$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: TKLYwA//Avdc3kaXPth2WYxDqHZo7AADU/2TBo56BIQ= Subject key identifier: 5C:3E:FD:BB:7E:6F:5B:14:39:31:20:B3:DC:21:2F:7C:31:88:C9:6A Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C63 Signing time: Wed 02 Jul 2025 18:33:37 +0000 Manifest this update: Wed 02 Jul 2025 18:33:36 +0000 Manifest next update: Wed 09 Jul 2025 18:33:36 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: ZQYQsvJWDtmIkmzVYw693Ul7GeWq/3lzZLuVhT3V7s0=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Jul 2 18:33:36 2025 GMT Not After : Jul 9 18:33:36 2025 GMT Subject: CN=68657b81-63d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:c9:51:c1:7f:7c:52:3a:44:77:b8:d7:e4: 00:85:09:67:b6:85:8d:f2:7d:56:14:a7:f8:bd:2c: 37:dc:93:af:be:a3:7e:24:16:f9:f8:df:7b:4f:cb: 0e:5b:a8:ca:13:72:3b:dd:36:24:e2:82:d4:e3:46: 48:bc:ea:b8:9c:54:d3:95:e6:8f:3c:5b:05:1c:e3: 7c:4f:f0:b8:1f:c3:9f:0a:56:ff:ea:71:10:2f:48: 47:ed:74:13:2b:2b:50:c0:d1:11:f7:4a:03:28:0b: 5f:eb:ca:ae:25:22:5d:bc:9e:cb:8e:cc:e9:b5:b5: 1a:20:5d:3c:25:20:81:7a:4a:13:d1:51:04:3f:c6: 74:6a:e9:a3:87:1e:49:3d:6b:68:1b:d1:d9:2d:73: 80:5d:14:26:49:91:c6:62:e7:a9:dd:6f:72:09:3c: cc:72:d1:0d:0b:ea:99:b6:fa:e4:d9:6a:20:1e:29: ed:77:f6:29:a4:23:fd:8d:0c:fe:e5:37:12:87:99: 8b:c0:85:42:f5:08:e2:88:88:c2:85:55:be:1a:ff: ca:75:f3:22:eb:2a:4b:5e:ca:9f:e3:e0:95:1a:9c: c7:bf:07:c2:8b:b0:75:50:37:14:c8:ef:c4:23:37: 82:ab:b6:6d:c9:1e:82:48:d9:05:3e:5a:79:b8:6c: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:FD:BB:7E:6F:5B:14:39:31:20:B3:DC:21:2F:7C:31:88:C9:6A X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ab:62:04:62:02:ac:16:a5:6f:64:95:85:7c:6e:46:67:c3: e2:e4:c7:67:b4:21:aa:e1:7e:0e:87:44:76:a0:04:67:53:78: e4:e2:13:88:96:2a:8d:8b:cc:86:3a:26:31:d8:ed:c0:18:8f: 68:e5:b3:a1:9a:bb:7b:c6:d7:6b:04:6e:55:8b:ce:2d:da:dc: 7a:14:f3:57:68:9e:c1:a7:25:bc:d6:9d:2b:9a:73:39:76:2d: f4:1c:41:9f:e3:3d:33:1a:7b:fb:1c:a0:ad:12:ec:a1:7c:65: 36:79:78:6f:73:c4:7b:d0:16:67:6d:c6:58:5f:aa:79:53:33: 81:33:8f:0a:53:88:10:4f:e7:cb:63:a5:03:63:9d:4c:a0:b6: f7:38:41:f9:27:df:4a:3c:a5:0f:e8:18:41:11:60:ac:9b:d6: f7:9a:86:79:37:4e:e9:88:4e:95:a6:68:13:21:d0:94:d8:f0: 3e:a0:1c:ef:4c:1a:62:87:d4:2b:53:cc:b7:21:58:27:50:5b: 7b:bf:4e:02:db:02:6e:4a:51:20:f9:09:bb:91:38:ed:29:08: 11:39:c7:56:48:e3:36:fe:5c:dc:3f:e2:88:61:93:26:14:3a: 5a:03:f0:9d:06:1a:f6:af:7f:83:86:e6:96:92:b0:67:3a:4c: dd:a1:d8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwNzAyMTgzMzM2WhcNMjUwNzA5MTgzMzM2WjAYMRYwFAYD VQQDEw02ODY1N2I4MS02M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3XJUcF/fFI6RHe41+QAhQlntoWN8n1WFKf4vSw33JOvvqN+JBb5+N97T8sO W6jKE3I73TYk4oLU40ZIvOq4nFTTleaPPFsFHON8T/C4H8OfClb/6nEQL0hH7XQT KytQwNER90oDKAtf68quJSJdvJ7LjszptbUaIF08JSCBekoT0VEEP8Z0aumjhx5J PWtoG9HZLXOAXRQmSZHGYuep3W9yCTzMctENC+qZtvrk2WogHintd/YppCP9jQz+ 5TcSh5mLwIVC9QjiiIjChVW+Gv/KdfMi6ypLXsqf4+CVGpzHvwfCi7B1UDcUyO/E IzeCq7ZtyR6CSNkFPlp5uGyw/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw+/bt+ b1sUOTEgs9whL3wxiMlqMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZq2IEYgKsFqVvZJWFfG5GZ8Pi5MdntCGq4X4Oh0R2oARnU3jk4hOI liqNi8yGOiYx2O3AGI9o5bOhmrt7xtdrBG5Vi84t2tx6FPNXaJ7BpyW81p0rmnM5 di30HEGf4z0zGnv7HKCtEuyhfGU2eXhvc8R70BZnbcZYX6p5UzOBM48KU4gQT+fL Y6UDY51MoLb3OEH5J99KPKUP6BhBEWCsm9b3moZ5N07piE6VpmgTIdCU2PA+oBzv TBpih9QrU8y3IVgnUFt7v04C2wJuSlEg+Qm7kTjtKQgROcdWSOM2/lzcP+KIYZMm FDpaA/CdBhr2r3+DhuaWkrBnOkzdodjD -----END CERTIFICATE-----Generated at Fri Jul 4 00:30:57 2025 by rpki-client