$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: kdX0CIK9NW8MoBRDpL09qOZBbkNBcsQQZ21xxEwFO/8= Subject key identifier: AB:32:4C:8F:42:CE:81:B0:8C:D1:2A:1A:F6:90:BB:F1:64:48:D7:ED Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: 01B4 Signing time: Sat 23 Aug 2025 03:13:37 +0000 Manifest this update: Sat 23 Aug 2025 03:13:36 +0000 Manifest next update: Sat 30 Aug 2025 03:13:36 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: dhlo0eGoCNQiav+KsGXGKxQGR8XlO615d+k8+WnJdgs=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Aug 23 03:13:36 2025 GMT Not After : Aug 30 03:13:36 2025 GMT Subject: CN=68a931e1-952a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:b3:d3:94:ef:07:8c:62:cf:cf:78:7d:d7: c1:b3:ea:57:4e:79:da:23:c6:56:dd:89:3b:46:f7: 20:78:e6:3d:ee:ff:30:43:ff:c4:12:ab:5c:14:d4: e8:2f:b8:f9:3a:d3:f7:e8:2f:b1:8c:e4:31:e7:a1: ca:5d:81:7f:41:b6:ff:b9:ad:04:26:fb:d5:fe:c6: a1:97:5c:4e:a0:e9:f7:98:8c:3e:96:ac:3d:62:6e: a8:00:81:9a:fe:d2:c9:43:75:4a:2b:a6:fb:8e:e6: 37:bc:13:75:71:33:66:d9:26:eb:96:57:74:6e:97: 40:52:ba:bb:ec:3c:1b:16:5f:64:9b:84:3b:18:66: 4b:ff:e8:ad:5b:ff:a4:87:21:9f:94:ca:d4:49:dd: d3:7b:3f:fb:54:03:2c:28:75:07:82:9a:0d:5b:05: 30:4e:86:dd:5a:2e:74:2c:35:cd:b7:85:39:c0:5f: 7e:4f:dc:71:49:d7:c7:52:70:ca:7e:d4:2d:54:da: ab:14:c7:a0:1c:dd:09:58:23:ec:33:98:e2:ef:28: ac:a1:d7:de:a2:99:26:3c:3b:e1:54:6b:74:07:35: b5:79:09:fd:38:6b:04:8b:10:0b:28:13:92:23:6f: 2d:00:ea:b1:df:51:95:68:8b:cf:9c:f6:8b:27:b2: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:4C:8F:42:CE:81:B0:8C:D1:2A:1A:F6:90:BB:F1:64:48:D7:ED X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1f:ce:a1:16:aa:78:21:e1:a7:b4:6d:14:3b:3b:45:76:b6: 57:68:14:9d:ec:37:a5:4c:c0:f6:d0:d7:b0:68:7b:b6:25:5c: 20:27:f1:83:4c:55:fa:1a:a2:a2:30:c6:a2:3b:8a:b2:a3:6f: 82:eb:95:f2:b5:45:a9:46:2a:0e:48:4d:00:bf:65:10:3f:99: 64:81:c3:20:2e:bf:48:31:2b:04:7f:b6:a0:b1:6c:d9:9b:80: b3:71:57:24:dc:82:13:e8:3d:a7:6b:c6:5a:90:fe:db:68:cc: f8:74:4a:20:cb:39:b7:d6:10:26:e3:f0:15:ed:fb:02:f4:42: c3:46:d0:3a:b3:0e:8b:3b:79:b3:61:f5:ee:7c:85:66:34:7e: 6f:03:a8:26:fa:c7:fa:18:7f:4a:d9:ae:7c:69:99:78:32:64: ea:99:c3:3a:16:a6:aa:70:f1:90:38:8f:8b:40:a8:65:cd:0d: 29:1f:d4:e4:ae:e1:ed:25:89:98:e7:80:0f:14:eb:7e:a5:94: 6b:cf:bd:ad:af:f0:91:e1:5b:6e:40:75:ac:0c:15:d0:27:f9: 41:10:00:79:07:ca:13:27:09:39:f3:84:cd:23:e8:f8:cb:cf: 55:31:95:52:b6:f2:99:22:0f:24:13:a4:99:c9:ef:94:43:03: ec:95:dd:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjUwODIzMDMxMzM2WhcNMjUwODMwMDMxMzM2WjAYMRYwFAYD VQQDEw02OGE5MzFlMS05NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn+z05TvB4xiz894fdfBs+pXTnnaI8ZW3Yk7RvcgeOY97v8wQ//EEqtcFNTo L7j5OtP36C+xjOQx56HKXYF/Qbb/ua0EJvvV/sahl1xOoOn3mIw+lqw9Ym6oAIGa /tLJQ3VKK6b7juY3vBN1cTNm2Sbrlld0bpdAUrq77DwbFl9km4Q7GGZL/+itW/+k hyGflMrUSd3Tez/7VAMsKHUHgpoNWwUwTobdWi50LDXNt4U5wF9+T9xxSdfHUnDK ftQtVNqrFMegHN0JWCPsM5ji7yisodfeopkmPDvhVGt0BzW1eQn9OGsEixALKBOS I28tAOqx31GVaIvPnPaLJ7Jf2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsyTI9C zoGwjNEqGvaQu/FkSNftMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPH86hFqp4IeGntG0UOztFdrZXaBSd7DelTMD20NewaHu2JVwgJ/GD TFX6GqKiMMaiO4qyo2+C65XytUWpRioOSE0Av2UQP5lkgcMgLr9IMSsEf7agsWzZ m4CzcVck3IIT6D2na8ZakP7baMz4dEogyzm31hAm4/AV7fsC9ELDRtA6sw6LO3mz YfXufIVmNH5vA6gm+sf6GH9K2a58aZl4MmTqmcM6FqaqcPGQOI+LQKhlzQ0pH9Tk ruHtJYmY54APFOt+pZRrz72tr/CR4VtuQHWsDBXQJ/lBEAB5B8oTJwk584TNI+j4 y89VMZVStvKZIg8kE6SZye+UQwPsld01 -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:19 2025 by rpki-client