$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: /XTMEXTLT/Y2lrqF85JPTgi6+G0qTULaU4ROlPndx6k= Subject key identifier: C5:B6:74:DF:04:44:05:68:EF:74:66:43:F5:6D:CC:B7:EF:5A:F6:84 Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: 019A Signing time: Thu 03 Jul 2025 03:28:34 +0000 Manifest this update: Thu 03 Jul 2025 03:28:34 +0000 Manifest next update: Thu 10 Jul 2025 03:28:34 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: n7fGjvrrZR4N7y1Uec3RqBvDcsQzY6CFUw2puRJoDGU=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Jul 3 03:28:34 2025 GMT Not After : Jul 10 03:28:34 2025 GMT Subject: CN=6865f8e2-c313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:06:7d:2d:7e:cd:f7:36:ee:d1:65:4c:ca: c6:78:80:fc:aa:72:60:a2:a5:88:eb:33:80:28:c7: 45:7e:62:a4:e4:a9:ef:22:52:70:e0:16:e4:2e:e6: 26:90:b3:56:22:bb:4c:79:34:10:5d:67:3a:f4:a5: a6:59:6d:15:b9:92:d0:a8:ef:0c:6c:9e:72:43:e6: cd:70:2b:aa:36:75:64:83:8d:48:7e:6e:9b:96:4d: de:61:eb:4f:1d:88:af:da:e2:9f:15:e6:31:bb:57: 96:49:ca:b8:86:f0:82:55:bc:92:47:ac:6c:11:5d: 0e:e7:e0:64:06:70:15:14:38:65:30:08:63:a6:f9: 4a:a8:36:be:78:5d:6f:66:33:be:95:a9:09:d0:8a: 4e:fa:e7:e8:d3:c5:6f:c8:9c:c3:0b:0b:cb:04:12: f4:0c:5e:4c:88:e0:5b:a6:a3:22:e6:e9:19:70:7f: 1f:4c:fc:93:da:07:6e:68:af:b5:bf:fa:cb:78:5b: a2:da:84:bf:13:b5:b7:27:9b:5d:58:4e:4c:60:ef: 32:e3:a3:a6:43:7b:72:9b:6d:a4:11:b0:31:a7:9d: a3:9c:8a:ec:b8:09:31:7f:c3:fd:8d:9f:59:ef:19: bb:03:0a:63:2d:e6:2a:e5:c3:15:81:68:f3:13:6e: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:74:DF:04:44:05:68:EF:74:66:43:F5:6D:CC:B7:EF:5A:F6:84 X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:08:15:35:a0:ea:83:a2:05:29:21:d4:9a:6f:c0:dc:9d:f4: 83:cb:31:03:df:c1:34:2f:ec:c8:b1:57:20:5f:30:52:ac:1e: 3b:d1:e2:ed:07:4b:fb:dc:85:27:88:94:14:7f:56:af:ed:1c: 46:04:22:05:cb:c2:0d:ad:b6:bb:8a:2d:db:20:68:77:55:9f: 8f:82:62:87:4d:95:28:ff:2b:fe:cf:47:d3:6e:e5:46:a8:61: 2d:12:93:5c:f9:07:33:c6:91:12:48:ed:74:15:1d:1d:80:73: 70:26:aa:67:dd:7d:8e:9d:da:f5:d9:2b:da:2c:03:9c:7e:48: 49:f2:dd:8e:2b:6a:06:74:9e:ba:7e:d1:75:f2:10:0c:e8:d5: 52:8f:c4:78:24:4f:19:5c:e4:ce:6a:69:f8:cf:b0:3a:52:16: 11:38:0d:f5:06:54:ec:f8:3b:71:e8:07:d0:7c:a9:df:af:41: 8b:0b:6d:d9:f2:be:d3:8c:af:23:73:a9:74:a2:ea:99:b7:44: 1a:ea:c9:77:c8:2f:7b:64:05:0b:ae:02:70:a9:8f:69:f8:ff: fd:a0:1f:be:fe:5e:05:75:96:ba:ad:e9:8f:a3:48:38:f0:14: 66:9a:8b:76:81:6b:00:3a:4f:54:6c:38:2a:a5:8e:76:8f:7f: b9:19:1b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjUwNzAzMDMyODM0WhcNMjUwNzEwMDMyODM0WjAYMRYwFAYD VQQDEw02ODY1ZjhlMi1jMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpEGfS1+zfc27tFlTMrGeID8qnJgoqWI6zOAKMdFfmKk5KnvIlJw4BbkLuYm kLNWIrtMeTQQXWc69KWmWW0VuZLQqO8MbJ5yQ+bNcCuqNnVkg41Ifm6blk3eYetP HYiv2uKfFeYxu1eWScq4hvCCVbySR6xsEV0O5+BkBnAVFDhlMAhjpvlKqDa+eF1v ZjO+lakJ0IpO+ufo08VvyJzDCwvLBBL0DF5MiOBbpqMi5ukZcH8fTPyT2gduaK+1 v/rLeFui2oS/E7W3J5tdWE5MYO8y46OmQ3tym22kEbAxp52jnIrsuAkxf8P9jZ9Z 7xm7AwpjLeYq5cMVgWjzE27dsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW2dN8E RAVo73RmQ/VtzLfvWvaEMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWCBU1oOqDogUpIdSab8DcnfSDyzED38E0L+zIsVcgXzBSrB470eLt B0v73IUniJQUf1av7RxGBCIFy8INrba7ii3bIGh3VZ+PgmKHTZUo/yv+z0fTbuVG qGEtEpNc+QczxpESSO10FR0dgHNwJqpn3X2Ondr12SvaLAOcfkhJ8t2OK2oGdJ66 ftF18hAM6NVSj8R4JE8ZXOTOamn4z7A6UhYROA31BlTs+Dtx6AfQfKnfr0GLC23Z 8r7TjK8jc6l0ouqZt0Qa6sl3yC97ZAULrgJwqY9p+P/9oB++/l4FdZa6remPo0g4 8BRmmot2gWsAOk9UbDgqpY52j3+5GRug -----END CERTIFICATE-----Generated at Fri Jul 4 19:10:06 2025 by rpki-client