$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: dPVYetcVuK5Z+f89Set4TZQ39Ee4ewA5GDdoBWMnrvM= Subject key identifier: CC:48:23:EC:41:F2:51:88:35:AA:0A:AF:0B:A1:A8:7E:60:20:F9:3D Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: A3 Signing time: Tue 01 Jul 2025 07:11:34 +0000 Manifest this update: Tue 01 Jul 2025 07:11:33 +0000 Manifest next update: Tue 08 Jul 2025 07:11:33 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: BYItpdDq+jV7K4hk4318t70Bb28/0uXXnl0Pgq4X15Y=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: WK09suWPiJTW5VawW56fPInSd31p6Tm1C+edtUFR9pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Jul 1 07:11:33 2025 GMT Not After : Jul 8 07:11:33 2025 GMT Subject: CN=68638a25-ee78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:9e:c0:54:43:9b:ef:73:9a:35:08:b0:07: da:75:fb:3d:b9:e4:15:86:53:9d:07:e5:fe:94:eb: 18:d6:b8:10:fe:de:63:6e:77:30:d1:64:a4:10:8d: cc:76:65:4b:cc:15:4b:c3:33:d5:23:75:9e:ea:f1: be:ea:b1:10:32:f9:ef:a2:02:15:e7:36:fd:9e:2e: f0:25:d7:b1:79:91:83:df:1b:71:ae:10:8a:5e:57: 05:aa:53:8b:a3:be:3e:53:30:86:ba:5a:3a:6c:03: 12:45:76:bf:a3:d0:b6:54:8c:87:5e:a0:cf:86:4b: 81:07:f6:34:af:64:e4:56:a9:67:6b:b0:10:28:d8: a5:d6:b3:76:bc:81:08:d1:cb:79:9f:71:0c:b0:c0: 9e:a0:10:9c:1b:94:73:6e:77:af:82:49:ec:24:b9: b4:f8:b8:89:59:2e:76:88:92:7e:66:47:cd:3e:b2: 33:74:98:6a:b4:cb:a7:47:d1:b1:05:b3:00:a7:17: 89:75:93:df:e8:3a:f0:16:1a:b3:df:96:6d:bf:05: cb:96:23:17:a8:dc:02:f6:4d:01:a7:b9:02:15:66: 7c:30:d8:17:f7:42:e5:0b:9f:66:17:29:35:19:f2: cd:c7:79:7a:10:e8:45:a4:ee:b3:0b:d5:c6:ee:4f: bb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:23:EC:41:F2:51:88:35:AA:0A:AF:0B:A1:A8:7E:60:20:F9:3D X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:52:c8:b4:0d:9d:b8:51:6a:ba:29:84:ce:46:ea:a6:23:bc: 86:53:4a:67:96:c0:5f:02:73:56:0d:59:5c:17:b6:ca:1c:9c: 2a:2b:37:8c:3c:92:a4:0f:5b:9a:50:8f:9a:6a:a2:10:2f:54: a2:5a:2b:42:58:07:6c:16:81:28:6a:0b:f6:d8:02:8e:bd:6d: f6:59:61:04:ce:fc:a6:75:04:ce:e8:b5:38:8b:50:f4:41:30: f9:70:0e:e5:52:03:13:ed:97:e0:bf:93:f4:d3:31:9a:46:14: ea:1c:71:b9:75:7e:2e:63:02:fc:8f:e3:bf:32:cb:25:d2:b1: 7f:fc:8c:28:b3:49:ba:81:c5:b2:a1:ea:95:52:d9:69:78:0b: 6e:0b:c0:13:e9:3d:51:81:ab:b6:88:98:56:2e:12:c2:a8:09: 1b:15:fc:22:07:73:ae:f9:f1:f2:e6:a3:f8:52:50:66:50:1a: 25:f2:16:9b:5b:43:8d:11:b9:d9:09:7a:d1:58:37:fb:52:ad: 04:7d:41:88:e5:16:db:fb:64:5e:71:4e:9c:73:7d:a3:51:2e: 74:53:48:d9:0c:3c:69:e4:8a:e8:4c:b0:b1:33:9d:44:94:2d: 4d:90:34:d9:a9:a9:ea:0f:50:b9:e5:f3:30:ee:03:74:3c:41: 58:1e:68:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwNzAxMDcxMTMzWhcNMjUwNzA4MDcxMTMzWjAYMRYwFAYD VQQDEw02ODYzOGEyNS1lZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W2ewFRDm+9zmjUIsAfadfs9ueQVhlOdB+X+lOsY1rgQ/t5jbncw0WSkEI3M dmVLzBVLwzPVI3We6vG+6rEQMvnvogIV5zb9ni7wJdexeZGD3xtxrhCKXlcFqlOL o74+UzCGulo6bAMSRXa/o9C2VIyHXqDPhkuBB/Y0r2TkVqlna7AQKNil1rN2vIEI 0ct5n3EMsMCeoBCcG5RzbnevgknsJLm0+LiJWS52iJJ+ZkfNPrIzdJhqtMunR9Gx BbMApxeJdZPf6DrwFhqz35ZtvwXLliMXqNwC9k0Bp7kCFWZ8MNgX90LlC59mFyk1 GfLNx3l6EOhFpO6zC9XG7k+7SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxII+xB 8lGINaoKrwuhqH5gIPk9MB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrUsi0DZ24UWq6KYTORuqmI7yGU0pnlsBfAnNWDVlcF7bKHJwqKzeM PJKkD1uaUI+aaqIQL1SiWitCWAdsFoEoagv22AKOvW32WWEEzvymdQTO6LU4i1D0 QTD5cA7lUgMT7Zfgv5P00zGaRhTqHHG5dX4uYwL8j+O/Mssl0rF//Iwos0m6gcWy oeqVUtlpeAtuC8AT6T1Rgau2iJhWLhLCqAkbFfwiB3Ou+fHy5qP4UlBmUBol8hab W0ONEbnZCXrRWDf7Uq0EfUGI5Rbb+2RecU6cc32jUS50U0jZDDxp5IroTLCxM51E lC1NkDTZqanqD1C55fMw7gN0PEFYHmhP -----END CERTIFICATE-----Generated at Thu Jul 3 00:21:35 2025 by rpki-client