$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json) Hash identifier: PoBYaZJVl++gddDWRrnw4Mg35hl0FYp3JCnN6LGruR0= Subject key identifier: 9C:C1:20:40:B7:5C:6E:D0:B7:8D:A4:3A:F0:25:36:59:1D:18:51:81 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft Manifest number: 01B4 Signing time: Thu 03 Jul 2025 03:16:41 +0000 Manifest this update: Thu 03 Jul 2025 03:16:40 +0000 Manifest next update: Thu 10 Jul 2025 03:16:40 +0000 Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: y6V9mKr2A3S1e8zuccpDmpO4sSiGH3GULhChoT59NM4=) 2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: vTjIWL+7U0681ZWCBVmHMtqcTBbPy9kNb1m5t3OENUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Jul 3 03:16:40 2025 GMT Not After : Jul 10 03:16:40 2025 GMT Subject: CN=6865f618-066d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:ad:e0:7b:c8:6a:1b:8f:e6:86:0c:02:8e: 21:07:0b:73:ab:6d:ec:b4:4c:84:0d:25:33:23:13: 8b:06:f9:54:34:59:ba:be:b1:89:b1:1b:b1:98:26: 1e:c1:5b:38:68:a3:34:13:a9:87:9e:eb:64:21:f2: 9e:25:ac:d1:e0:3c:25:ed:4e:c4:07:e6:c7:fa:ac: 78:eb:d4:b0:04:77:5f:d7:df:0b:0b:03:73:bc:07: 4c:5d:e5:8a:6a:8d:e0:75:8c:da:67:b9:b7:1a:af: 02:c0:e8:fd:cc:75:72:d8:40:d8:6b:83:7b:d4:d4: f5:df:48:ff:d4:02:1d:ae:ed:84:e2:2f:28:5b:00: eb:3d:e3:7b:06:a5:01:04:96:ed:df:f0:8d:16:81: d0:e5:65:20:3c:a0:4d:db:70:60:13:9f:08:e1:80: bf:4e:ca:e4:ed:27:38:70:68:1b:28:40:c2:42:df: c7:b1:7c:96:72:87:d9:fb:42:44:ae:0b:ff:50:68: 7d:27:b2:8a:92:76:fa:76:f5:05:ba:33:f4:46:40: 8e:d7:4f:d3:5d:ca:4e:dc:78:42:c9:3b:fe:27:da: ff:64:43:64:21:9d:51:62:63:d8:c6:97:f7:0f:71: 22:0c:e3:82:85:ec:d1:c7:a7:ec:b9:bb:6c:22:b0: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:20:40:B7:5C:6E:D0:B7:8D:A4:3A:F0:25:36:59:1D:18:51:81 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:43:6f:03:cc:ab:be:82:21:75:b7:99:0c:17:c7:a6:55:76: 2e:8d:71:ac:75:71:f3:05:0d:99:ea:7f:e2:17:ec:a9:12:06: b7:14:e5:f4:9f:da:d2:4e:ac:91:22:fb:7a:b6:65:db:c2:9c: 30:e1:8e:89:89:15:ee:5c:ed:69:f7:c9:df:39:18:6b:0c:99: ca:fb:04:74:81:96:b7:f0:cd:a0:c7:b9:fe:69:af:59:57:bf: 58:a7:2c:71:f9:6a:97:11:26:f2:b5:c7:9c:86:af:1a:ce:1d: 48:96:1b:3f:8e:3a:99:bc:b8:db:8d:17:cb:87:f5:08:e7:a6: 02:ad:3f:10:eb:52:50:88:4a:5e:85:52:ae:9a:4d:c2:10:5a: f5:7e:6a:d4:5f:26:8a:84:7c:3a:02:4d:b1:d6:3c:2d:79:1a: 50:af:f7:e5:64:34:1f:59:f8:f6:91:d6:f5:2e:79:48:db:e7: 22:77:10:03:a0:52:4b:24:08:6d:f6:56:7f:f4:29:88:14:d4: 5e:99:2d:dd:9f:88:d6:66:8a:3e:62:33:73:8a:c0:83:e6:a2: bc:fa:c7:40:54:23:36:4b:dd:83:6d:e6:6d:96:87:fe:72:be: 58:68:34:33:e5:1d:83:e3:bc:3a:a1:3d:60:aa:71:43:03:44: 09:e9:a4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjUwNzAzMDMxNjQwWhcNMjUwNzEwMDMxNjQwWjAYMRYwFAYD VQQDEw02ODY1ZjYxOC0wNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6qt4HvIahuP5oYMAo4hBwtzq23stEyEDSUzIxOLBvlUNFm6vrGJsRuxmCYe wVs4aKM0E6mHnutkIfKeJazR4Dwl7U7EB+bH+qx469SwBHdf198LCwNzvAdMXeWK ao3gdYzaZ7m3Gq8CwOj9zHVy2EDYa4N71NT130j/1AIdru2E4i8oWwDrPeN7BqUB BJbt3/CNFoHQ5WUgPKBN23BgE58I4YC/Tsrk7Sc4cGgbKEDCQt/HsXyWcofZ+0JE rgv/UGh9J7KKknb6dvUFujP0RkCO10/TXcpO3HhCyTv+J9r/ZENkIZ1RYmPYxpf3 D3EiDOOChezRx6fsubtsIrBoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzBIEC3 XG7Qt42kOvAlNlkdGFGBMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM2QS80MDkzNDI4MEM3QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9r NHpIUXM1QUhERVdpbkpYbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlQ28DzKu+giF1t5kMF8emVXYujXGsdXHzBQ2Z6n/iF+ypEga3FOX0 n9rSTqyRIvt6tmXbwpww4Y6JiRXuXO1p98nfORhrDJnK+wR0gZa38M2gx7n+aa9Z V79Ypyxx+WqXESbytcechq8azh1Ilhs/jjqZvLjbjRfLh/UI56YCrT8Q61JQiEpe hVKumk3CEFr1fmrUXyaKhHw6Ak2x1jwteRpQr/flZDQfWfj2kdb1LnlI2+cidxAD oFJLJAht9lZ/9CmIFNRemS3dn4jWZoo+YjNzisCD5qK8+sdAVCM2S92DbeZtlof+ cr5YaDQz5R2D47w6oT1gqnFDA0QJ6aQ9 -----END CERTIFICATE-----Generated at Fri Jul 4 05:46:41 2025 by rpki-client