$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft File: _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json) Hash identifier: Wh1C2OP5PB50vi9cvMQzgpe2D1fSLT6FMo8Qe+Zmcao= Subject key identifier: D0:EE:B8:F2:7B:19:42:FE:45:35:38:A5:9E:0A:A6:8C:1A:3D:0F:FF Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19 Certificate issuer: /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft Manifest number: 0142 Signing time: Sat 23 Aug 2025 04:28:29 +0000 Manifest this update: Sat 23 Aug 2025 04:28:29 +0000 Manifest next update: Sat 30 Aug 2025 04:28:29 +0000 Files and hashes: 1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: rK4zs9WfZ0EQJ9Df3yOe3Xwbu7NDLejHTXksffdUcGs=) 2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: LprFRa9DDPfl/3Qfhn6O1nEl8KrrEuPylvF2cGWjxe4=) 3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: n+XeE9XCFt/q45U7WPv35bND6hFpIvrgPLf9ca2BNws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819 Validity Not Before: Aug 23 04:28:29 2025 GMT Not After : Aug 30 04:28:29 2025 GMT Subject: CN=68a9436d-93d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:c5:57:6f:f9:01:e5:55:d5:b0:18:6d:8c: 18:d2:aa:c2:1a:1e:9f:99:db:83:26:22:8f:db:f9: 4e:b2:45:57:96:f6:80:11:c0:b9:61:75:e0:e1:f9: ca:c0:d0:09:b4:6f:bb:aa:00:c9:a7:39:44:5f:12: c6:3c:fa:6e:59:03:3f:95:6e:3f:8a:1f:68:c6:55: 49:19:3f:eb:b5:8e:51:3e:f5:ce:87:e2:45:a5:94: 37:54:52:20:5e:e3:09:73:1e:6e:01:1e:ac:39:db: 1d:17:18:41:38:dc:8a:d1:a8:50:c3:08:7c:8a:e7: 0f:b5:7a:90:da:12:5a:f3:fa:b8:d7:f6:31:97:8f: d5:ce:ca:2b:51:c8:a5:4c:28:b8:5e:1f:8d:48:fc: 54:f6:74:f3:6a:34:4e:b3:64:d8:69:51:1e:cc:4b: 6e:50:e6:72:69:cc:ae:f1:dc:66:f6:ef:73:b9:e4: 6f:eb:34:e5:d7:44:4a:28:89:89:d4:09:d4:49:c0: c6:22:20:b7:05:52:f9:6c:01:ae:53:e5:b9:23:c6: 46:3a:4f:e0:62:5d:41:7e:7b:fa:bf:20:86:66:b6: 4a:a4:9d:cf:40:36:5b:e0:36:27:fa:3d:9a:a9:2a: 5c:b7:76:fc:f3:00:99:8b:bf:93:d7:a4:bf:78:3b: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EE:B8:F2:7B:19:42:FE:45:35:38:A5:9E:0A:A6:8C:1A:3D:0F:FF X509v3 Authority Key Identifier: keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:80:72:00:d0:7c:2a:de:e2:bc:93:48:78:70:fa:7e:30:e1: 90:a9:1d:6d:b8:55:79:e1:72:f0:9d:47:72:1e:36:f3:45:fc: b9:bc:2e:4c:e3:3c:dd:94:ba:fc:57:b5:05:f4:2a:00:34:af: be:a9:7f:85:78:a8:72:49:3b:dd:a9:52:2d:ee:4f:87:41:70: 1b:cf:22:12:72:f6:bd:21:94:49:35:fd:68:57:23:2b:bf:91: e6:bb:90:9c:41:bb:f2:98:e9:93:bc:0c:3f:34:2e:23:0c:ed: 66:b0:5e:02:67:bf:82:1c:e6:c2:0a:39:a5:f2:0e:23:8b:cc: 74:98:17:63:ba:7a:88:fe:d6:5c:52:66:20:75:a0:43:95:04: 03:28:0a:81:e0:75:72:a9:12:ac:e1:e6:c7:2a:49:09:3e:46: 6d:8b:ca:a5:e9:38:df:a5:d6:d5:0f:6f:95:42:64:d7:5a:95: a4:48:36:a3:4b:4b:61:a0:3a:a3:99:4b:c0:4f:eb:52:0b:f8: 86:5f:97:48:30:d1:bd:e1:7e:c3:8f:36:01:37:a9:b4:ad:49: 26:17:83:5f:ec:12:e6:c1:8d:a8:94:ee:26:40:c9:b6:f7:49: f6:c7:3b:d6:8e:0f:f7:fd:34:06:2b:84:f7:e5:08:fd:e4:be: d3:ad:e8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5MTMxMTAvBgNVBAUTKEZGNUMxMDA5NzVFMzY4NjI0NUNBREU1NzlDNTc0MzNC QkZERjY4MTkwHhcNMjUwODIzMDQyODI5WhcNMjUwODMwMDQyODI5WjAYMRYwFAYD VQQDEw02OGE5NDM2ZC05M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfPFV2/5AeVV1bAYbYwY0qrCGh6fmduDJiKP2/lOskVXlvaAEcC5YXXg4fnK wNAJtG+7qgDJpzlEXxLGPPpuWQM/lW4/ih9oxlVJGT/rtY5RPvXOh+JFpZQ3VFIg XuMJcx5uAR6sOdsdFxhBONyK0ahQwwh8iucPtXqQ2hJa8/q41/Yxl4/VzsorUcil TCi4Xh+NSPxU9nTzajROs2TYaVEezEtuUOZyacyu8dxm9u9zueRv6zTl10RKKImJ 1AnUScDGIiC3BVL5bAGuU+W5I8ZGOk/gYl1Bfnv6vyCGZrZKpJ3PQDZb4DYn+j2a qSpct3b88wCZi7+T16S/eDu/nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDuuPJ7 GUL+RTU4pZ4KpowaPQ//MB8GA1UdIwQYMBaAFP9cEAl142hiRcreV5xXQzu/32gZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDkxMy8wNkY1QjVDQTkw RDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFHSkZ5dDVYbkZkRE83X2Zh QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xd1FDWFhqYUdKRnl0NVhuRmRETzdfZmFCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDkxMy8wNkY1QjVDQTkwRDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFH SkZ5dDVYbkZkRE83X2ZhQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGgHIA0Hwq3uK8k0h4cPp+MOGQqR1tuFV54XLwnUdyHjbzRfy5vC5M 4zzdlLr8V7UF9CoANK++qX+FeKhySTvdqVIt7k+HQXAbzyIScva9IZRJNf1oVyMr v5Hmu5CcQbvymOmTvAw/NC4jDO1msF4CZ7+CHObCCjml8g4ji8x0mBdjunqI/tZc UmYgdaBDlQQDKAqB4HVyqRKs4ebHKkkJPkZti8ql6TjfpdbVD2+VQmTXWpWkSDaj S0thoDqjmUvAT+tSC/iGX5dIMNG94X7DjzYBN6m0rUkmF4Nf7BLmwY2olO4mQMm2 90n2xzvWjg/3/TQGK4T35Qj95L7Trege -----END CERTIFICATE-----Generated at Sun Aug 24 00:36:52 2025 by rpki-client