$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: Y4FpLeIHHg/JL0UnVJoC2KYhwL7MqJ6AUkWWkaO8F9g= Subject key identifier: 12:97:75:E6:88:05:86:30:A6:0C:64:7F:D8:00:D6:44:0E:15:8C:AA Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C7E Signing time: Sun 24 Aug 2025 18:16:30 +0000 Manifest this update: Sun 24 Aug 2025 18:16:30 +0000 Manifest next update: Sun 31 Aug 2025 18:16:30 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: 9rJUwPwXt2FKdBE9uT8Lqdm54RS1pilyectTQOQ7lqw=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Aug 24 18:16:30 2025 GMT Not After : Aug 31 18:16:30 2025 GMT Subject: CN=68ab56fe-95d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:f8:8b:be:46:e4:07:1a:ff:64:15:6e:2f: d6:00:f8:7a:56:7a:ea:cb:99:e5:4a:5d:6e:b8:e2: 1e:b9:c2:4a:6d:a6:b7:44:e5:b2:32:a8:85:8c:53: 91:3e:94:f0:94:a0:49:82:cf:0a:41:9b:96:f1:71: ea:f7:f2:01:e8:aa:41:9d:60:b2:21:a1:a0:7b:42: 89:b3:86:b6:3e:2d:9a:cf:0e:bd:3d:f2:4c:b4:30: 1c:38:dd:eb:84:51:e5:2e:3e:ea:c8:72:3a:2d:21: 50:dc:ed:81:cb:1c:fd:ce:19:f3:68:05:39:8f:1c: 35:cb:16:67:d4:fa:8f:e3:c2:8d:31:44:22:ad:2c: 81:81:b6:d1:ce:2d:39:a9:45:42:bf:f1:30:b9:3a: fa:12:12:82:b5:06:e2:c1:f5:ea:fc:95:3d:e1:9e: 46:23:0f:40:7e:8c:30:9f:b0:32:fc:5f:6a:a6:39: c8:31:7d:bb:df:31:14:b3:53:a2:18:1c:cf:7d:10: 4f:b8:f4:f8:f6:10:f1:2e:6f:8b:74:7e:2c:62:97: 7a:11:f4:fe:aa:15:40:d2:71:e6:8a:86:1e:60:ca: 16:08:a3:5c:19:cb:aa:47:8a:5b:c9:24:27:73:12: d4:0c:a8:ac:94:6c:cc:38:84:3c:a9:2e:b3:7c:9a: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:97:75:E6:88:05:86:30:A6:0C:64:7F:D8:00:D6:44:0E:15:8C:AA X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a8:a0:7b:60:9e:af:81:bc:d6:b8:fa:01:73:0f:b4:b7:07: c4:73:10:95:22:4a:5f:d7:ed:27:55:03:a1:1b:a4:51:6a:3e: 22:a6:4c:ba:94:e2:2c:ca:1c:f5:00:d8:d6:32:e7:75:d6:3d: e9:a8:59:bd:dd:2c:b7:38:4d:a9:f3:a9:06:b7:44:11:eb:91: 2c:50:f6:e0:5a:49:d0:78:53:a2:06:81:4b:07:d8:32:7d:c9: 68:76:e5:58:64:ad:d7:ce:15:ec:00:4c:8f:3f:81:06:b9:01: f2:17:2c:01:23:a5:51:5c:2e:19:82:ad:4b:a0:97:ff:73:55: 28:d4:89:b3:ae:21:89:18:de:da:1c:dc:c6:24:90:11:9d:00: ba:b8:fe:ce:a9:2d:2d:0c:70:18:88:4d:53:6b:fd:75:ce:95: 7b:c6:5b:08:56:8b:b5:c9:f3:cf:11:f6:42:f5:4d:09:b0:4e: 63:2c:fd:72:1c:a6:c3:92:5f:c8:6b:0d:f4:b1:b3:4f:af:43: 8d:c0:11:5e:12:5f:7a:15:31:f5:cc:88:06:40:79:70:87:93: b4:73:1c:67:16:6a:65:77:8a:68:50:e2:4b:00:00:7b:9c:da: 5f:09:2e:02:20:b5:4e:2e:7b:a1:fb:94:73:72:1f:2b:41:fd: 11:39:2f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwODI0MTgxNjMwWhcNMjUwODMxMTgxNjMwWjAYMRYwFAYD VQQDEw02OGFiNTZmZS05NWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/n4i75G5Aca/2QVbi/WAPh6Vnrqy5nlSl1uuOIeucJKbaa3ROWyMqiFjFOR PpTwlKBJgs8KQZuW8XHq9/IB6KpBnWCyIaGge0KJs4a2Pi2azw69PfJMtDAcON3r hFHlLj7qyHI6LSFQ3O2Byxz9zhnzaAU5jxw1yxZn1PqP48KNMUQirSyBgbbRzi05 qUVCv/EwuTr6EhKCtQbiwfXq/JU94Z5GIw9Afowwn7Ay/F9qpjnIMX273zEUs1Oi GBzPfRBPuPT49hDxLm+LdH4sYpd6EfT+qhVA0nHmioYeYMoWCKNcGcuqR4pbySQn cxLUDKislGzMOIQ8qS6zfJp7IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKXdeaI BYYwpgxkf9gA1kQOFYyqMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcqKB7YJ6vgbzWuPoBcw+0twfEcxCVIkpf1+0nVQOhG6RRaj4ipky6 lOIsyhz1ANjWMud11j3pqFm93Sy3OE2p86kGt0QR65EsUPbgWknQeFOiBoFLB9gy fcloduVYZK3XzhXsAEyPP4EGuQHyFywBI6VRXC4Zgq1LoJf/c1Uo1ImzriGJGN7a HNzGJJARnQC6uP7OqS0tDHAYiE1Ta/11zpV7xlsIVou1yfPPEfZC9U0JsE5jLP1y HKbDkl/Iaw30sbNPr0ONwBFeEl96FTH1zIgGQHlwh5O0cxxnFmpld4poUOJLAAB7 nNpfCS4CILVOLnuh+5Rzch8rQf0ROS/w -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:06 2025 by rpki-client