$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: 2jVzaNjHwaKC0ATWcF3rqECs5ALy0hvZQm96qk9aL4g= Subject key identifier: 20:E3:1E:7B:D1:F7:D6:60:92:25:03:86:44:86:EA:DE:EC:11:72:D7 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 154A Signing time: Sat 06 Sep 2025 16:53:53 +0000 Manifest this update: Sat 06 Sep 2025 16:53:53 +0000 Manifest next update: Sat 13 Sep 2025 16:53:53 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: /ZHXpPeINFDNtoQIabV4tJP+wY0Zso5sUlUW4EqmCmg=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5477 (0x1565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Sep 6 16:53:53 2025 GMT Not After : Sep 13 16:53:53 2025 GMT Subject: CN=68bc6721-7ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:38:57:51:7c:ee:cc:8f:89:0c:94:1f:a1: 79:4e:84:d1:45:2d:5a:83:17:34:b8:b8:73:6a:29: f6:84:bd:fd:c6:bb:71:11:91:24:4b:cd:45:ed:2d: e8:8d:1d:74:e0:dd:31:09:87:66:69:5e:ea:cd:cc: 03:3d:63:8f:0b:6e:fe:71:9e:83:88:9b:b4:93:1f: 11:30:7a:2a:7d:38:90:1f:04:5c:de:a5:b2:20:4f: 44:12:ab:dd:44:08:22:4f:1b:0f:59:3b:b9:2c:3a: f8:1d:b0:fb:7c:cf:0b:88:fb:0e:64:00:a4:e7:61: 1e:44:ec:40:77:54:84:a1:1f:56:05:5a:1f:88:50: de:0e:c0:17:c0:43:39:c3:c0:8d:75:54:80:f4:8c: 2f:35:ef:c4:b2:64:61:b9:f1:45:2c:f7:8e:62:70: d3:fd:f1:92:87:b4:6b:70:fd:81:1e:4f:3a:9c:5c: 6f:7a:be:be:fe:49:3c:27:da:9e:35:a9:13:6e:b9: bc:df:c4:30:67:ee:2f:90:c1:8a:69:af:81:9d:36: 88:f5:d8:31:29:e0:04:cf:be:84:12:82:22:19:95: d7:11:b2:6f:39:59:4c:98:76:df:4a:1b:86:ea:38: b2:9c:e9:dc:bc:6d:62:dd:27:07:c5:2b:11:89:bc: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:1E:7B:D1:F7:D6:60:92:25:03:86:44:86:EA:DE:EC:11:72:D7 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d0:40:fb:fe:66:91:01:4d:c4:50:ce:ea:03:75:ba:47:7c: 74:53:ca:32:88:8c:bb:bb:ae:ef:3e:69:17:b2:e5:15:13:d3: 10:79:e5:ce:86:cc:83:7a:66:5f:9e:e2:53:6a:72:17:22:8d: 3d:ce:cb:57:bc:f0:65:24:db:16:8c:1f:bb:bf:ba:64:9f:0e: 3a:e8:8c:5a:86:b6:0a:6b:60:36:64:5e:30:8f:3c:61:9b:65: d8:8d:97:93:2b:fd:85:48:24:6c:34:23:b7:30:eb:55:cc:27: af:31:86:9b:3d:1b:69:c7:17:68:5d:d1:5f:d5:fb:8e:ca:98: 48:7c:a7:a0:87:95:36:f5:d5:b2:eb:1f:50:ce:80:bd:fb:79: ec:03:48:ee:a8:23:eb:84:41:7b:f1:e4:c7:a0:5d:e2:36:33: 86:e7:a3:a7:02:96:e0:bc:87:36:76:ae:a0:40:14:26:e3:14: 8a:b9:41:c9:19:f7:98:ff:7c:4d:47:59:ac:21:41:c1:fa:f6: 28:30:69:9d:b5:42:1f:e9:7e:db:43:fb:cb:df:9e:0e:b8:d4: ea:43:2c:52:ce:d0:23:f3:0b:79:28:f1:68:c1:c3:9a:d1:6d: 65:a0:61:7f:2c:d3:e8:ae:02:fb:fa:ac:4f:3e:e8:06:e3:34: bc:45:58:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwOTA2MTY1MzUzWhcNMjUwOTEzMTY1MzUzWjAYMRYwFAYD VQQDEw02OGJjNjcyMS03ZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBY4V1F87syPiQyUH6F5ToTRRS1agxc0uLhzain2hL39xrtxEZEkS81F7S3o jR104N0xCYdmaV7qzcwDPWOPC27+cZ6DiJu0kx8RMHoqfTiQHwRc3qWyIE9EEqvd RAgiTxsPWTu5LDr4HbD7fM8LiPsOZACk52EeROxAd1SEoR9WBVofiFDeDsAXwEM5 w8CNdVSA9IwvNe/EsmRhufFFLPeOYnDT/fGSh7RrcP2BHk86nFxver6+/kk8J9qe NakTbrm838QwZ+4vkMGKaa+BnTaI9dgxKeAEz76EEoIiGZXXEbJvOVlMmHbfShuG 6jiynOncvG1i3ScHxSsRibyd4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDjHnvR 99ZgkiUDhkSG6t7sEXLXMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq0ED7/maRAU3EUM7qA3W6R3x0U8oyiIy7u67vPmkXsuUVE9MQeeXO hsyDemZfnuJTanIXIo09zstXvPBlJNsWjB+7v7pknw466IxahrYKa2A2ZF4wjzxh m2XYjZeTK/2FSCRsNCO3MOtVzCevMYabPRtpxxdoXdFf1fuOyphIfKegh5U29dWy 6x9QzoC9+3nsA0juqCPrhEF78eTHoF3iNjOG56OnApbgvIc2dq6gQBQm4xSKuUHJ GfeY/3xNR1msIUHB+vYoMGmdtUIf6X7bQ/vL354OuNTqQyxSztAj8wt5KPFowcOa 0W1loGF/LNPorgL7+qxPPugG4zS8RVhu -----END CERTIFICATE-----Generated at Mon Sep 8 08:46:35 2025 by rpki-client