$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json) Hash identifier: dcwlHOqPMZJDxw8TLjVIM8voyjRuzeU3NlSbWFslneQ= Subject key identifier: 86:45:2E:A5:C2:E2:FB:81:67:99:F7:70:90:05:3F:98:EB:9C:70:CC Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft Manifest number: 34B3 Signing time: Thu 31 Jul 2025 15:04:33 +0000 Manifest this update: Thu 31 Jul 2025 15:04:32 +0000 Manifest next update: Thu 07 Aug 2025 15:04:32 +0000 Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: 9YcfXNLYjKkJROikP+JHsMM5sGLc1adE1gbcvVBecZ4=) 2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=) 3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 15:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Jul 31 15:04:32 2025 GMT Not After : Aug 7 15:04:32 2025 GMT Subject: CN=688b8601-9db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:82:ef:ae:7b:30:1f:60:f9:f5:b6:a8:20: a4:bd:81:3e:51:da:59:3a:3e:e9:29:b5:c3:70:89: ca:2d:08:44:8c:ca:96:10:0e:fd:73:1f:02:f5:92: 89:81:fc:7d:04:65:b3:3e:fc:ed:1f:6e:15:48:7a: 85:ee:84:b6:b0:54:f7:d4:99:8c:50:09:64:5f:a3: 7d:85:78:00:13:ca:cb:d3:a9:76:6f:75:37:26:96: 50:cd:d5:ed:81:ba:45:65:7c:b5:21:f8:85:be:45: 2f:c7:a5:ff:99:c4:3f:a7:fb:ee:fe:1a:d9:93:ed: 1d:d4:56:46:ca:f8:2d:56:97:b9:79:29:9c:92:96: 0d:14:17:bd:ff:cb:d2:c0:b4:97:b2:60:ea:7a:98: 7c:e3:f0:f5:28:06:5e:94:db:51:32:bb:85:94:bc: b8:79:42:49:23:87:bf:d5:c1:d9:60:bb:48:17:c9: 14:65:1f:97:82:1c:34:73:c0:24:06:1d:ce:fb:fc: eb:85:a7:1c:31:9d:d5:c6:25:a8:be:5c:2f:1c:a7: 6a:3d:5f:75:97:6c:34:f7:ac:87:4f:fa:b0:8f:86: 0f:ad:f9:33:2f:ff:ec:72:51:97:04:16:5b:de:71: 76:b4:40:a3:f6:78:fa:2a:cd:94:2b:62:4c:53:4f: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:45:2E:A5:C2:E2:FB:81:67:99:F7:70:90:05:3F:98:EB:9C:70:CC X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ef:3a:6e:33:e9:62:67:e8:4d:63:2e:57:18:0b:58:4a:95: 8f:43:35:a9:4b:d8:73:cc:b8:cb:4c:72:37:3a:36:b4:bf:4f: 3a:b9:06:21:24:56:5c:4e:e1:f1:75:08:1b:f3:e0:60:96:33: 0b:44:76:cd:7e:25:e1:56:6e:1e:07:ee:3a:19:77:70:47:fc: b2:b8:93:33:0f:d7:60:a1:0c:0e:dc:2d:01:4c:ff:01:1e:e8: f1:4f:92:65:e2:21:02:b1:c3:b0:20:ed:ad:b0:08:d1:94:13: 1d:b2:17:fb:65:52:b1:a8:04:6f:40:48:34:90:8d:35:08:fb: d7:6e:39:2e:2b:75:84:0a:ee:32:1d:c7:65:4c:a9:50:c5:d3: 7a:ef:f2:6f:46:b8:79:a4:76:c4:a6:eb:00:34:62:1e:3b:f7: 5f:53:e8:fe:2e:8f:3e:9d:60:48:b9:32:bf:be:09:ef:57:11: 7d:f2:e1:ce:3f:c0:83:eb:80:81:64:b7:70:54:be:b4:b8:27: 1b:a4:a6:b8:54:ed:c8:2f:4c:1b:b4:69:8c:3d:55:94:31:ad: d9:13:9a:16:9b:31:0f:9f:14:a6:c1:e7:ec:5c:83:54:93:38: 6f:1f:80:79:52:7e:71:02:fb:c6:59:3c:96:88:98:1d:94:19: c4:bd:30:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUwNzMxMTUwNDMyWhcNMjUwODA3MTUwNDMyWjAYMRYwFAYD VQQDEw02ODhiODYwMS05ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5SC7657MB9g+fW2qCCkvYE+UdpZOj7pKbXDcInKLQhEjMqWEA79cx8C9ZKJ gfx9BGWzPvztH24VSHqF7oS2sFT31JmMUAlkX6N9hXgAE8rL06l2b3U3JpZQzdXt gbpFZXy1IfiFvkUvx6X/mcQ/p/vu/hrZk+0d1FZGyvgtVpe5eSmckpYNFBe9/8vS wLSXsmDqeph84/D1KAZelNtRMruFlLy4eUJJI4e/1cHZYLtIF8kUZR+Xghw0c8Ak Bh3O+/zrhaccMZ3VxiWovlwvHKdqPV91l2w096yHT/qwj4YPrfkzL//sclGXBBZb 3nF2tECj9nj6Ks2UK2JMU0+dGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZFLqXC 4vuBZ5n3cJAFP5jrnHDMMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi7zpuM+liZ+hNYy5XGAtYSpWPQzWpS9hzzLjLTHI3Oja0v086uQYh JFZcTuHxdQgb8+BgljMLRHbNfiXhVm4eB+46GXdwR/yyuJMzD9dgoQwO3C0BTP8B HujxT5Jl4iECscOwIO2tsAjRlBMdshf7ZVKxqARvQEg0kI01CPvXbjkuK3WECu4y HcdlTKlQxdN67/JvRrh5pHbEpusANGIeO/dfU+j+Lo8+nWBIuTK/vgnvVxF98uHO P8CD64CBZLdwVL60uCcbpKa4VO3IL0wbtGmMPVWUMa3ZE5oWmzEPnxSmwefsXINU kzhvH4B5Un5xAvvGWTyWiJgdlBnEvTDN -----END CERTIFICATE-----Generated at Thu Jul 31 23:24:39 2025 by rpki-client