$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft File: 1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json) Hash identifier: dyJ23DBPyMw3o42r8JBlrPlE5j0uqW0ZN8vfFUVyNJ8= Subject key identifier: AB:22:EB:71:D7:D3:46:EB:3E:2F:19:27:88:07:95:AC:C7:20:E2:CA Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80 Certificate issuer: /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft Manifest number: D0 Signing time: Mon 21 Jul 2025 05:47:51 +0000 Manifest this update: Mon 21 Jul 2025 05:47:51 +0000 Manifest next update: Mon 28 Jul 2025 05:47:51 +0000 Files and hashes: 1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: YHrEScspHl+tnZeffL45ttl1f+t2tRtz+ykFppGHaAA=) 2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: LuOXDNonR3GEQAX6Ae//YPTmZrxLa+xdQ9eXFVMZLeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580 Validity Not Before: Jul 21 05:47:51 2025 GMT Not After : Jul 28 05:47:51 2025 GMT Subject: CN=687dd487-4bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:a2:bb:c8:20:aa:95:d5:47:8b:1b:cf:cb: 8a:3a:02:9c:6b:84:3a:f5:98:09:24:be:aa:a3:0a: 6a:94:9c:66:e5:ef:a6:25:8c:b4:0e:e1:46:00:99: c3:47:f2:51:62:17:ee:08:0a:a7:a7:3f:5f:e8:9d: d8:39:a7:de:a1:e3:ca:77:b1:8d:13:3e:53:0d:10: 18:a2:2f:0b:4f:06:25:20:92:d2:21:13:3d:f9:5b: de:a4:c6:98:58:1d:b5:6b:ee:6e:8a:55:ba:98:ee: a5:da:b0:f8:25:4d:3c:60:61:6c:06:56:d6:13:4c: 22:25:25:db:18:7e:af:f0:82:91:07:93:4e:da:33: 54:ab:7f:58:eb:80:d5:9f:71:9c:01:bb:07:6e:81: 31:31:7b:25:a4:13:11:78:b8:a0:95:f6:54:ef:a7: 12:7b:c7:94:d3:e4:84:b7:79:ad:b5:1a:87:68:1c: 67:b9:e9:4c:03:00:41:99:6a:44:f6:a7:eb:2c:55: f0:19:5a:ea:e7:9b:97:cc:21:d7:5b:6f:a7:2d:9e: c6:5b:c3:f0:d9:b2:35:71:07:ac:ec:39:17:a6:16: 41:44:da:3a:f8:09:0c:8b:f6:80:9f:73:9b:7a:86: 38:2d:32:0b:37:e7:4e:e4:c5:d2:3f:42:23:af:d3: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:EB:71:D7:D3:46:EB:3E:2F:19:27:88:07:95:AC:C7:20:E2:CA X509v3 Authority Key Identifier: keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:2c:fc:18:68:5b:04:1a:3c:c4:f7:24:5b:96:e7:8c:99:04: d1:34:69:bf:28:93:09:9e:1e:76:30:ce:8f:e2:8e:91:6f:cf: 22:2d:eb:7a:23:57:11:92:a7:a5:1a:4e:c2:a1:2b:69:6d:6d: 7e:00:06:7a:54:57:df:ae:21:18:f9:ce:80:bc:7e:ed:42:08: 26:12:d7:85:62:5b:48:ab:ae:9b:49:aa:17:d5:59:26:86:ba: 2e:81:31:a6:b4:40:3f:47:08:9b:10:44:09:81:82:28:87:bd: 4d:5d:90:9b:aa:b8:25:7f:14:b4:56:93:ec:38:cf:0b:4a:49: 79:70:5a:a6:05:0c:96:d8:b8:cb:61:67:12:50:14:1a:60:34: 02:38:d1:4b:1f:38:63:b4:1e:72:4f:7d:f0:46:29:7e:55:7f: cd:50:0e:0e:07:c8:4e:91:0e:95:1f:40:b0:32:3e:ff:5a:f6: c0:dd:c9:e3:af:d3:2e:2a:fc:f2:fe:be:1a:09:b2:2a:ec:e5: a8:4b:be:22:49:41:54:3d:86:d9:0a:a4:ef:52:18:37:e7:25: a7:ac:8c:29:ad:48:5d:7b:bd:98:95:9c:24:94:7a:11:8d:51: 42:23:39:68:cd:57:8a:65:f8:34:b4:50:e1:8b:2b:0d:ce:1d: 0b:1a:b4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MjIxMTAvBgNVBAUTKEQ1Mjg5RThCN0RGNUQ5MjAxNkVDNzk4RUVFRkYwNUJD NzNFODU1ODAwHhcNMjUwNzIxMDU0NzUxWhcNMjUwNzI4MDU0NzUxWjAYMRYwFAYD VQQDEw02ODdkZDQ4Ny00YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBmiu8ggqpXVR4sbz8uKOgKca4Q69ZgJJL6qowpqlJxm5e+mJYy0DuFGAJnD R/JRYhfuCAqnpz9f6J3YOafeoePKd7GNEz5TDRAYoi8LTwYlIJLSIRM9+VvepMaY WB21a+5uilW6mO6l2rD4JU08YGFsBlbWE0wiJSXbGH6v8IKRB5NO2jNUq39Y64DV n3GcAbsHboExMXslpBMReLiglfZU76cSe8eU0+SEt3mttRqHaBxnuelMAwBBmWpE 9qfrLFXwGVrq55uXzCHXW2+nLZ7GW8Pw2bI1cQes7DkXphZBRNo6+AkMi/aAn3Ob eoY4LTILN+dO5MXSP0Ijr9M+oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsi63HX 00brPi8ZJ4gHlazHIOLKMB8GA1UdIwQYMBaAFNUonot99dkgFux5ju7/Bbxz6FWA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzcyMi80NkJEREMwMDI4 OEQxMUVGQjE5MDQ3MjFDNEY5QUUwMi8xU2llaTMzMTJTQVc3SG1PN3Y4RnZIUG9W WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTaWVpMzMxMlNBVzdIbU83djhGdkhQb1ZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzcyMi80NkJEREMwMDI4OEQxMUVGQjE5MDQ3MjFDNEY5QUUwMi8xU2llaTMzMTJT QVc3SG1PN3Y4RnZIUG9WWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeLPwYaFsEGjzE9yRblueMmQTRNGm/KJMJnh52MM6P4o6Rb88iLet6 I1cRkqelGk7CoStpbW1+AAZ6VFffriEY+c6AvH7tQggmEteFYltIq66bSaoX1Vkm hrougTGmtEA/RwibEEQJgYIoh71NXZCbqrglfxS0VpPsOM8LSkl5cFqmBQyW2LjL YWcSUBQaYDQCONFLHzhjtB5yT33wRil+VX/NUA4OB8hOkQ6VH0CwMj7/WvbA3cnj r9MuKvzy/r4aCbIq7OWoS74iSUFUPYbZCqTvUhg35yWnrIwprUhde72YlZwklHoR jVFCIzlozVeKZfg0tFDhiysNzh0LGrTj -----END CERTIFICATE-----Generated at Mon Jul 21 18:47:43 2025 by rpki-client