$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: 9KZGV2kpyz3ZqsFYW6mMHEAjw7Ka6HxXCiQ5j/B/+s4= Subject key identifier: 50:60:EA:C8:E9:7B:5D:F6:99:AF:99:E3:E0:F9:64:F8:B5:BA:70:49 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 154B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1530 Signing time: Fri 18 Jul 2025 16:56:35 +0000 Manifest this update: Fri 18 Jul 2025 16:56:35 +0000 Manifest next update: Fri 25 Jul 2025 16:56:35 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: hgD9KHd2Vk7+9qg4v6QWk9kGU9Kybdfcbdq15eBhLHE=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5451 (0x154b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Jul 18 16:56:35 2025 GMT Not After : Jul 25 16:56:35 2025 GMT Subject: CN=687a7cc3-2de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:e3:74:b7:a7:5d:a7:5c:28:b5:6a:7e:85: 65:e5:f8:89:49:a9:b6:5c:f7:1b:86:af:41:1b:8d: 0d:8c:03:3d:d5:a8:67:8d:ea:61:e1:05:e4:15:15: 3f:a6:d7:d0:a2:26:d4:7f:7f:51:86:c2:01:ca:75: d0:14:70:9b:4b:49:04:0d:f4:62:31:06:e2:e7:fc: 41:94:96:76:3b:f6:d5:d2:a1:0d:8e:e8:68:6d:1c: 3a:a2:85:c7:5a:47:e1:a2:c9:e1:4b:ec:9a:62:44: 80:0c:ab:d8:f6:b9:70:c5:83:62:90:19:94:00:4c: 05:c8:bc:c5:d9:4e:f6:0f:1d:15:b9:46:29:be:91: 00:08:b3:fc:ec:e2:98:a2:4a:b8:51:ff:38:13:93: 48:36:81:28:77:c6:4b:56:88:5b:d4:73:b4:87:67: 1b:b8:f1:1c:a0:bf:70:73:f7:35:19:47:92:b7:90: 9d:7a:49:d1:26:8c:5b:f4:f3:21:74:d3:13:82:15: 45:98:e0:ce:2d:82:9a:f0:1e:8e:cd:85:53:bc:12: 6c:89:19:4c:50:35:7e:b2:c7:98:49:11:28:25:45: 5f:90:3c:b1:8a:74:7f:1b:ff:8f:73:9f:50:f6:04: dc:01:a7:ec:07:91:34:69:01:6b:7f:9f:b0:a2:b1: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:60:EA:C8:E9:7B:5D:F6:99:AF:99:E3:E0:F9:64:F8:B5:BA:70:49 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b3:90:39:7b:de:fa:79:58:76:ca:2d:dc:ac:12:56:5e:ea: 78:ce:69:ba:14:87:ee:07:d1:93:5f:d9:7d:cb:6f:27:83:f9: ac:2e:8b:7b:ed:6a:d5:70:a0:60:12:b3:81:cf:ef:5a:e9:cc: ef:49:90:98:f0:d1:01:9e:26:17:92:28:5a:ee:1e:af:a7:db: 97:bc:52:82:8b:2e:7d:ae:71:db:d5:a0:6b:46:ae:65:e1:2c: 6d:9a:ef:9d:fc:9e:12:b7:fd:2b:5e:36:cf:1d:e2:36:1a:c5: d2:9b:fd:62:1c:93:b3:f7:96:e4:75:10:01:18:5f:95:f8:c7: 8c:d3:a3:d7:c8:2b:2f:af:d4:fa:5a:aa:4c:4f:6f:d8:35:e4: 7f:9c:27:8e:bb:a0:8d:ca:95:90:0f:15:8f:26:bc:a7:86:7c: 30:18:37:ea:f9:02:ea:e8:9c:b1:60:59:45:11:6b:11:37:08: e9:f5:d1:f7:83:84:e7:f7:dd:41:7c:b9:49:6b:f4:2e:ae:15: ca:a5:85:cf:94:28:f7:cd:e3:cb:1e:71:3c:00:ca:2f:a8:5a: ec:80:db:28:06:18:7e:cd:d5:35:b0:a5:06:b2:39:df:60:a2: 63:5c:d5:14:5e:e0:6d:62:6f:f8:e7:75:90:ac:b7:a7:b8:30: 3a:d1:80:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNzE4MTY1NjM1WhcNMjUwNzI1MTY1NjM1WjAYMRYwFAYD VQQDEw02ODdhN2NjMy0yZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOfjdLenXadcKLVqfoVl5fiJSam2XPcbhq9BG40NjAM91ahnjeph4QXkFRU/ ptfQoibUf39RhsIBynXQFHCbS0kEDfRiMQbi5/xBlJZ2O/bV0qENjuhobRw6ooXH WkfhosnhS+yaYkSADKvY9rlwxYNikBmUAEwFyLzF2U72Dx0VuUYpvpEACLP87OKY okq4Uf84E5NINoEod8ZLVohb1HO0h2cbuPEcoL9wc/c1GUeSt5CdeknRJoxb9PMh dNMTghVFmODOLYKa8B6OzYVTvBJsiRlMUDV+sseYSREoJUVfkDyxinR/G/+Pc59Q 9gTcAafsB5E0aQFrf5+worHidQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBg6sjp e132ma+Z4+D5ZPi1unBJMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzs5A5e976eVh2yi3crBJWXup4zmm6FIfuB9GTX9l9y28ng/msLot7 7WrVcKBgErOBz+9a6czvSZCY8NEBniYXkiha7h6vp9uXvFKCiy59rnHb1aBrRq5l 4Sxtmu+d/J4St/0rXjbPHeI2GsXSm/1iHJOz95bkdRABGF+V+MeM06PXyCsvr9T6 WqpMT2/YNeR/nCeOu6CNypWQDxWPJrynhnwwGDfq+QLq6JyxYFlFEWsRNwjp9dH3 g4Tn991BfLlJa/QurhXKpYXPlCj3zePLHnE8AMovqFrsgNsoBhh+zdU1sKUGsjnf YKJjXNUUXuBtYm/453WQrLenuDA60YBK -----END CERTIFICATE-----Generated at Sun Jul 20 03:49:12 2025 by rpki-client