$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: 4AQzz0eHDAMxqVLSs8KxOOoLJlyMaI9taZet0zftMM8= Subject key identifier: 4C:BE:F8:D8:8C:C3:43:B2:6A:62:3E:FB:D9:93:3F:38:DC:D2:2C:50 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 027C Signing time: Sat 23 Aug 2025 01:56:37 +0000 Manifest this update: Sat 23 Aug 2025 01:56:37 +0000 Manifest next update: Sat 30 Aug 2025 01:56:37 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: j1s8nlcoJI849D5B9XKB+QX2xq34sk/4GZADMuFxLco=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Aug 23 01:56:37 2025 GMT Not After : Aug 30 01:56:37 2025 GMT Subject: CN=68a91fd5-0b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:be:13:4e:f3:88:1c:43:9f:49:f1:01:ec: 6b:aa:9a:1b:13:fe:bc:06:86:81:d8:e6:be:d4:45: f1:1a:f9:72:be:fb:b4:32:9d:44:56:71:a7:98:e3: 09:3f:17:86:00:ad:a0:e4:b0:43:c6:71:36:af:a3: 9b:57:77:bf:c7:80:c4:3a:21:81:bd:37:1e:0a:ad: 18:3e:e3:30:3f:d5:f5:be:e1:3e:9f:b0:24:2c:47: 43:88:b6:31:d3:0d:bd:e9:d5:ad:36:3c:3c:53:07: 61:14:3a:14:55:c2:1d:57:37:b6:bc:d8:8a:7b:79: 71:7d:2c:b4:cd:10:67:98:5f:94:c1:77:3e:30:65: ed:92:32:c2:a8:4e:63:ed:ca:b0:c8:a9:03:e1:57: eb:42:5f:b3:a0:8b:93:01:50:33:06:e6:fc:1d:19: 21:1d:b2:ce:c9:1b:4c:b2:7d:2d:c0:d9:95:a3:f7: 81:a8:37:3f:59:b3:bf:db:f8:9f:83:75:cb:71:38: d1:61:06:8b:1a:40:5e:5c:ce:cb:95:30:35:f4:6c: 58:1e:9b:d0:3a:f7:a1:c0:f3:2b:09:12:5a:9a:0c: 4c:bb:67:78:5d:f0:f4:56:c7:1f:55:51:24:4c:5a: 4e:a1:ff:9d:32:a5:ac:b3:af:6d:04:ec:5e:ff:78: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BE:F8:D8:8C:C3:43:B2:6A:62:3E:FB:D9:93:3F:38:DC:D2:2C:50 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bb:3c:21:6a:dd:4f:1b:c3:22:19:9e:fb:0d:e6:12:54:33: 99:85:30:90:2c:4e:20:cf:de:7c:f6:bd:03:bb:95:7f:d7:48: 6a:7c:fe:d4:2f:f0:7f:1b:04:00:30:7e:6f:c8:1a:e0:9b:c0: 69:ab:7c:e8:cf:26:d7:a4:29:17:ab:77:8b:2a:c1:21:1a:9d: 54:73:2c:73:3e:7a:bb:4e:1b:cf:6c:fd:12:45:f1:32:f6:06: fe:d9:56:cd:2f:bc:01:d6:a6:31:e4:af:2b:69:2c:4e:99:1b: 37:74:8e:59:d0:4d:6c:c2:07:7d:02:fb:a8:ca:ea:61:ba:9f: e4:01:27:6c:c2:55:6a:97:86:38:ff:d7:ed:24:db:46:69:f5: 9f:8f:10:0a:a8:37:67:35:45:1c:5a:8b:82:b2:12:a9:45:c0: f1:d1:49:4b:4a:d4:e5:1c:87:3f:9f:98:02:6e:b0:f4:02:84: 95:c5:62:3d:2c:3c:15:71:39:a6:46:98:c7:63:31:6d:44:50: 2c:4b:9d:84:8d:b7:87:1a:51:ed:d9:fb:bb:a4:d6:fc:52:2e: 92:d9:5b:8e:c7:15:cd:06:d4:73:b1:c7:43:01:30:63:4e:3d: 89:40:a6:d0:0e:8d:73:b4:6c:9e:af:3e:ad:79:e2:65:68:d7: 33:9e:8d:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwODIzMDE1NjM3WhcNMjUwODMwMDE1NjM3WjAYMRYwFAYD VQQDEw02OGE5MWZkNS0wYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2q+E07ziBxDn0nxAexrqpobE/68BoaB2Oa+1EXxGvlyvvu0Mp1EVnGnmOMJ PxeGAK2g5LBDxnE2r6ObV3e/x4DEOiGBvTceCq0YPuMwP9X1vuE+n7AkLEdDiLYx 0w296dWtNjw8UwdhFDoUVcIdVze2vNiKe3lxfSy0zRBnmF+UwXc+MGXtkjLCqE5j 7cqwyKkD4VfrQl+zoIuTAVAzBub8HRkhHbLOyRtMsn0twNmVo/eBqDc/WbO/2/if g3XLcTjRYQaLGkBeXM7LlTA19GxYHpvQOvehwPMrCRJamgxMu2d4XfD0VscfVVEk TFpOof+dMqWss69tBOxe/3i3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy++NiM w0OyamI++9mTPzjc0ixQMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcuzwhat1PG8MiGZ77DeYSVDOZhTCQLE4gz9589r0Du5V/10hqfP7U L/B/GwQAMH5vyBrgm8Bpq3zozybXpCkXq3eLKsEhGp1UcyxzPnq7ThvPbP0SRfEy 9gb+2VbNL7wB1qYx5K8raSxOmRs3dI5Z0E1swgd9Avuoyuphup/kASdswlVql4Y4 /9ftJNtGafWfjxAKqDdnNUUcWouCshKpRcDx0UlLStTlHIc/n5gCbrD0AoSVxWI9 LDwVcTmmRpjHYzFtRFAsS52EjbeHGlHt2fu7pNb8Ui6S2VuOxxXNBtRzscdDATBj Tj2JQKbQDo1ztGyerz6teeJlaNczno2e -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:18 2025 by rpki-client