$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json) Hash identifier: 8YbmMf7qsTskK3klLHWdJg/81k08+aX1EG/OR0eSDqA= Subject key identifier: B8:43:0E:B8:64:56:79:E2:FB:0F:AF:72:14:45:F0:58:E3:BC:F1:CA Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft Manifest number: 0400 Signing time: Sat 19 Jul 2025 00:51:34 +0000 Manifest this update: Sat 19 Jul 2025 00:51:33 +0000 Manifest next update: Sat 26 Jul 2025 00:51:33 +0000 Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: Ctytum6Ceh8Z0inSXoTCvPyx7Wphgzblvepa4wCm0Zk=) 2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Validity Not Before: Jul 19 00:51:33 2025 GMT Not After : Jul 26 00:51:33 2025 GMT Subject: CN=687aec16-3213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:70:34:b5:d7:e2:e6:f6:f3:9a:66:90:9f: 9a:73:3d:57:54:3e:32:37:3d:4f:6d:43:8a:1b:70: 44:00:da:34:7d:72:4e:89:5e:6a:f3:6d:cf:79:ef: b5:9e:33:ef:b2:50:b0:84:ef:c9:43:5e:62:ad:b9: 25:dc:c4:28:e6:5e:06:21:9e:14:69:cc:42:31:09: ba:44:ee:ca:99:ee:27:c6:39:b4:83:54:3d:20:98: f6:18:a4:36:74:06:ee:45:14:45:c9:a7:b1:b8:0e: a8:3a:2f:83:fd:70:0e:27:c8:9d:7a:f3:60:79:26: da:e1:a0:37:55:14:ef:97:f2:88:38:17:f3:f6:27: b6:13:5a:3e:ce:6a:f7:df:ed:83:68:a6:70:d7:cd: d6:c1:6f:a6:87:9b:a5:9b:aa:ee:99:0c:ea:41:7f: e7:10:39:09:9b:3b:12:a6:9b:d6:03:27:e4:cd:71: bd:5b:00:92:23:29:c4:06:96:ee:23:c5:58:e2:ce: 1d:20:65:fa:f5:92:e9:88:ef:5b:f6:e8:84:d2:1e: 82:e8:7d:91:92:16:1a:2d:af:94:55:d0:e7:62:ab: 75:38:fa:91:14:62:5d:90:4c:d5:22:f2:65:b4:5a: 25:4a:bf:e7:56:59:08:e9:57:e2:48:53:9e:6e:0a: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:43:0E:B8:64:56:79:E2:FB:0F:AF:72:14:45:F0:58:E3:BC:F1:CA X509v3 Authority Key Identifier: keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2b:3e:5f:b2:43:6c:b9:74:e2:a0:56:62:85:9e:0e:67:1e: 62:02:d6:73:54:d8:a0:49:47:0a:3f:98:1d:45:3c:d6:49:e1: 16:ac:55:01:c2:49:36:53:71:6f:e8:fe:72:5a:88:29:25:89: 86:81:38:d0:19:1f:2b:29:25:3b:4a:2b:7e:b8:30:42:b4:d6: d0:3c:cb:c6:ff:0e:8b:d8:03:be:17:d9:1b:cd:00:62:b6:3a: 4b:c4:f1:91:00:e1:83:6d:74:37:3f:1f:8e:54:01:20:54:b2: d8:37:2c:5c:43:52:ce:3d:ac:9a:29:86:32:31:0c:cd:49:9b: 4a:4c:f8:fe:3f:d0:35:e3:21:22:22:9b:64:34:39:72:ec:b9: b0:c5:70:ed:23:9c:11:bc:9d:1f:bb:12:49:4d:0a:7f:aa:9a: 6a:58:77:3a:11:78:f1:93:f2:cc:82:4b:20:d6:b9:d9:eb:8d: 29:4e:21:35:97:fe:91:12:d8:84:73:6d:49:52:b2:8c:01:a0: b7:36:3f:f6:f3:fc:4c:85:26:d2:2a:ee:0c:60:7c:c3:18:45: ec:5d:78:aa:cc:c7:fd:2b:0a:df:0d:13:22:c9:45:6d:d2:50: a0:f2:ce:fe:f3:0d:25:d9:7e:99:0a:82:ae:57:38:1a:b4:33: a6:a6:8f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx QTQ4QUUxQTQwHhcNMjUwNzE5MDA1MTMzWhcNMjUwNzI2MDA1MTMzWjAYMRYwFAYD VQQDEw02ODdhZWMxNi0zMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AlwNLXX4ub285pmkJ+acz1XVD4yNz1PbUOKG3BEANo0fXJOiV5q823Pee+1 njPvslCwhO/JQ15irbkl3MQo5l4GIZ4UacxCMQm6RO7Kme4nxjm0g1Q9IJj2GKQ2 dAbuRRRFyaexuA6oOi+D/XAOJ8idevNgeSba4aA3VRTvl/KIOBfz9ie2E1o+zmr3 3+2DaKZw183WwW+mh5ulm6rumQzqQX/nEDkJmzsSppvWAyfkzXG9WwCSIynEBpbu I8VY4s4dIGX69ZLpiO9b9uiE0h6C6H2RkhYaLa+UVdDnYqt1OPqRFGJdkEzVIvJl tFolSr/nVlkI6VfiSFOebgqPKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhDDrhk Vnni+w+vchRF8FjjvPHKMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa RTg4eHI4LXBvcElhU0s0YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKz5fskNsuXTioFZihZ4OZx5iAtZzVNigSUcKP5gdRTzWSeEWrFUB wkk2U3Fv6P5yWogpJYmGgTjQGR8rKSU7Sit+uDBCtNbQPMvG/w6L2AO+F9kbzQBi tjpLxPGRAOGDbXQ3Px+OVAEgVLLYNyxcQ1LOPayaKYYyMQzNSZtKTPj+P9A14yEi IptkNDly7LmwxXDtI5wRvJ0fuxJJTQp/qppqWHc6EXjxk/LMgksg1rnZ640pTiE1 l/6REtiEc21JUrKMAaC3Nj/28/xMhSbSKu4MYHzDGEXsXXiqzMf9KwrfDRMiyUVt 0lCg8s7+8w0l2X6ZCoKuVzgatDOmpo92 -----END CERTIFICATE-----Generated at Sun Jul 20 06:44:26 2025 by rpki-client