$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: YBUGqCurMfsQ0Gg45S0DUx6ox8IlRie3/U5h7pfoEZo= Subject key identifier: AA:CB:2A:3A:A6:55:BF:37:65:7A:24:DC:28:E3:CC:86:FA:56:93:CD Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 0171 Signing time: Tue 19 Aug 2025 04:06:23 +0000 Manifest this update: Tue 19 Aug 2025 04:06:22 +0000 Manifest next update: Tue 26 Aug 2025 04:06:22 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: i/VJu+G3ud8HLJjKTkI73Hr8fsyHhbn7H8QY1zA8wuk=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Aug 19 04:06:22 2025 GMT Not After : Aug 26 04:06:22 2025 GMT Subject: CN=68a3f83f-1590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:41:21:0b:16:ad:b2:e3:de:d1:d1:d7:c4: 7e:98:bb:2a:bf:0a:eb:80:b4:02:37:15:ff:c5:8c: 59:c3:9b:27:49:b8:03:47:d8:f9:c4:6a:ba:6a:e9: 51:99:53:cb:8f:48:33:6f:9a:b7:0a:8c:b8:29:f8: 2a:6a:2a:74:92:2a:2c:33:ed:31:c7:5b:a5:68:06: 3a:ec:6a:e8:8c:20:7f:fa:40:a3:5c:62:9d:d5:78: 07:1e:ae:a8:17:e0:50:61:3f:ca:7a:fc:ea:91:86: 21:f1:b0:38:24:48:0c:21:5b:d0:6c:62:54:9f:e9: 54:9e:53:fd:2a:52:15:75:1e:19:b4:5b:da:07:a3: ce:ee:e3:bd:cb:ca:9e:8f:69:ec:8f:f0:9c:14:9d: e6:e4:74:1b:c3:0b:8d:ad:44:be:c3:d3:0d:a0:63: 3c:a5:ee:98:ca:a7:a9:c4:34:c9:70:0b:b6:54:74: 4a:e9:e1:73:be:58:4c:55:f3:f8:32:e2:35:64:cf: 56:a1:c3:2f:97:d5:6b:ae:9c:7b:d6:af:80:e8:3d: d6:03:65:3b:20:73:cd:62:70:4d:c0:c5:41:a2:96: 20:6a:62:91:aa:ab:ef:9b:f3:b0:46:14:1c:8a:f0: 09:0b:91:88:e9:89:f4:06:9d:cc:6a:9f:b9:8d:cd: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CB:2A:3A:A6:55:BF:37:65:7A:24:DC:28:E3:CC:86:FA:56:93:CD X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:80:b7:ae:0b:23:6b:f8:77:28:0b:19:2d:fd:fa:5b:07:1b: 64:81:6c:ff:e6:7f:98:52:3e:fe:42:50:32:87:36:ce:19:68: 07:af:a2:03:74:e7:f7:b7:7a:bd:f7:39:24:7b:57:f8:55:14: a2:d6:78:bb:25:02:41:55:57:76:08:55:f8:db:65:f7:58:02: e1:cc:e9:57:6f:6b:f1:2d:5c:aa:d1:18:6b:1e:10:eb:b4:3f: f9:ed:7d:12:c3:12:39:59:55:97:58:06:6d:0a:c4:51:f4:bf: 69:7b:a0:66:b2:95:99:6a:31:14:d3:e4:42:e1:ba:0a:5d:d7: 2d:ef:7f:5d:12:e9:2d:1e:0a:9d:36:20:21:57:75:e7:10:4e: e4:61:97:9c:ad:55:f0:4e:63:6c:ed:6e:45:f5:2f:00:06:b7: 69:07:0a:35:86:50:05:02:16:d5:f1:46:2a:8d:5e:98:d1:11: 74:d5:cf:61:3c:de:ae:c6:12:8c:bf:d9:da:25:1b:8b:16:b4: 24:29:dc:eb:81:fc:42:3d:e9:ac:a1:bb:f8:8d:15:89:1f:55: ec:13:5c:8f:50:da:97:29:cd:c6:7e:ec:ac:6f:07:15:5b:f8: 13:d7:97:61:69:4b:91:f6:df:52:2a:b7:a6:b4:4b:e4:b2:f4: 26:58:2d:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwODE5MDQwNjIyWhcNMjUwODI2MDQwNjIyWjAYMRYwFAYD VQQDEw02OGEzZjgzZi0xNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAZBIQsWrbLj3tHR18R+mLsqvwrrgLQCNxX/xYxZw5snSbgDR9j5xGq6aulR mVPLj0gzb5q3Coy4Kfgqaip0kiosM+0xx1ulaAY67GrojCB/+kCjXGKd1XgHHq6o F+BQYT/KevzqkYYh8bA4JEgMIVvQbGJUn+lUnlP9KlIVdR4ZtFvaB6PO7uO9y8qe j2nsj/CcFJ3m5HQbwwuNrUS+w9MNoGM8pe6YyqepxDTJcAu2VHRK6eFzvlhMVfP4 MuI1ZM9WocMvl9Vrrpx71q+A6D3WA2U7IHPNYnBNwMVBopYgamKRqqvvm/OwRhQc ivAJC5GI6Yn0Bp3Map+5jc0LhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrLKjqm Vb83ZXok3CjjzIb6VpPNMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmgLeuCyNr+HcoCxkt/fpbBxtkgWz/5n+YUj7+QlAyhzbOGWgHr6ID dOf3t3q99zkke1f4VRSi1ni7JQJBVVd2CFX422X3WALhzOlXb2vxLVyq0RhrHhDr tD/57X0SwxI5WVWXWAZtCsRR9L9pe6BmspWZajEU0+RC4boKXdct739dEuktHgqd NiAhV3XnEE7kYZecrVXwTmNs7W5F9S8ABrdpBwo1hlAFAhbV8UYqjV6Y0RF01c9h PN6uxhKMv9naJRuLFrQkKdzrgfxCPemsobv4jRWJH1XsE1yPUNqXKc3GfuysbwcV W/gT15dhaUuR9t9SKremtEvksvQmWC0A -----END CERTIFICATE-----Generated at Wed Aug 20 13:53:22 2025 by rpki-client