$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: mkcfjm/1du168TVnEDo6axfKVGiTuYL9W+Ee/TQCXI8= Subject key identifier: 20:85:89:38:03:E1:4F:21:CF:E4:AA:DF:24:C2:DA:9F:A9:22:B0:7B Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 1B Signing time: Sat 23 Aug 2025 08:10:59 +0000 Manifest this update: Sat 23 Aug 2025 08:10:59 +0000 Manifest next update: Sat 30 Aug 2025 08:10:59 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: /R/C7iTirn1f9YZuvRZxoO6d74kHBJsMt1cIQsdVcZU=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Aug 23 08:10:59 2025 GMT Not After : Aug 30 08:10:59 2025 GMT Subject: CN=68a97793-dd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:cc:f1:9c:93:fb:a5:27:d4:dd:67:df:8b: 2e:6c:ea:28:48:f4:48:da:72:6a:b3:2d:48:26:1d: b1:86:2d:4d:0d:97:19:f0:21:4b:f0:07:e2:23:dc: ce:fc:9d:f7:b7:7c:b7:ef:11:1c:5e:77:d6:e8:69: bd:82:56:f9:e2:77:fa:96:e4:db:a2:6d:38:2e:56: a1:0a:cd:30:eb:4f:69:ff:ab:23:04:ad:64:9f:29: a9:64:0c:07:34:4f:f3:26:70:0f:95:b4:71:41:4c: e6:50:b2:b6:be:e9:0d:f6:7f:77:25:a1:2c:3e:e9: 33:90:6a:12:67:7d:56:ce:d1:f5:f1:bd:00:5e:ef: 75:ee:e0:00:1c:fb:5f:ba:82:47:58:52:7b:a4:ce: 94:42:b6:04:bb:43:db:1c:03:65:0a:b1:58:25:1e: 4a:c0:a5:c1:8c:0c:86:e5:2c:a4:5d:5a:bc:b8:48: 84:c5:bc:d7:61:6e:e8:d1:b3:b9:c6:dc:d3:55:f6: cf:83:bc:5b:27:a6:a0:55:8c:42:d3:80:6d:dd:83: 05:65:26:16:38:a9:75:14:a3:f8:dd:40:5c:65:ff: 23:2a:29:c8:00:22:9b:a8:0d:d0:f7:49:49:01:14: 84:78:48:96:5e:0b:00:62:0f:2e:97:21:20:fc:b1: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:85:89:38:03:E1:4F:21:CF:E4:AA:DF:24:C2:DA:9F:A9:22:B0:7B X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:40:9d:5a:d6:52:63:9f:25:86:fc:44:ef:ae:bb:75:ed: 07:14:34:74:b7:95:31:42:5d:4f:56:d2:cb:60:98:97:d2:7a: 33:f5:5f:b8:94:29:2c:c5:71:56:37:b1:3e:81:4b:ca:dc:a9: d0:96:12:5e:e2:a9:81:3c:b2:56:85:0e:77:d6:dc:f7:e7:4d: ea:d8:92:bf:af:35:17:1f:98:97:1f:7d:b7:4d:8a:d7:a0:0c: 80:84:f1:ce:47:3a:d4:31:18:a5:39:61:dd:fe:36:99:09:eb: 19:69:17:a2:15:49:f8:e9:2f:f1:61:62:5f:70:22:76:b7:a2: 8a:6d:da:3d:bd:57:cc:ac:cd:c7:77:ca:cb:99:65:68:dc:f0: 25:d6:51:63:59:83:a8:3a:3f:1a:ec:ed:ad:f9:0a:fd:1f:25: 61:59:e3:1f:14:f9:a9:ce:3c:0b:0e:9e:e8:97:2c:a4:d7:57: c9:fa:6d:92:11:7a:7e:06:ea:c8:0a:ca:eb:bf:6d:8f:59:48: 9e:ed:a7:7f:85:27:4e:6b:74:46:55:c5:07:51:48:cf:65:6b: fa:e6:ac:a6:52:cc:05:f0:2f:a7:fb:c5:0f:12:4c:02:be:c9: cd:74:17:92:82:4c:c2:5d:47:8b:42:39:f5:7a:f9:59:ea:96: 24:a2:a0:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTA4MjMwODEwNTlaFw0yNTA4MzAwODEwNTlaMBgxFjAUBgNV BAMTDTY4YTk3NzkzLWRkOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJrMzxnJP7pSfU3Wffiy5s6ihI9EjacmqzLUgmHbGGLU0NlxnwIUvwB+Ij3M78 nfe3fLfvERxed9boab2CVvnid/qW5NuibTguVqEKzTDrT2n/qyMErWSfKalkDAc0 T/MmcA+VtHFBTOZQsra+6Q32f3cloSw+6TOQahJnfVbO0fXxvQBe73Xu4AAc+1+6 gkdYUnukzpRCtgS7Q9scA2UKsVglHkrApcGMDIblLKRdWry4SITFvNdhbujRs7nG 3NNV9s+DvFsnpqBVjELTgG3dgwVlJhY4qXUUo/jdQFxl/yMqKcgAIpuoDdD3SUkB FIR4SJZeCwBiDy6XISD8sfdnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIIWJOAPh TyHP5KrfJMLan6kisHswHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0NQJ1a1lJjnyWG/ETvrrt17QcUNHS3lTFCXU9W0stgmJfSejP1X7iU KSzFcVY3sT6BS8rcqdCWEl7iqYE8slaFDnfW3PfnTerYkr+vNRcfmJcffbdNiteg DICE8c5HOtQxGKU5Yd3+NpkJ6xlpF6IVSfjpL/FhYl9wIna3oopt2j29V8yszcd3 ysuZZWjc8CXWUWNZg6g6Pxrs7a35Cv0fJWFZ4x8U+anOPAsOnuiXLKTXV8n6bZIR en4G6sgKyuu/bY9ZSJ7tp3+FJ05rdEZVxQdRSM9la/rmrKZSzAXwL6f7xQ8STAK+ yc10F5KCTMJdR4tCOfV6+VnqliSioLQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:53 2025 by rpki-client