$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: vcQ2a7OnQymRhQ/DhOOJv0C/obyIfo21MAegF5SJszA= Subject key identifier: C4:90:B0:13:14:8C:1B:3B:94:AE:53:B1:7F:B1:B4:78:91:7D:67:A7 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 356F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 351F Signing time: Wed 22 Oct 2025 14:23:38 +0000 Manifest this update: Wed 22 Oct 2025 14:23:37 +0000 Manifest next update: Wed 29 Oct 2025 14:23:37 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: 2y+V12l45nzPZvGnEMpnMnDPc6tmaCpCAfnx3fHtLN4=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 13:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13679 (0x356f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Oct 22 14:23:37 2025 GMT Not After : Oct 29 14:23:37 2025 GMT Subject: CN=68f8e8ea-949b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:b6:97:b3:7e:30:04:82:a9:34:be:ea:26: 9e:59:15:03:37:8c:22:00:a8:a0:26:ef:16:b6:3c: aa:70:3a:4d:60:9c:86:9b:37:ce:7f:2a:31:17:6a: eb:29:8c:2f:8b:72:c9:3f:88:1c:ea:cb:54:26:82: da:ab:87:5f:ba:9a:75:39:ec:15:ff:92:70:57:8c: 04:bc:a3:8a:53:d7:f1:4b:d7:0f:a9:d4:05:a7:50: 89:55:d6:71:d7:ea:4e:0a:47:a5:71:23:3e:17:db: 7e:20:7b:4a:d0:9b:b2:66:a4:b9:a0:75:5b:1e:5c: bb:67:fe:82:b9:e4:2b:88:2c:3f:b6:71:5c:17:fd: 16:0e:a5:2e:db:57:b9:92:12:45:f3:2b:30:a3:dd: 5c:2d:43:9e:57:00:b9:23:0f:ba:8b:60:bd:00:15: 45:7e:b6:7c:56:7a:18:1d:c4:51:a8:4d:a4:02:a0: 71:90:49:c1:ed:3c:18:30:67:cb:00:d1:1d:54:fb: c6:4d:f8:31:47:d2:bc:ce:45:62:fd:68:db:0c:0b: df:ea:a7:65:d3:8c:df:98:8c:ae:70:55:d8:4c:4f: 1c:99:ac:7f:76:a9:c3:1d:ef:84:79:15:36:ee:e4: da:bd:75:5a:77:f9:29:8d:59:a9:0a:d6:6f:cd:76: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:90:B0:13:14:8C:1B:3B:94:AE:53:B1:7F:B1:B4:78:91:7D:67:A7 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:86:ce:ae:68:ab:02:c8:76:b5:bb:d0:2d:b2:86:0f:9b:3a: 65:32:de:41:83:85:62:6c:04:16:5a:e9:3a:80:c9:24:b6:33: 5f:4b:83:15:d0:83:38:d8:2f:ed:02:c4:dc:78:b4:44:60:c3: ce:92:2f:d8:7e:43:fc:b1:eb:e0:1b:a5:57:94:61:3f:92:bf: 7d:2d:9e:da:22:ff:c8:c6:0d:f0:ca:a9:37:7d:e6:74:25:40: 5f:65:93:dd:2b:87:41:8c:e5:0c:d5:4b:c5:21:76:48:64:24: 4b:ad:66:b6:59:aa:90:84:d5:0a:25:eb:b3:bf:31:d3:8e:50: 6e:af:b2:bb:5f:8c:9a:d0:3b:d3:0f:be:d8:33:c2:55:4d:7a: bd:38:7a:4c:ca:aa:80:62:22:ca:8b:b5:15:43:a3:39:8a:ed: 40:87:4f:e9:2e:52:ba:ff:85:74:7a:49:4d:46:dd:52:de:f0: 6a:e4:0e:b1:5b:56:dc:ae:23:6c:fb:46:ed:41:84:0c:0e:ad: 05:e3:1d:d7:d1:f1:a9:28:8d:b4:38:89:20:f1:4d:a8:cb:4a: 92:12:44:43:70:b9:e7:51:41:3c:bb:91:27:52:9f:56:95:57: 5f:1f:4f:9a:62:7b:1d:27:cb:8f:38:ae:91:98:7f:c9:37:0e: 55:1d:d9:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUxMDIyMTQyMzM3WhcNMjUxMDI5MTQyMzM3WjAYMRYwFAYD VQQDEw02OGY4ZThlYS05NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp322l7N+MASCqTS+6iaeWRUDN4wiAKigJu8WtjyqcDpNYJyGmzfOfyoxF2rr KYwvi3LJP4gc6stUJoLaq4dfupp1OewV/5JwV4wEvKOKU9fxS9cPqdQFp1CJVdZx 1+pOCkelcSM+F9t+IHtK0JuyZqS5oHVbHly7Z/6CueQriCw/tnFcF/0WDqUu21e5 khJF8yswo91cLUOeVwC5Iw+6i2C9ABVFfrZ8VnoYHcRRqE2kAqBxkEnB7TwYMGfL ANEdVPvGTfgxR9K8zkVi/WjbDAvf6qdl04zfmIyucFXYTE8cmax/dqnDHe+EeRU2 7uTavXVad/kpjVmpCtZvzXZn5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSQsBMU jBs7lK5TsX+xtHiRfWenMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1hs6uaKsCyHa1u9AtsoYPmzplMt5Bg4VibAQWWuk6gMkktjNfS4MV 0IM42C/tAsTceLREYMPOki/YfkP8sevgG6VXlGE/kr99LZ7aIv/Ixg3wyqk3feZ0 JUBfZZPdK4dBjOUM1UvFIXZIZCRLrWa2WaqQhNUKJeuzvzHTjlBur7K7X4ya0DvT D77YM8JVTXq9OHpMyqqAYiLKi7UVQ6M5iu1Ah0/pLlK6/4V0eklNRt1S3vBq5A6x W1bcriNs+0btQYQMDq0F4x3X0fGpKI20OIkg8U2oy0qSEkRDcLnnUUE8u5EnUp9W lVdfH0+aYnsdJ8uPOK6RmH/JNw5VHdmA -----END CERTIFICATE-----Generated at Wed Oct 22 16:45:37 2025 by rpki-client