$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: cm5ExZqqDpTDF6dEMlcpseqJbzgaqUXMP6eFRC6AmDA= Subject key identifier: F8:99:E6:4C:D2:9C:73:7E:67:B6:44:1D:FA:6A:D0:3D:D3:3B:80:0C Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 0206 Signing time: Sat 19 Jul 2025 02:26:59 +0000 Manifest this update: Sat 19 Jul 2025 02:26:58 +0000 Manifest next update: Sat 26 Jul 2025 02:26:58 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: pVgvWHahPryUhY7yJ2/VQ45ycEnuexYQ7oAfxeOY2lo=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: Jul 19 02:26:58 2025 GMT Not After : Jul 26 02:26:58 2025 GMT Subject: CN=687b0272-0ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:9c:11:03:18:cc:ba:8a:be:58:9b:1b:41: ed:f0:54:8a:f9:bc:6c:b3:e3:a3:8d:f1:af:76:cc: ba:f4:22:18:5e:76:2c:18:34:76:66:e3:d9:53:57: 96:99:82:e6:48:c0:fa:39:f3:3c:a0:a7:fd:c8:28: 35:11:3b:c6:27:f6:31:a5:bb:17:fd:65:f6:b5:78: 79:23:21:3a:04:4f:1a:4b:6d:9b:62:37:47:f2:c5: 1b:9e:ab:b5:e2:82:aa:b3:9f:7e:16:af:90:7c:a9: c1:1e:3b:da:87:05:b0:9c:ae:fe:a5:52:c3:2a:90: 97:28:75:09:9e:b2:ae:7f:4c:33:de:69:12:6e:c4: 51:46:2b:56:a3:9a:ec:ac:a0:87:bf:ef:9a:32:8e: d7:83:33:1a:6a:aa:d2:3e:66:8d:53:ca:92:f7:ec: 4e:c7:bd:99:35:b3:c0:d9:1c:78:91:70:3e:16:64: 61:c8:0a:9c:d9:b9:ee:7a:0a:cd:27:08:f4:ff:76: a7:c7:af:39:6f:f2:02:bd:f7:a5:3c:af:f8:6a:93: 13:eb:f1:bc:37:35:cc:3b:6c:a6:7c:5b:6f:a7:df: 54:1b:43:4f:c9:66:50:0e:19:83:5b:d0:3b:eb:ef: c7:b8:df:ab:a5:dd:98:50:8d:ca:91:51:89:72:5d: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:99:E6:4C:D2:9C:73:7E:67:B6:44:1D:FA:6A:D0:3D:D3:3B:80:0C X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4f:53:04:0b:b4:e7:48:c1:e9:bb:24:3c:74:e5:eb:eb:0f: 3b:5b:9f:4e:a6:76:1b:43:bf:c5:1a:73:53:45:d6:bd:f3:2c: 96:cf:57:0c:90:01:06:8e:47:65:23:cc:2a:80:7c:1d:2c:d7: 84:57:1d:89:83:ea:24:06:c6:45:59:86:31:1c:d0:8f:c7:54: 6d:2c:a8:5a:61:ca:a0:bc:4b:96:8e:98:1d:c8:70:a3:ba:9a: 76:10:38:c8:67:f2:72:57:e7:68:05:1f:e3:6e:6a:1e:02:72: b1:59:7a:84:0f:3e:01:05:fd:a2:e0:c8:aa:a1:9d:52:83:06: 46:f7:26:1a:4a:58:2f:39:4c:b8:f4:24:98:a0:5f:bc:98:bc: 29:76:14:4e:a7:96:5e:98:98:7d:40:3c:26:bf:dd:19:f3:b9: 43:cf:29:4e:31:90:52:11:a7:e4:a8:dc:71:d5:30:82:e5:3d: e1:91:f7:c7:6a:ff:f1:c5:b7:4d:3f:8d:3e:af:89:20:71:2f: fb:5f:46:14:3d:37:2d:93:ee:0b:15:4f:47:f3:ef:ff:1c:7d: 63:97:df:9d:05:55:78:90:37:8c:2b:9f:d2:e9:6e:d0:f3:c6: 72:4f:9e:02:b2:eb:f5:19:0d:92:d8:39:f6:7d:c8:e4:4e:05: e8:bd:2a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUwNzE5MDIyNjU4WhcNMjUwNzI2MDIyNjU4WjAYMRYwFAYD VQQDEw02ODdiMDI3Mi0wZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7icEQMYzLqKvlibG0Ht8FSK+bxss+OjjfGvdsy69CIYXnYsGDR2ZuPZU1eW mYLmSMD6OfM8oKf9yCg1ETvGJ/YxpbsX/WX2tXh5IyE6BE8aS22bYjdH8sUbnqu1 4oKqs59+Fq+QfKnBHjvahwWwnK7+pVLDKpCXKHUJnrKuf0wz3mkSbsRRRitWo5rs rKCHv++aMo7XgzMaaqrSPmaNU8qS9+xOx72ZNbPA2Rx4kXA+FmRhyAqc2bnuegrN Jwj0/3anx685b/ICvfelPK/4apMT6/G8NzXMO2ymfFtvp99UG0NPyWZQDhmDW9A7 6+/HuN+rpd2YUI3KkVGJcl3ulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiZ5kzS nHN+Z7ZEHfpq0D3TO4AMMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABT1MEC7TnSMHpuyQ8dOXr6w87W59OpnYbQ7/FGnNTRda98yyWz1cM kAEGjkdlI8wqgHwdLNeEVx2Jg+okBsZFWYYxHNCPx1RtLKhaYcqgvEuWjpgdyHCj upp2EDjIZ/JyV+doBR/jbmoeAnKxWXqEDz4BBf2i4MiqoZ1SgwZG9yYaSlgvOUy4 9CSYoF+8mLwpdhROp5ZemJh9QDwmv90Z87lDzylOMZBSEafkqNxx1TCC5T3hkffH av/xxbdNP40+r4kgcS/7X0YUPTctk+4LFU9H8+//HH1jl9+dBVV4kDeMK5/S6W7Q 88ZyT54Csuv1GQ2S2Dn2fcjkTgXovSpK -----END CERTIFICATE-----Generated at Sun Jul 20 13:40:18 2025 by rpki-client