$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: zgyfdRA5KXYO4joKp+pulDcxf/KJeZ3LS6mHj67OamQ= Subject key identifier: 53:A0:D6:86:7A:68:E7:CB:37:FF:92:9D:DC:F2:F4:27:F7:7A:EE:9D Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 0266 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 0262 Signing time: Thu 03 Jul 2025 02:11:30 +0000 Manifest this update: Thu 03 Jul 2025 02:11:29 +0000 Manifest next update: Thu 10 Jul 2025 02:11:29 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: dt7tkwuzpjl6s4y+iQZPAJtHrHwTd1WEAL0s9F9RP9A=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Jul 3 02:11:29 2025 GMT Not After : Jul 10 02:11:29 2025 GMT Subject: CN=6865e6d2-8cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:d1:b1:a1:6b:bf:16:8c:fb:d7:d2:28:bb: 50:7e:db:93:90:48:6b:53:7e:88:d1:94:40:1e:dc: 25:29:f0:1e:a7:ae:cf:23:3e:47:ad:a3:5b:f0:6d: 92:27:b0:c8:f6:9e:0f:03:29:f7:68:32:b0:33:d6: 80:34:46:1c:96:06:86:94:0d:49:ec:ee:f2:ca:21: 91:b5:f1:f8:cd:75:e7:48:53:41:7c:59:5e:38:6d: fd:14:8a:f5:8a:c5:72:ea:85:ba:bf:2c:4a:41:e6: 69:18:33:0e:f6:25:4e:a4:d1:f6:a2:61:9f:0a:e3: 39:1f:4e:23:62:89:fb:d8:89:e6:81:dd:cc:ba:0c: 78:19:87:ca:b0:28:f4:a7:ba:57:4b:9b:29:a2:b5: ad:7c:45:76:9a:cb:4e:30:4d:0c:8d:23:7e:bc:92: c3:82:f3:ec:a0:5a:8f:5f:58:87:81:e5:4a:9f:8e: b2:ba:1a:2f:41:44:a5:13:bb:fe:72:29:4f:bd:f7: 78:67:a8:79:7c:cd:cb:d9:15:3c:63:4a:c7:67:5a: 08:87:97:ca:f3:62:c9:33:67:31:1b:86:f5:90:89: 14:51:cc:62:0e:c3:52:b0:ed:14:6b:2a:d8:c6:94: 8e:89:08:a7:46:9f:23:1a:f1:30:9c:ea:bc:fd:4b: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:D6:86:7A:68:E7:CB:37:FF:92:9D:DC:F2:F4:27:F7:7A:EE:9D X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7e:1d:5e:93:65:fe:93:db:00:62:7f:d4:ce:ff:43:e8:d2: 49:8a:bf:ca:9a:38:be:e2:68:5c:40:a1:3e:f6:83:89:26:70: e8:ec:7a:54:2e:e5:9f:39:85:5a:cf:f5:56:9b:a1:b7:b2:4d: eb:43:c5:ba:7c:27:60:68:61:f4:ea:8e:a2:78:ab:60:04:7f: 94:59:87:67:3d:0a:c9:b8:f4:86:3d:17:c4:8e:44:77:5e:4d: bc:89:e7:04:1a:8f:71:f0:1e:f8:a8:76:cd:3a:ea:ae:93:ff: 37:66:32:f2:96:5e:98:ec:23:c1:5a:77:cb:95:b6:01:db:3e: 43:12:d2:28:12:0e:72:d1:70:42:be:66:15:b8:be:55:fd:24: f7:08:3e:6b:ba:34:e4:56:76:fc:7f:73:97:c7:58:a4:c8:9b: 63:55:39:88:6d:eb:78:24:23:98:60:3e:d1:22:d7:00:14:63: 86:50:b7:3f:4b:9e:1c:d5:b1:fb:34:24:37:21:36:8b:3b:f4: ff:e6:89:4b:66:7c:9b:30:fa:c3:81:94:c0:ee:03:74:d4:a7: d2:01:b0:fe:38:25:ea:71:5b:22:94:b8:34:7b:f0:98:29:cf: a6:a1:69:fe:c3:75:44:f8:c6:d1:4a:b3:30:59:90:c6:47:b1: 4e:e6:d6:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwNzAzMDIxMTI5WhcNMjUwNzEwMDIxMTI5WjAYMRYwFAYD VQQDEw02ODY1ZTZkMi04Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn3RsaFrvxaM+9fSKLtQftuTkEhrU36I0ZRAHtwlKfAep67PIz5HraNb8G2S J7DI9p4PAyn3aDKwM9aANEYclgaGlA1J7O7yyiGRtfH4zXXnSFNBfFleOG39FIr1 isVy6oW6vyxKQeZpGDMO9iVOpNH2omGfCuM5H04jYon72Inmgd3Mugx4GYfKsCj0 p7pXS5sporWtfEV2mstOME0MjSN+vJLDgvPsoFqPX1iHgeVKn46yuhovQUSlE7v+ cilPvfd4Z6h5fM3L2RU8Y0rHZ1oIh5fK82LJM2cxG4b1kIkUUcxiDsNSsO0UayrY xpSOiQinRp8jGvEwnOq8/UvrwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOg1oZ6 aOfLN/+Sndzy9Cf3eu6dMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWfh1ek2X+k9sAYn/Uzv9D6NJJir/Kmji+4mhcQKE+9oOJJnDo7HpU LuWfOYVaz/VWm6G3sk3rQ8W6fCdgaGH06o6ieKtgBH+UWYdnPQrJuPSGPRfEjkR3 Xk28iecEGo9x8B74qHbNOuquk/83ZjLyll6Y7CPBWnfLlbYB2z5DEtIoEg5y0XBC vmYVuL5V/ST3CD5rujTkVnb8f3OXx1ikyJtjVTmIbet4JCOYYD7RItcAFGOGULc/ S54c1bH7NCQ3ITaLO/T/5olLZnybMPrDgZTA7gN01KfSAbD+OCXqcVsilLg0e/CY Kc+moWn+w3VE+MbRSrMwWZDGR7FO5tYc -----END CERTIFICATE-----Generated at Fri Jul 4 14:50:49 2025 by rpki-client