$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: i+XacieIGm8JxaEXlDSKYMYlyUYpH73xHEIRZsP4ai0= Subject key identifier: 08:74:70:F4:4A:E9:52:CC:3A:D2:9B:77:6A:54:AD:72:6D:50:4F:7C Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: AD Signing time: Mon 21 Jul 2025 06:17:18 +0000 Manifest this update: Mon 21 Jul 2025 06:17:18 +0000 Manifest next update: Mon 28 Jul 2025 06:17:18 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: U6eACIjsOjsjOJr3JO8NvqqPZCVKL2/UW7xRwq/SiVk=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: WK09suWPiJTW5VawW56fPInSd31p6Tm1C+edtUFR9pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Jul 21 06:17:18 2025 GMT Not After : Jul 28 06:17:18 2025 GMT Subject: CN=687ddb6e-9cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:b2:05:a6:23:e6:5e:8c:c7:48:44:29:43: f6:7f:39:ec:b0:0c:b1:5b:25:a0:61:e8:a8:1c:9d: ee:a3:47:ab:4d:a9:6f:2b:1a:65:b0:fe:35:a9:2c: a3:73:16:77:43:3a:e9:aa:21:10:18:4b:9f:35:82: 96:98:b3:21:73:0f:fd:93:11:94:3d:cc:1b:ce:1f: 96:2c:31:1b:b4:2f:10:c9:52:b5:fb:79:96:98:cd: c7:a0:9c:9e:b3:7a:4b:e2:bd:f6:ce:2e:0c:57:0a: 70:d8:bd:8d:94:f6:b3:b4:cf:04:f1:0f:a3:aa:36: 69:61:46:16:c9:40:c6:b4:a5:fe:d9:e5:3d:7b:bb: cf:76:5d:86:95:cd:67:75:72:cb:57:50:ed:46:91: 5f:a1:2a:bb:73:28:cd:22:5e:fe:8d:fa:26:e6:83: b9:d0:ff:f3:0d:d5:df:f0:90:c3:e6:bd:a1:42:73: 14:11:f1:02:1c:91:18:86:7e:c7:8d:1a:79:dd:23: 27:c1:7a:31:c9:0b:46:bd:e8:ae:b7:31:bf:7b:00: 3e:10:77:15:9a:54:0f:d9:db:1a:73:7b:38:36:1e: 01:1e:17:19:08:6b:42:40:f5:9b:13:74:2b:90:2d: 8e:0e:ae:21:03:66:d1:a7:c5:b8:43:a4:f6:26:03: b5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:74:70:F4:4A:E9:52:CC:3A:D2:9B:77:6A:54:AD:72:6D:50:4F:7C X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:66:7d:ef:7c:6f:da:ec:23:17:7d:3d:50:03:b1:dc:89:cf: c1:98:a0:db:42:62:ba:60:cc:bc:42:9f:ae:f9:59:59:f1:2e: 9e:06:82:2b:3c:c7:3b:20:c2:5a:86:f0:9d:89:f5:e7:52:21: 76:ec:a0:40:34:60:99:33:50:e7:31:42:1d:a8:ed:32:9b:06: 2e:6f:35:16:ea:e0:71:e5:2c:16:c0:b4:95:23:e0:1e:17:50: 88:87:e2:d9:b2:62:a1:a1:fe:49:53:60:6c:b2:2e:d0:e7:b7: f0:e2:ef:8d:95:af:83:38:24:6e:ac:e1:8e:b7:6a:01:78:91: fd:c9:36:b7:c9:8b:e0:d0:cc:c7:0c:64:a3:d9:5c:c4:c3:f9: 12:cd:3f:5e:fd:83:66:3c:b1:95:ad:b3:70:fa:ca:ab:5d:86: c2:ac:5b:4b:09:ae:ec:ec:10:b5:ad:f9:a9:79:cc:8b:46:74: eb:41:91:75:e4:4b:55:e2:3f:7a:75:08:5e:82:90:fc:b6:bd: 27:85:ce:c2:6c:c2:29:34:9b:b1:ae:d7:65:cf:ec:74:91:43: a5:7a:b4:81:fe:d8:1d:6d:bf:47:07:5c:f0:f6:87:66:2c:db: 72:9f:ba:50:1d:0e:96:b1:99:c1:fc:0c:8d:47:20:6a:b7:8f: db:9c:13:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwNzIxMDYxNzE4WhcNMjUwNzI4MDYxNzE4WjAYMRYwFAYD VQQDEw02ODdkZGI2ZS05Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PqyBaYj5l6Mx0hEKUP2fznssAyxWyWgYeioHJ3uo0erTalvKxplsP41qSyj cxZ3QzrpqiEQGEufNYKWmLMhcw/9kxGUPcwbzh+WLDEbtC8QyVK1+3mWmM3HoJye s3pL4r32zi4MVwpw2L2NlPaztM8E8Q+jqjZpYUYWyUDGtKX+2eU9e7vPdl2Glc1n dXLLV1DtRpFfoSq7cyjNIl7+jfom5oO50P/zDdXf8JDD5r2hQnMUEfECHJEYhn7H jRp53SMnwXoxyQtGveiutzG/ewA+EHcVmlQP2dsac3s4Nh4BHhcZCGtCQPWbE3Qr kC2ODq4hA2bRp8W4Q6T2JgO1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh0cPRK 6VLMOtKbd2pUrXJtUE98MB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Zn3vfG/a7CMXfT1QA7Hcic/BmKDbQmK6YMy8Qp+u+VlZ8S6eBoIr PMc7IMJahvCdifXnUiF27KBANGCZM1DnMUIdqO0ymwYubzUW6uBx5SwWwLSVI+Ae F1CIh+LZsmKhof5JU2Bssi7Q57fw4u+Nla+DOCRurOGOt2oBeJH9yTa3yYvg0MzH DGSj2VzEw/kSzT9e/YNmPLGVrbNw+sqrXYbCrFtLCa7s7BC1rfmpecyLRnTrQZF1 5EtV4j96dQhegpD8tr0nhc7CbMIpNJuxrtdlz+x0kUOlerSB/tgdbb9HB1zw9odm LNtyn7pQHQ6WsZnB/AyNRyBqt4/bnBPo -----END CERTIFICATE-----Generated at Mon Jul 21 18:24:30 2025 by rpki-client