$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: f5UQpxfsjfsczjPl3nhl3Emp/crM2uEzdtF6vLt6D5M= Subject key identifier: CD:A4:3E:16:11:5C:3C:69:A1:81:CA:69:04:BB:B3:C6:3F:E2:2B:3B Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: BE Signing time: Sat 23 Aug 2025 06:06:52 +0000 Manifest this update: Sat 23 Aug 2025 06:06:52 +0000 Manifest next update: Sat 30 Aug 2025 06:06:52 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: Ha2f91CQtFEzQt8aYoHcIjhKWnauxhEa+KoGlPubRmM=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: WK09suWPiJTW5VawW56fPInSd31p6Tm1C+edtUFR9pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Aug 23 06:06:52 2025 GMT Not After : Aug 30 06:06:52 2025 GMT Subject: CN=68a95a7c-390a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:ba:c5:29:ee:83:8e:91:ec:84:5c:3d:71: 7b:a4:01:09:0e:26:7b:45:dd:2a:8f:10:b7:db:37: 4b:53:09:0b:57:db:41:f6:20:17:e6:a8:8b:14:0e: fe:0c:94:e4:37:b3:36:bf:1a:c8:03:a1:6f:b0:aa: 1e:20:f1:15:72:35:18:28:62:a4:91:5e:7d:2e:dc: f8:92:2c:95:7f:e5:74:27:e3:54:e8:74:ee:a7:d1: 9e:fc:c9:5c:b3:fa:08:f7:99:06:32:0e:03:36:12: 05:85:a3:62:26:ad:74:78:08:44:f5:31:b1:1f:07: fa:c0:aa:84:44:45:e1:ff:86:1f:46:dd:a2:10:a9: d5:6f:38:e9:39:97:62:af:97:00:07:8f:91:a8:a5: 7f:7e:8f:c0:5d:60:cf:6d:9f:3c:07:af:22:2a:cd: 24:ea:cb:d1:73:4b:50:86:c0:46:06:8c:87:78:6f: be:1b:5a:5c:21:f3:fa:83:96:89:13:cc:d3:7b:c1: 58:9d:cf:cc:22:4d:8f:01:e1:39:69:d9:ee:56:7c: 80:17:47:dc:bd:94:05:82:ca:42:89:5c:5b:e2:fc: eb:cb:e2:78:0f:e4:46:1b:6b:53:aa:99:65:cd:03: 83:1b:ed:b1:f7:57:d6:e7:3f:9f:a5:38:e2:48:79: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A4:3E:16:11:5C:3C:69:A1:81:CA:69:04:BB:B3:C6:3F:E2:2B:3B X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:58:6e:48:bf:68:dc:ee:a4:a4:4e:39:27:07:89:3b:61:5b: cf:1b:f4:38:91:07:59:17:10:9b:63:3d:d9:3a:45:4f:7f:be: 72:65:8e:63:ef:ff:2b:38:a9:f7:af:10:73:37:e9:84:d3:16: 6c:26:eb:3a:dc:eb:8d:62:3f:86:b3:c4:10:ab:e2:95:d6:12: a7:1b:d2:75:44:fe:ea:b6:b6:35:c6:71:23:b2:37:5a:6d:c9: b0:4e:1f:b5:e1:33:9e:9d:95:0c:96:b6:ad:af:ef:4d:b6:a9: f3:24:23:d5:a6:04:9b:87:51:ce:27:d0:72:5c:7f:ca:52:42: 27:26:13:70:a0:66:93:c9:50:7f:f7:7d:57:31:cb:b4:76:ce: aa:32:fc:45:85:d6:9f:f0:cf:c1:72:ba:76:13:d8:02:f9:d5: 01:e6:90:76:8f:94:37:04:b4:56:74:8a:66:b1:06:1b:51:3c: 00:89:06:14:24:b9:ac:bf:63:35:81:87:3a:0c:a0:ea:56:a1: 26:a9:55:e1:7d:af:b1:d2:38:c6:77:29:35:7e:c2:6b:b5:c8: d1:33:0b:95:a1:f6:99:bd:11:9e:3f:ee:7e:27:b1:b3:30:51: cf:16:7c:90:97:96:76:5a:7c:54:a3:7b:24:d1:24:d2:b3:10: d5:d6:82:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwODIzMDYwNjUyWhcNMjUwODMwMDYwNjUyWjAYMRYwFAYD VQQDEw02OGE5NWE3Yy0zOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn26xSnug46R7IRcPXF7pAEJDiZ7Rd0qjxC32zdLUwkLV9tB9iAX5qiLFA7+ DJTkN7M2vxrIA6FvsKoeIPEVcjUYKGKkkV59Ltz4kiyVf+V0J+NU6HTup9Ge/Mlc s/oI95kGMg4DNhIFhaNiJq10eAhE9TGxHwf6wKqEREXh/4YfRt2iEKnVbzjpOZdi r5cAB4+RqKV/fo/AXWDPbZ88B68iKs0k6svRc0tQhsBGBoyHeG++G1pcIfP6g5aJ E8zTe8FYnc/MIk2PAeE5adnuVnyAF0fcvZQFgspCiVxb4vzry+J4D+RGG2tTqpll zQODG+2x91fW5z+fpTjiSHkJ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2kPhYR XDxpoYHKaQS7s8Y/4is7MB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEWG5Iv2jc7qSkTjknB4k7YVvPG/Q4kQdZFxCbYz3ZOkVPf75yZY5j 7/8rOKn3rxBzN+mE0xZsJus63OuNYj+Gs8QQq+KV1hKnG9J1RP7qtrY1xnEjsjda bcmwTh+14TOenZUMlratr+9NtqnzJCPVpgSbh1HOJ9ByXH/KUkInJhNwoGaTyVB/ 931XMcu0ds6qMvxFhdaf8M/Bcrp2E9gC+dUB5pB2j5Q3BLRWdIpmsQYbUTwAiQYU JLmsv2M1gYc6DKDqVqEmqVXhfa+x0jjGdyk1fsJrtcjRMwuVofaZvRGeP+5+J7Gz MFHPFnyQl5Z2WnxUo3sk0STSsxDV1oI1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:36 2025 by rpki-client