$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: q05fYTMU6VVaw+TzKcsdM9uE2266o0QqUv65Ym2uuks= Subject key identifier: 1E:C4:36:45:D3:88:96:D5:15:EB:35:F8:DC:C0:2F:F0:C5:47:B1:E0 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3556 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 3506 Signing time: Thu 04 Sep 2025 14:22:51 +0000 Manifest this update: Thu 04 Sep 2025 14:22:50 +0000 Manifest next update: Thu 11 Sep 2025 14:22:50 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: 93k+GO4Ubo3lTHPyWwy70j6fn8SqfSkPFWWlsTIoAMg=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13654 (0x3556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Sep 4 14:22:50 2025 GMT Not After : Sep 11 14:22:50 2025 GMT Subject: CN=68b9a0bb-b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:69:89:85:2f:8f:33:36:64:bd:04:2e:4f: 29:9a:6a:20:bd:3d:21:a6:55:ff:89:9c:12:1d:da: 08:cf:eb:02:ad:1a:50:b4:d9:53:2a:37:7d:96:13: 20:47:b7:12:80:74:98:06:c1:47:d1:01:1d:1d:88: 6c:d7:f8:b8:24:89:25:98:da:fe:e6:07:94:b5:e2: 8a:24:30:cb:78:7a:b4:cc:d4:b2:28:95:69:ed:5a: 67:07:9d:1a:27:b6:58:de:78:a4:77:a5:bf:ae:3c: 1c:e7:7d:38:60:ee:4e:d8:15:d4:29:b7:f4:48:71: ad:f5:22:a8:f1:d1:31:a6:09:1a:94:6e:29:b2:76: 05:08:6a:1d:d0:1b:85:1f:9c:2c:2d:20:5c:18:93: d3:18:b5:c7:3f:bf:8b:92:df:2b:bc:db:e0:c5:d5: 49:71:f1:f9:54:41:c2:98:ff:11:5c:a7:3f:5b:b6: 20:29:c4:7e:20:c6:53:f1:cb:f3:41:93:7d:b9:4e: dc:f6:13:f5:0a:0a:e8:65:f4:ec:e2:75:fb:88:4a: c6:e2:8d:4e:22:0e:8e:8b:df:bb:dc:da:4f:25:15: 6f:03:bb:ea:12:b0:6c:97:78:28:f0:7d:b6:79:e7: 3d:2a:d2:94:ff:cb:bf:be:74:41:9e:9b:c0:7f:1b: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C4:36:45:D3:88:96:D5:15:EB:35:F8:DC:C0:2F:F0:C5:47:B1:E0 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:1b:11:08:19:1f:2d:d0:af:3a:10:be:7c:aa:1f:c6:9d:8c: 16:2a:12:b5:88:30:8b:50:54:90:3a:e2:7e:73:b0:fb:c9:ac: 19:22:c9:15:8f:41:26:2a:a7:37:02:91:d0:dd:df:cb:d8:85: f1:91:60:1c:33:4b:f3:74:9c:6b:d0:0a:97:e1:06:37:a7:e6: d2:4e:98:fc:a2:d0:fd:93:11:09:92:43:1f:0e:ec:b0:2b:41: 53:ed:96:e6:18:1c:b3:ed:fc:3b:dc:e2:f3:8c:44:e0:0e:ea: f3:b7:50:8b:69:5b:0e:24:55:06:b9:83:0c:61:d9:c5:14:f3: 76:17:69:dd:f4:c0:47:d5:81:81:5e:30:b0:5c:a3:99:4a:81: 35:d0:4e:62:c3:c9:1e:92:75:18:30:45:3f:82:0d:2c:91:55: e6:4b:23:4b:4a:54:c0:11:8a:e8:0f:67:19:56:37:77:3e:cc: b2:68:df:c4:7d:d7:eb:12:29:47:a2:5c:9c:48:19:4b:ef:6f: 4e:bc:b0:76:99:57:10:bd:44:44:cd:00:04:13:bc:70:0f:37: 41:74:7b:30:95:8e:28:9d:72:ba:f0:45:11:ec:db:a4:5a:f0: 00:33:7b:12:5d:c4:e7:2b:04:2a:f0:6a:75:65:aa:b2:5c:60: ee:c2:51:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwOTA0MTQyMjUwWhcNMjUwOTExMTQyMjUwWjAYMRYwFAYD VQQDEw02OGI5YTBiYi1iM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wtpiYUvjzM2ZL0ELk8pmmogvT0hplX/iZwSHdoIz+sCrRpQtNlTKjd9lhMg R7cSgHSYBsFH0QEdHYhs1/i4JIklmNr+5geUteKKJDDLeHq0zNSyKJVp7VpnB50a J7ZY3nikd6W/rjwc5304YO5O2BXUKbf0SHGt9SKo8dExpgkalG4psnYFCGod0BuF H5wsLSBcGJPTGLXHP7+Lkt8rvNvgxdVJcfH5VEHCmP8RXKc/W7YgKcR+IMZT8cvz QZN9uU7c9hP1CgroZfTs4nX7iErG4o1OIg6Oi9+73NpPJRVvA7vqErBsl3go8H22 eec9KtKU/8u/vnRBnpvAfxuCAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7ENkXT iJbVFes1+NzAL/DFR7HgMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIGxEIGR8t0K86EL58qh/GnYwWKhK1iDCLUFSQOuJ+c7D7yawZIskV j0EmKqc3ApHQ3d/L2IXxkWAcM0vzdJxr0AqX4QY3p+bSTpj8otD9kxEJkkMfDuyw K0FT7ZbmGByz7fw73OLzjETgDurzt1CLaVsOJFUGuYMMYdnFFPN2F2nd9MBH1YGB XjCwXKOZSoE10E5iw8keknUYMEU/gg0skVXmSyNLSlTAEYroD2cZVjd3PsyyaN/E fdfrEilHolycSBlL729OvLB2mVcQvUREzQAEE7xwDzdBdHswlY4onXK68EUR7Nuk WvAAM3sSXcTnKwQq8Gp1ZaqyXGDuwlH8 -----END CERTIFICATE-----Generated at Sat Sep 6 08:14:56 2025 by rpki-client