$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft File: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json) Hash identifier: gNk6Gq9jU7vkRBuG9Z+7h9wvjMxTPK1Y3VkJwkEwHrc= Subject key identifier: FC:7C:B2:0D:1C:E3:B9:5F:6A:ED:21:C9:C0:92:C7:0F:70:88:26:2F Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft Manifest number: 07AD Signing time: Sun 20 Jul 2025 21:23:52 +0000 Manifest this update: Sun 20 Jul 2025 21:23:52 +0000 Manifest next update: Sun 27 Jul 2025 21:23:52 +0000 Files and hashes: 1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: BYmiUbT658hstFlT4bl0uqUMq0yTtRUdAN2aakaUb+I=) 2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: elCspCf7kpxqe/1sy2Dq4/SmTn/Yog4Qi7W5Fjs7BFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Validity Not Before: Jul 20 21:23:52 2025 GMT Not After : Jul 27 21:23:52 2025 GMT Subject: CN=687d5e68-c4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:c0:29:f6:13:e1:2c:33:35:79:d3:6e:bc: 3c:4e:d7:45:c7:35:63:da:49:7f:67:40:3d:66:47: 34:1f:ad:fc:99:69:6a:a1:7a:ce:6c:e7:23:1d:9c: 4a:bf:d6:b7:2c:a8:2b:6d:ad:d0:8a:ac:20:da:2c: c7:69:b0:36:dd:48:84:d5:20:77:c4:aa:71:f5:60: 5f:1f:61:72:79:58:62:80:6f:57:ad:12:92:a1:f9: a7:6a:16:70:58:5e:51:44:4b:bb:3b:87:32:25:48: 7e:8e:08:4c:4a:d8:0e:c0:c5:46:88:ba:32:55:b8: 45:25:17:f9:da:94:47:45:ec:d1:e4:bc:a1:e2:6a: 04:cf:04:86:0c:7e:2a:d1:76:89:3d:bc:6e:ad:e5: 7b:4c:f3:53:bc:07:b2:b9:18:38:51:f4:ec:47:76: 74:a3:1b:8c:59:45:84:99:92:e4:20:3e:43:ad:00: af:62:24:e5:d2:35:ab:20:54:60:55:d7:23:32:b4: f7:a8:2c:f0:e3:47:30:7c:cd:2f:88:f5:c5:24:18: 1a:34:d3:38:84:2a:c6:0c:93:71:27:f6:76:bf:c9: 45:16:af:d2:2a:2f:b6:d7:46:98:f0:41:a5:ba:3b: 04:67:9d:ad:e6:9c:3a:5e:bc:d5:2f:79:b8:51:88: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7C:B2:0D:1C:E3:B9:5F:6A:ED:21:C9:C0:92:C7:0F:70:88:26:2F X509v3 Authority Key Identifier: keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:40:1b:69:bc:21:1c:19:9f:1b:45:38:67:96:b4:31:f6:56: 49:3f:a2:3a:83:d1:5d:5b:96:39:81:75:1e:26:b4:db:88:5d: 56:97:17:02:74:53:8b:d8:a9:42:0d:4c:2d:7f:ba:44:eb:5c: 68:9c:17:d8:41:ec:98:da:8f:7b:ec:1e:b4:54:6d:ac:6a:98: e0:a0:42:91:2b:14:b4:7b:a4:75:6b:97:ef:85:3e:31:36:54: 3c:3f:d7:6d:8b:53:f2:23:37:67:2e:2f:94:91:e0:81:3d:d8: 3a:02:31:72:9f:ee:d6:f6:2e:45:f2:92:07:75:94:54:9d:e0: 77:59:39:cf:be:1a:6d:60:69:8e:60:d1:98:bc:67:67:00:ab: bd:0d:c2:89:8b:d1:cb:c4:41:84:9b:21:89:16:f1:d2:35:cf: 24:a3:5d:5e:92:00:30:b5:c6:5c:7a:74:c0:71:06:b8:8b:a7: b1:27:7c:09:e3:d3:13:cc:a6:31:ca:a7:c0:48:64:72:d5:71: 9f:fe:f1:70:0b:51:2f:94:7e:a6:57:36:78:c4:d3:90:ec:54: 32:74:ab:cb:cb:bc:f2:ad:2b:36:c6:4f:1f:9a:d8:11:1e:e2: 2b:32:fb:e3:2d:b4:b9:52:52:6e:cc:48:a9:da:72:5d:a3:35: 87:78:03:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk2ODAxMTAvBgNVBAUTKEI3NTkwOTJBNjkxOEY0NUVBQ0QwRENGREY5NzFEMEQz RkE1MDIxQUEwHhcNMjUwNzIwMjEyMzUyWhcNMjUwNzI3MjEyMzUyWjAYMRYwFAYD VQQDEw02ODdkNWU2OC1jNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpDAKfYT4SwzNXnTbrw8TtdFxzVj2kl/Z0A9Zkc0H638mWlqoXrObOcjHZxK v9a3LKgrba3Qiqwg2izHabA23UiE1SB3xKpx9WBfH2FyeVhigG9XrRKSofmnahZw WF5RREu7O4cyJUh+jghMStgOwMVGiLoyVbhFJRf52pRHRezR5Lyh4moEzwSGDH4q 0XaJPbxureV7TPNTvAeyuRg4UfTsR3Z0oxuMWUWEmZLkID5DrQCvYiTl0jWrIFRg VdcjMrT3qCzw40cwfM0viPXFJBgaNNM4hCrGDJNxJ/Z2v8lFFq/SKi+210aY8EGl ujsEZ52t5pw6XrzVL3m4UYjE+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx8sg0c 47lfau0hycCSxw9wiCYvMB8GA1UdIwQYMBaAFLdZCSppGPRerNDc/flx0NP6UCGq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTY4MC83NEY3QkJGQzBC QTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlGNnMwTno5LVhIUTBfcFFJ YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Qxa0pLbWtZOUY2czBOejktWEhRMF9wUUlhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTY4MC83NEY3QkJGQzBCQTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlG NnMwTno5LVhIUTBfcFFJYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKQBtpvCEcGZ8bRThnlrQx9lZJP6I6g9FdW5Y5gXUeJrTbiF1WlxcC dFOL2KlCDUwtf7pE61xonBfYQeyY2o977B60VG2sapjgoEKRKxS0e6R1a5fvhT4x NlQ8P9dti1PyIzdnLi+UkeCBPdg6AjFyn+7W9i5F8pIHdZRUneB3WTnPvhptYGmO YNGYvGdnAKu9DcKJi9HLxEGEmyGJFvHSNc8ko11ekgAwtcZcenTAcQa4i6exJ3wJ 49MTzKYxyqfASGRy1XGf/vFwC1EvlH6mVzZ4xNOQ7FQydKvLy7zyrSs2xk8fmtgR HuIrMvvjLbS5UlJuzEip2nJdozWHeAMj -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:16 2025 by rpki-client