$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: nVFGs8EsM/aFRxMev4hHsduu/rbhnzvXSMxBcSN7M/w= Subject key identifier: FE:F8:FB:69:67:2F:0C:9F:70:BD:BD:BF:AF:55:91:36:06:1D:0C:1F Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: DA Signing time: Sat 05 Jul 2025 06:10:20 +0000 Manifest this update: Sat 05 Jul 2025 06:10:19 +0000 Manifest next update: Sat 12 Jul 2025 06:10:19 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: Xc2V199QAi130Q7kPcwxCGWZjO1DbVIjAlio3e4e65E=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Jul 5 06:10:19 2025 GMT Not After : Jul 12 06:10:19 2025 GMT Subject: CN=6868c1cc-ec41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:35:6d:a0:0c:ca:eb:ff:c4:7d:e4:fd:70: 8b:ce:3b:82:31:5c:58:c0:b5:93:79:a5:12:db:d8: cd:e1:b5:47:b2:1b:5d:a3:88:98:bf:1e:d6:40:0f: 72:76:f0:25:06:9c:8b:ef:4a:ef:fc:c0:5d:d7:f5: 95:c9:22:bd:b9:07:cc:d5:d7:1e:b1:e3:82:8e:01: 01:5a:3c:09:f2:35:12:3e:01:73:fe:ba:79:a7:3a: 26:54:ce:3d:68:2a:42:da:22:ae:d0:40:36:8c:16: 0c:5b:7a:1b:98:18:9d:e6:ca:36:a7:50:2b:d7:ed: dd:e6:82:08:b6:46:d0:8c:ae:20:3c:2e:d0:be:e6: 50:ac:be:46:27:ae:02:01:f3:6d:7a:02:c5:cf:c9: 6c:b8:df:66:12:1e:34:c7:b3:50:c8:5f:12:be:20: c2:b6:07:f8:de:97:ce:48:dd:ef:47:b0:8a:a0:fa: b9:e7:84:e5:ce:2c:ea:2f:56:0b:29:94:27:08:33: 48:f5:6d:4c:8d:12:47:2a:15:b8:2b:c6:77:00:b6: 95:e0:88:7f:60:f2:5c:98:25:ec:0b:86:3d:35:44: 81:5e:f4:23:1f:99:b1:4e:c1:18:7a:e0:ae:cd:c4: 9f:41:87:f5:33:f1:ea:fb:53:92:4f:26:58:75:90: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:FB:69:67:2F:0C:9F:70:BD:BD:BF:AF:55:91:36:06:1D:0C:1F X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:d0:a5:9c:3d:8c:5a:a0:5f:d0:74:e1:2a:d7:42:c1:ba: 5a:7d:24:a1:11:b7:7b:90:3c:7f:f9:46:e7:82:35:ff:ce:eb: 96:fd:98:03:08:32:b1:ae:72:29:2c:60:f4:bf:de:f4:51:7a: fe:b4:b0:1c:7d:69:c9:0d:7b:4b:73:cf:08:7b:3a:9e:19:52: 38:12:90:fe:ea:f7:55:01:b8:6a:7b:64:11:9c:8e:ca:d2:71: ca:20:9c:42:b7:18:98:51:9d:0c:c0:54:a0:83:2e:0b:20:75: 37:b5:c0:0a:ef:69:73:09:45:0b:60:d6:16:8e:87:e0:23:e4: 73:bc:e6:db:90:8f:74:8f:78:be:f8:32:95:72:07:27:91:60: 74:41:b3:c3:22:65:f4:9c:58:1d:26:24:f0:48:59:c7:85:c6: c9:4b:ab:58:c1:c7:c4:cf:5c:65:19:d9:60:ef:cc:3d:cf:cb: 74:36:a4:70:65:78:60:47:05:e0:61:43:fa:c7:bd:42:e2:99: ef:d5:5a:47:0a:39:26:e2:23:fd:bf:47:82:d8:26:8b:b5:d5: 3a:e6:2d:b6:d8:a8:f9:45:98:96:cf:11:21:8d:c8:c5:c5:74: 12:16:9a:64:e0:e2:cb:4a:bb:52:c5:86:52:03:46:a9:5a:19: 2d:11:1d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUwNzA1MDYxMDE5WhcNMjUwNzEyMDYxMDE5WjAYMRYwFAYD VQQDEw02ODY4YzFjYy1lYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DU1baAMyuv/xH3k/XCLzjuCMVxYwLWTeaUS29jN4bVHshtdo4iYvx7WQA9y dvAlBpyL70rv/MBd1/WVySK9uQfM1dceseOCjgEBWjwJ8jUSPgFz/rp5pzomVM49 aCpC2iKu0EA2jBYMW3obmBid5so2p1Ar1+3d5oIItkbQjK4gPC7QvuZQrL5GJ64C AfNtegLFz8lsuN9mEh40x7NQyF8SviDCtgf43pfOSN3vR7CKoPq554TlzizqL1YL KZQnCDNI9W1MjRJHKhW4K8Z3ALaV4Ih/YPJcmCXsC4Y9NUSBXvQjH5mxTsEYeuCu zcSfQYf1M/Hq+1OSTyZYdZBQQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP74+2ln LwyfcL29v69VkTYGHQwfMB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALY9ClnD2MWqBf0HThKtdCwbpafSShEbd7kDx/+UbngjX/zuuW/ZgD CDKxrnIpLGD0v970UXr+tLAcfWnJDXtLc88IezqeGVI4EpD+6vdVAbhqe2QRnI7K 0nHKIJxCtxiYUZ0MwFSggy4LIHU3tcAK72lzCUULYNYWjofgI+RzvObbkI90j3i+ +DKVcgcnkWB0QbPDImX0nFgdJiTwSFnHhcbJS6tYwcfEz1xlGdlg78w9z8t0NqRw ZXhgRwXgYUP6x71C4pnv1VpHCjkm4iP9v0eC2CaLtdU65i222Kj5RZiWzxEhjcjF xXQSFppk4OLLSrtSxYZSA0apWhktER2y -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:15 2025 by rpki-client