$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: bTcZot7BMYJMs+6VcxM6I1+OxM7Ax4YF5v5R1ES+LGE= Subject key identifier: A5:D9:28:43:98:1A:B1:ED:83:9B:DD:55:77:4C:97:30:6D:D9:55:65 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 026A Signing time: Sat 19 Jul 2025 02:11:48 +0000 Manifest this update: Sat 19 Jul 2025 02:11:48 +0000 Manifest next update: Sat 26 Jul 2025 02:11:48 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: ofnpsHwU3SvjoOE4v9kxvZrn05mnUum5JTc1IXpmEk0=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Jul 19 02:11:48 2025 GMT Not After : Jul 26 02:11:48 2025 GMT Subject: CN=687afee4-46ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:af:62:5a:d8:d2:da:de:dd:6d:3f:a5:eb: b3:8a:2b:8d:19:44:76:f8:81:22:32:16:8b:84:13: dd:85:50:c2:ab:c6:9b:cc:4f:54:49:64:f6:4c:aa: 89:5f:06:55:a7:55:2e:0d:8b:b7:9a:4c:65:37:e7: bc:c4:05:bb:f2:4e:e0:51:6e:a4:90:d5:2d:eb:14: a5:ad:b6:09:4b:57:04:fd:0a:84:dd:8b:cb:42:b4: 67:ce:ff:ac:bf:66:96:7c:03:d4:d9:c3:90:23:1a: af:f8:b0:ca:88:78:fd:4e:dc:ad:1d:39:de:d9:1e: d4:29:b2:89:6a:e9:13:6d:56:26:75:27:e6:a5:7d: f6:68:d9:4e:f5:2b:90:e0:0a:5f:c7:e8:07:cf:b5: 83:d2:78:c1:8b:c7:76:70:22:a9:0d:b4:6e:ac:e8: fd:fc:c9:2a:b4:7f:d1:82:e1:cd:82:07:7c:ba:f1: 73:2c:02:63:7a:43:1a:a1:f0:f0:75:34:dd:76:44: 22:02:a1:46:3a:2e:42:b9:92:bd:75:b2:c5:12:e2: 0c:81:f3:1d:a7:5b:7a:83:2a:0d:01:d6:7f:60:e5: ae:78:83:ef:8f:1e:14:f3:96:69:a7:ca:09:c0:fb: 48:59:ef:30:b9:69:bd:11:c9:93:bf:9c:f1:b0:f7: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:28:43:98:1A:B1:ED:83:9B:DD:55:77:4C:97:30:6D:D9:55:65 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0b:66:c9:ab:16:6e:cd:70:36:ca:51:15:fc:74:25:91:aa: 49:4f:17:8e:c5:ab:43:19:35:89:47:a3:d0:23:98:28:e9:7e: eb:cd:6e:8f:40:4b:cf:ec:d0:0b:88:ca:73:b1:c4:c2:58:c3: ed:2a:4b:75:11:d1:e1:1c:c1:32:9e:13:27:96:f8:0e:56:63: 9f:38:7d:49:17:aa:e7:52:35:46:57:4e:9d:25:59:bf:83:5a: e1:87:fc:c0:17:5c:50:ce:a7:be:fc:99:9c:74:28:94:7e:92: 44:fe:e1:d6:db:00:60:0d:53:12:9b:07:92:f6:a2:c8:57:5a: 82:5a:00:fb:cd:f0:fd:04:f1:bb:47:02:21:87:77:a9:00:41: 81:a7:35:05:e3:9c:1f:c0:3c:07:6b:1d:d3:12:17:5e:e0:4e: 60:23:90:90:06:5d:76:29:03:e7:36:fd:54:e8:e9:8f:58:5f: 64:fb:03:ea:07:c0:47:d1:2b:df:94:28:b3:37:0c:35:7a:0f: 66:ea:a0:59:b4:5b:7f:7d:6e:68:bd:58:fa:4e:44:1b:8f:3e: 5a:ff:b5:ff:2d:b9:9e:f2:c9:5e:1d:3a:ef:f3:e9:ae:11:1a: f9:82:3d:70:79:6a:59:42:79:7c:7a:c4:38:d3:1a:6b:9a:2d: 44:68:e5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwNzE5MDIxMTQ4WhcNMjUwNzI2MDIxMTQ4WjAYMRYwFAYD VQQDEw02ODdhZmVlNC00NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxayvYlrY0tre3W0/peuziiuNGUR2+IEiMhaLhBPdhVDCq8abzE9USWT2TKqJ XwZVp1UuDYu3mkxlN+e8xAW78k7gUW6kkNUt6xSlrbYJS1cE/QqE3YvLQrRnzv+s v2aWfAPU2cOQIxqv+LDKiHj9TtytHTne2R7UKbKJaukTbVYmdSfmpX32aNlO9SuQ 4Apfx+gHz7WD0njBi8d2cCKpDbRurOj9/MkqtH/RguHNggd8uvFzLAJjekMaofDw dTTddkQiAqFGOi5CuZK9dbLFEuIMgfMdp1t6gyoNAdZ/YOWueIPvjx4U85Zpp8oJ wPtIWe8wuWm9EcmTv5zxsPd40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXZKEOY GrHtg5vdVXdMlzBt2VVlMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfC2bJqxZuzXA2ylEV/HQlkapJTxeOxatDGTWJR6PQI5go6X7rzW6P QEvP7NALiMpzscTCWMPtKkt1EdHhHMEynhMnlvgOVmOfOH1JF6rnUjVGV06dJVm/ g1rhh/zAF1xQzqe+/JmcdCiUfpJE/uHW2wBgDVMSmweS9qLIV1qCWgD7zfD9BPG7 RwIhh3epAEGBpzUF45wfwDwHax3TEhde4E5gI5CQBl12KQPnNv1U6OmPWF9k+wPq B8BH0SvflCizNww1eg9m6qBZtFt/fW5ovVj6TkQbjz5a/7X/Lbme8sleHTrv8+mu ERr5gj1weWpZQnl8esQ40xprmi1EaOVh -----END CERTIFICATE-----Generated at Sun Jul 20 07:54:27 2025 by rpki-client