$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json) Hash identifier: MFfhOvhvdtHs/F1dV+ZYPY5MykjSa17jM6FdF8gRa9g= Subject key identifier: 28:B8:48:62:01:ED:AA:E9:99:62:E7:78:E8:67:A8:46:B1:46:7E:D3 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft Manifest number: 01CD Signing time: Thu 21 Aug 2025 03:00:50 +0000 Manifest this update: Thu 21 Aug 2025 03:00:49 +0000 Manifest next update: Thu 28 Aug 2025 03:00:49 +0000 Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: y+Iai3x9mVPZ/cHMuCqGddylo9iZ1CQor6TzVifrPl0=) 2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: vTjIWL+7U0681ZWCBVmHMtqcTBbPy9kNb1m5t3OENUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Aug 21 03:00:49 2025 GMT Not After : Aug 28 03:00:49 2025 GMT Subject: CN=68a68be1-467f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d1:40:7a:67:ef:b3:cf:e6:c6:e9:8f:96:09: 63:d3:07:43:c7:fd:c9:27:a1:90:16:d4:57:82:69: 06:d4:bb:14:5e:ee:07:a2:94:83:ca:3d:ca:10:33: d7:1e:cc:73:87:d6:dd:10:58:2f:7f:b5:f4:7a:70: 14:5f:5e:17:7a:87:ef:fe:f0:97:43:33:50:ce:ba: e4:4d:32:f5:f4:00:bc:bf:78:b4:01:24:1c:79:2c: d5:e7:0a:3a:2d:d6:6f:a1:83:9c:16:63:16:13:bc: 4d:b9:82:73:b0:c2:cf:a4:d1:cc:50:86:91:35:40: fc:a0:18:3a:00:69:8c:c3:62:b4:44:73:2d:87:45: e8:c2:dc:b9:a2:fa:1f:df:a9:f9:8d:c5:81:af:84: 2f:03:d3:28:83:da:f7:9a:ef:31:92:e1:33:21:67: 03:b6:8f:32:85:7e:f2:e2:35:3f:0f:da:85:41:5b: de:41:d9:c4:f0:b5:c7:9f:60:34:5d:30:e2:69:a8: ed:ce:cb:e6:b6:cf:d3:7d:3d:55:72:a8:3a:6a:94: ba:2d:60:de:a2:0a:fa:09:83:87:f6:85:0c:3f:8d: 21:4a:b3:7b:c9:f1:3b:24:ca:0a:2c:42:68:84:c8: 3c:3d:34:76:32:8c:5c:71:15:cb:43:47:2f:43:8d: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B8:48:62:01:ED:AA:E9:99:62:E7:78:E8:67:A8:46:B1:46:7E:D3 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c3:15:36:94:2f:f2:29:6c:f0:59:27:3c:b0:62:8a:94:f8: 59:e9:56:5b:e4:ea:7c:68:09:52:bc:85:84:04:fc:ba:6d:09: ff:9a:97:a9:b4:7c:6c:43:53:35:a8:a5:5d:50:39:46:64:be: 0d:be:6c:fa:9d:b9:d5:18:27:e1:ec:0a:9a:ee:09:f5:f4:67: f7:1b:72:99:56:d0:b1:0f:f6:7c:ef:f6:33:5a:fa:04:4f:31: a1:56:97:fc:4c:44:07:34:fb:00:80:fa:45:d6:5e:8d:af:87: a8:0a:4c:82:1d:8e:19:a1:50:5a:6c:ee:fb:ba:97:58:f1:64: 3c:04:ad:2c:aa:fa:9c:15:3a:a3:a9:f7:5f:98:08:f4:b7:0e: 10:b5:0b:aa:ca:7b:e7:4f:ce:0e:87:4e:05:03:3f:55:30:61: 53:f1:31:96:bb:eb:e4:a1:bc:80:2c:bd:7b:4e:0a:aa:a8:d9: 8e:3c:8a:80:e7:ba:77:6b:d6:62:28:60:3f:e4:4f:69:d9:ce: d4:40:f5:c2:b3:11:b1:33:41:4f:63:63:3d:2c:bd:fa:63:a2: 41:b5:25:ae:48:3b:cf:4e:74:f1:6d:49:4e:8a:0c:29:b4:cd: 9d:0d:6d:38:d3:dc:84:d4:ab:e8:7c:a1:a4:00:85:58:bc:a5: 34:dc:74:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjUwODIxMDMwMDQ5WhcNMjUwODI4MDMwMDQ5WjAYMRYwFAYD VQQDEw02OGE2OGJlMS00NjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA99FAemfvs8/mxumPlglj0wdDx/3JJ6GQFtRXgmkG1LsUXu4HopSDyj3KEDPX Hsxzh9bdEFgvf7X0enAUX14Xeofv/vCXQzNQzrrkTTL19AC8v3i0ASQceSzV5wo6 LdZvoYOcFmMWE7xNuYJzsMLPpNHMUIaRNUD8oBg6AGmMw2K0RHMth0Xowty5ovof 36n5jcWBr4QvA9Mog9r3mu8xkuEzIWcDto8yhX7y4jU/D9qFQVveQdnE8LXHn2A0 XTDiaajtzsvmts/TfT1Vcqg6apS6LWDeogr6CYOH9oUMP40hSrN7yfE7JMoKLEJo hMg8PTR2MoxccRXLQ0cvQ41zCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi4SGIB 7arpmWLneOhnqEaxRn7TMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM2QS80MDkzNDI4MEM3QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9r NHpIUXM1QUhERVdpbkpYbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDwxU2lC/yKWzwWSc8sGKKlPhZ6VZb5Op8aAlSvIWEBPy6bQn/mpep tHxsQ1M1qKVdUDlGZL4Nvmz6nbnVGCfh7Aqa7gn19Gf3G3KZVtCxD/Z87/YzWvoE TzGhVpf8TEQHNPsAgPpF1l6Nr4eoCkyCHY4ZoVBabO77updY8WQ8BK0sqvqcFTqj qfdfmAj0tw4QtQuqynvnT84Oh04FAz9VMGFT8TGWu+vkobyALL17TgqqqNmOPIqA 57p3a9ZiKGA/5E9p2c7UQPXCsxGxM0FPY2M9LL36Y6JBtSWuSDvPTnTxbUlOigwp tM2dDW0409yE1KvofKGkAIVYvKU03HR4 -----END CERTIFICATE-----Generated at Thu Aug 21 05:02:51 2025 by rpki-client