$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: j9TsKTM/vhZOWumEDoANBhjl4UsmXPj1ZWBNO/fBad4= Subject key identifier: E8:C6:3D:AE:9E:A6:15:38:71:B4:06:DD:DF:8C:D7:3F:77:08:D2:3C Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 01DA Signing time: Sat 23 Aug 2025 02:49:51 +0000 Manifest this update: Sat 23 Aug 2025 02:49:50 +0000 Manifest next update: Sat 30 Aug 2025 02:49:50 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: NdQjATDVXfbiuqqL0gk8TjHB2kp3KcySWbDF039UrTs=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Aug 23 02:49:50 2025 GMT Not After : Aug 30 02:49:50 2025 GMT Subject: CN=68a92c4f-5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:df:a0:76:9b:7a:bd:a8:3e:f7:40:1c:fc: b0:83:85:76:66:97:6a:7f:e1:3a:e4:04:8b:03:66: ca:3f:ad:03:0e:36:32:6e:ac:f3:1f:c4:f7:81:0e: 0a:d8:46:95:7e:48:fd:88:c7:6e:a1:34:ae:48:e9: 47:89:97:94:20:8a:5f:56:8d:a7:7d:fa:a2:36:ed: 6d:3f:7f:bc:d0:ad:8a:e2:4e:a9:7c:7f:c9:6c:dc: a1:6b:18:b9:74:e0:47:3e:13:cf:34:f7:1f:48:5a: 2c:62:77:8d:11:ae:5c:7c:ff:30:de:55:ed:5d:33: cd:4b:e2:63:0d:fe:39:9f:e1:97:48:4c:10:ed:3d: f1:73:b5:58:ba:f2:c7:6b:e1:d8:08:9e:ec:12:c5: 9a:50:af:73:58:50:53:17:aa:87:14:f9:4b:47:17: b8:c6:10:f6:b1:fa:c5:2d:c7:ab:43:80:6a:e2:b5: 2e:28:38:b7:66:56:8e:6a:76:6f:2e:88:22:8b:63: 9e:ba:b3:1a:6c:46:79:b1:a4:95:50:c3:d2:c4:77: 9b:ca:83:9c:8d:07:35:0e:af:49:ce:3e:c2:76:50: 4a:e9:95:16:42:0c:7c:1f:fb:ff:5d:22:b1:10:35: 9e:42:38:f9:a2:dc:92:80:59:53:71:24:ce:15:50: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C6:3D:AE:9E:A6:15:38:71:B4:06:DD:DF:8C:D7:3F:77:08:D2:3C X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:dd:91:5d:21:8f:ce:83:ca:a0:32:0f:58:25:dd:80:dc:b6: a1:1d:b4:d9:91:ab:44:ea:81:2e:9f:80:9d:e4:11:7b:ec:8d: 6f:e9:19:0a:0a:b9:34:31:1c:6d:b7:51:20:f9:ff:17:e4:b2: ad:fc:ae:28:8c:f3:4a:b8:df:cb:5c:e8:47:eb:04:b3:ba:76: 40:b3:c5:c2:89:aa:82:18:d2:04:4b:30:41:d9:59:2c:91:b2: ed:f8:03:90:89:c9:55:ee:9b:af:23:9b:a3:3a:83:61:31:ad: 2d:c0:31:05:24:0d:e9:59:a2:93:a6:a3:0d:36:1d:66:89:32: 2f:b8:07:25:fa:02:1c:4f:93:ce:21:41:d6:c4:2d:30:4f:42: d3:c2:07:4f:68:0d:78:7f:61:3d:a0:2b:9c:30:e7:ef:49:fd: 89:5b:0c:c5:8a:af:1e:66:b9:27:83:05:eb:e5:3a:54:b0:38: 7c:21:10:d3:9f:1e:2d:74:1d:2d:48:65:49:80:2a:7b:4e:75: da:61:df:a3:38:43:01:9a:fe:86:c2:2d:e7:9e:ca:7d:98:ae: 17:17:c9:19:f7:20:91:e8:4c:86:42:6d:85:1f:11:59:c5:d9: 2b:af:51:89:35:db:bd:dc:4f:d8:01:31:dd:27:3e:af:71:50: ae:0f:83:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUwODIzMDI0OTUwWhcNMjUwODMwMDI0OTUwWjAYMRYwFAYD VQQDEw02OGE5MmM0Zi01NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn/foHaber2oPvdAHPywg4V2Zpdqf+E65ASLA2bKP60DDjYybqzzH8T3gQ4K 2EaVfkj9iMduoTSuSOlHiZeUIIpfVo2nffqiNu1tP3+80K2K4k6pfH/JbNyhaxi5 dOBHPhPPNPcfSFosYneNEa5cfP8w3lXtXTPNS+JjDf45n+GXSEwQ7T3xc7VYuvLH a+HYCJ7sEsWaUK9zWFBTF6qHFPlLRxe4xhD2sfrFLcerQ4Bq4rUuKDi3ZlaOanZv Logii2OeurMabEZ5saSVUMPSxHebyoOcjQc1Dq9Jzj7CdlBK6ZUWQgx8H/v/XSKx EDWeQjj5otySgFlTcSTOFVAY6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjGPa6e phU4cbQG3d+M1z93CNI8MB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA73ZFdIY/Og8qgMg9YJd2A3LahHbTZkatE6oEun4Cd5BF77I1v6RkK Crk0MRxtt1Eg+f8X5LKt/K4ojPNKuN/LXOhH6wSzunZAs8XCiaqCGNIESzBB2Vks kbLt+AOQiclV7puvI5ujOoNhMa0twDEFJA3pWaKTpqMNNh1miTIvuAcl+gIcT5PO IUHWxC0wT0LTwgdPaA14f2E9oCucMOfvSf2JWwzFiq8eZrkngwXr5TpUsDh8IRDT nx4tdB0tSGVJgCp7TnXaYd+jOEMBmv6Gwi3nnsp9mK4XF8kZ9yCR6EyGQm2FHxFZ xdkrr1GJNdu93E/YATHdJz6vcVCuD4OW -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:36 2025 by rpki-client