d2:5b:59:e4:63:b1:53:7b:55:fd:61:27: 08:c9:14:ce:c5:34:5b:54:a6:d6:5f:80:33:d3:45: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B2:D5:F5:BF:E0:D5:AA:25:4D:9D:E7:29:87:21:68:43:CC:29:CF X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fd:be:af:a2:49:8e:69:cc:7c:9d:7a:a4:85:75:fb:29:49: f0:e8:e7:43:11:25:2c:18:76:ba:f7:93:1d:d9:07:4e:50:be: 96:00:69:ee:67:80:15:e8:18:49:9a:10:74:c2:63:4f:15:f6: e4:2d:5e:f8:68:53:b6:b8:25:00:e7:26:a8:7f:ec:cd:0c:04: 10:26:07:aa:76:9e:0d:81:fd:e7:97:e7:ad:9f:25:ef:0f:6e: 05:f4:b2:42:0a:9f:78:1d:52:8a:c0:da:67:5a:85:c9:0c:d3: e7:d3:6d:c0:75:85:17:2a:bc:14:62:65:cd:96:58:71:bc:d0: 79:93:58:a9:75:f4:9d:cc:42:5d:54:8b:e2:b9:ba:2b:4f:f3: 11:d6:da:f9:4f:18:a7:e7:ad:a0:29:39:1f:65:94:67:b9:09: df:14:60:e3:a4:84:2c:a1:45:92:f4:9a:3e:37:3e:28:83:ad: 6a:9c:8d:e7:cb:5b:ae:3e:1a:0e:e7:04:98:17:56:b8:80:34: 4d:33:94:de:fb:43:b2:b8:c4:28:1f:09:3e:e9:6c:5e:72:16: 71:c5:b8:b0:50:66:fc:74:08:bc:44:71:77:b9:4e:65:fa:65: 88:4b:4f:f8:bb:b6:c6:2f:e3:e4:4b:ed:64:d0:59:e6:c8:b2: 42:96:79:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNzE5MDUwMzU1WhcNMjUwNzI2MDUwMzU1WjAYMRYwFAYD VQQDEw02ODdiMjczYy1hYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmrtiidS3Nvq1z03PSvn804kfJp1fgMC9o6L2Hyd/7AbE8FOVRkTIwJEJjNm opwiru+Gb2awnpJx4eR1iZEDFi1VJuh2YhrHfURiOPCQPQxm04CjIIaLHlkdaHCl n7QFn0Od/fzHXAAgbnels1xZ5QluKzhpKuOB78TeAYm9Wivc6UaODYsafjOcdttj QusDlqO3eslwP/meuIOoPo1Q+szBwKTR2bj55Zqf4oaORj29imzQJTiAcbv+e2tF Z+cMezxppgogCTI8fAgp1J/HZJYFh9W09DJqsqZoGd8Jk4T2yP3SW1nkY7FTe1X9 YScIyRTOxTRbVKbWX4Az00VS6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyy1fW/ 4NWqJU2d5ymHIWhDzCnPMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM/b6vokmOacx8nXqkhXX7KUnw6OdDESUsGHa695Md2QdOUL6WAGnu Z4AV6BhJmhB0wmNPFfbkLV74aFO2uCUA5yaof+zNDAQQJgeqdp4Ngf3nl+etnyXv D24F9LJCCp94HVKKwNpnWoXJDNPn023AdYUXKrwUYmXNllhxvNB5k1ipdfSdzEJd VIviuborT/MR1tr5Txin562gKTkfZZRnuQnfFGDjpIQsoUWS9Jo+Nz4og61qnI3n y1uuPhoO5wSYF1a4gDRNM5Te+0OyuMQoHwk+6WxechZxxbiwUGb8dAi8RHF3uU5l +mWIS0/4u7bGL+PkS+1k0FnmyLJClnk4 -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:57 2025 by rpki-client