$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: hEEqnXDT1vqxnvyHCcwwBxP9Zk2FwIYzuAwdPs5biBo= Subject key identifier: D0:E4:59:41:68:E0:2F:0F:BF:9B:D1:EE:58:8E:00:2D:CE:29:67:FB Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 0282 Signing time: Wed 03 Sep 2025 02:03:51 +0000 Manifest this update: Wed 03 Sep 2025 02:03:50 +0000 Manifest next update: Wed 10 Sep 2025 02:03:50 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: NjR8kOC2opvMN9tIwxrWZVzOuA9+PvkFAld62cpG2WQ=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Sep 3 02:03:50 2025 GMT Not After : Sep 10 02:03:50 2025 GMT Subject: CN=68b7a206-3190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:92:90:89:70:f5:02:49:a4:cf:f4:74:aa: 5a:4f:d9:5b:db:c4:9b:ad:54:0f:0b:00:d7:8c:65: 82:ce:2e:02:d3:36:54:bc:59:5e:d4:03:6a:3c:3f: 2c:e8:65:f8:24:92:d4:c3:53:e3:90:81:ef:06:e1: 9a:37:ba:ae:83:13:c1:11:90:09:ae:5c:9a:ac:1a: cf:10:5a:0a:d7:f0:a3:e2:2b:90:ff:75:45:11:a6: 50:0a:fc:f5:19:3e:33:a3:04:63:96:43:7b:59:52: 18:ed:c8:09:d8:ff:97:4d:9e:04:7e:06:47:4e:5b: 11:d4:6a:c5:21:6c:89:52:b8:c2:54:61:c8:f4:43: 2c:1d:c9:9e:26:75:08:aa:8b:72:e1:6a:b8:d2:63: 27:ae:0e:8c:a3:a9:22:79:0d:f9:5e:d9:67:e7:de: 5d:d4:5a:b8:48:51:e6:59:1e:18:64:4c:f3:0a:04: 40:9c:6d:36:fc:22:7b:3a:4c:63:28:b5:71:1c:c5: a6:3a:07:88:08:a9:b5:a1:32:7b:80:03:bc:20:3e: f5:a0:9a:c3:53:c3:cc:9a:c3:89:79:8e:37:c1:14: d7:dc:7f:b4:a5:a3:9a:7c:62:96:c3:aa:1e:69:91: 6a:84:2b:cd:be:75:91:ae:ee:98:1d:45:ae:be:c1: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E4:59:41:68:E0:2F:0F:BF:9B:D1:EE:58:8E:00:2D:CE:29:67:FB X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:82:4a:dd:59:5e:05:10:3e:d0:22:02:76:78:1d:83:fe:e5: 46:e8:45:9f:6e:b5:3c:b7:07:e8:cf:3d:12:4e:86:e5:b8:e0: 6b:37:5f:14:1e:b7:ea:c7:59:22:9c:b8:c8:06:d4:d2:41:94: f3:98:50:ee:28:94:2c:22:4e:47:5e:c3:b5:c4:14:13:22:9d: 55:95:f0:05:58:3d:99:2d:03:28:cc:f3:5d:1e:44:36:8d:fa: d0:51:71:b0:9d:99:63:e8:cf:52:a8:61:d7:d2:54:ac:df:38: 2f:02:cd:3f:ce:8d:dd:78:ab:c8:6b:1b:e2:77:c9:9d:64:17: ae:80:33:98:46:d0:53:2a:7a:75:6a:c8:f2:b3:9f:cb:00:90: 7c:7d:2a:36:3b:ea:44:b0:2f:32:58:2c:0d:02:41:80:c3:4a: 54:9b:7f:5c:39:f3:3d:91:01:a0:b1:e4:ac:f2:ed:a3:0e:4c: 61:5e:9e:9e:ce:90:8b:29:04:d6:40:e7:ee:86:da:1b:37:17: 02:66:49:06:02:25:78:4b:a2:dc:f7:d9:ef:07:f3:d1:45:c1: 79:6f:c9:30:a8:52:c0:41:19:7e:de:fb:b0:36:b0:71:f9:13: a0:fb:08:a3:f6:05:bf:84:8e:6a:41:f0:2b:38:c2:0f:7e:bf: 5b:0d:bf:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwOTAzMDIwMzUwWhcNMjUwOTEwMDIwMzUwWjAYMRYwFAYD VQQDEw02OGI3YTIwNi0zMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCuSkIlw9QJJpM/0dKpaT9lb28SbrVQPCwDXjGWCzi4C0zZUvFle1ANqPD8s 6GX4JJLUw1PjkIHvBuGaN7qugxPBEZAJrlyarBrPEFoK1/Cj4iuQ/3VFEaZQCvz1 GT4zowRjlkN7WVIY7cgJ2P+XTZ4EfgZHTlsR1GrFIWyJUrjCVGHI9EMsHcmeJnUI qoty4Wq40mMnrg6Mo6kieQ35Xtln595d1Fq4SFHmWR4YZEzzCgRAnG02/CJ7Okxj KLVxHMWmOgeICKm1oTJ7gAO8ID71oJrDU8PMmsOJeY43wRTX3H+0paOafGKWw6oe aZFqhCvNvnWRru6YHUWuvsFTdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDkWUFo 4C8Pv5vR7liOAC3OKWf7MB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXgkrdWV4FED7QIgJ2eB2D/uVG6EWfbrU8twfozz0STobluOBrN18U Hrfqx1kinLjIBtTSQZTzmFDuKJQsIk5HXsO1xBQTIp1VlfAFWD2ZLQMozPNdHkQ2 jfrQUXGwnZlj6M9SqGHX0lSs3zgvAs0/zo3deKvIaxvid8mdZBeugDOYRtBTKnp1 asjys5/LAJB8fSo2O+pEsC8yWCwNAkGAw0pUm39cOfM9kQGgseSs8u2jDkxhXp6e zpCLKQTWQOfuhtobNxcCZkkGAiV4S6Lc99nvB/PRRcF5b8kwqFLAQRl+3vuwNrBx +ROg+wij9gW/hI5qQfArOMIPfr9bDb+6 -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:28 2025 by rpki-client