$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: Rj7pmlFODWAZ/qSAfZek5OUqec2n9oL1VmHzy63W92M= Subject key identifier: FD:B7:03:60:85:19:93:0D:31:20:F8:C5:2E:BE:69:F2:F4:3A:4D:03 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C7D Signing time: Fri 22 Aug 2025 18:25:16 +0000 Manifest this update: Fri 22 Aug 2025 18:25:15 +0000 Manifest next update: Fri 29 Aug 2025 18:25:15 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: +S938dYMhhXHhZHatnyeBoj40Vz77YGhDZc8wBvaJuE=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Aug 22 18:25:15 2025 GMT Not After : Aug 29 18:25:15 2025 GMT Subject: CN=68a8b60c-5fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:8b:bb:0d:dc:7b:36:83:3d:b8:4f:6a:34: 46:75:c2:36:5b:b2:48:f9:d0:cb:f3:74:3a:9b:5b: e6:f9:b3:cd:a5:33:58:85:a3:ac:f3:09:20:16:d5: 01:e3:36:84:b1:0d:d2:1e:f3:e8:33:7d:f7:5d:63: af:47:6e:59:b5:ef:00:6b:62:39:88:ea:dd:09:c9: b3:50:a8:16:ba:ac:3c:2d:95:6c:a5:d9:b1:23:15: 92:6c:52:e5:68:ce:73:be:9a:8a:a0:54:89:c1:0b: b7:5a:88:f3:48:4e:27:c6:44:c8:d2:fc:5c:5c:df: 35:36:8b:ed:93:df:6b:3f:36:1d:58:76:b1:c0:10: c1:32:d7:2f:de:56:f2:71:e1:90:4b:6c:c4:b8:fa: bb:46:c8:0a:a0:49:19:b6:97:0a:7c:80:1b:27:f6: a4:d4:f8:28:08:65:70:f2:20:eb:23:6d:19:08:b8: c8:0e:74:66:4f:38:e2:fa:0c:3d:7d:0e:cf:17:47: 70:25:71:86:40:87:0b:9e:f9:0a:fc:cd:c8:70:55: 9a:51:89:ae:65:9f:a0:f9:e4:3c:e3:2c:fd:a7:6e: 26:7a:8d:bd:9e:e8:74:3a:6d:f9:9c:a4:34:d0:6a: ae:5c:1c:af:de:4b:d0:f9:55:6f:54:00:bd:47:ef: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:03:60:85:19:93:0D:31:20:F8:C5:2E:BE:69:F2:F4:3A:4D:03 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:88:bd:59:0f:22:a3:14:9e:94:58:e5:60:3d:2d:8c:da:34: 2e:b2:c7:b6:df:86:2b:53:24:4b:eb:3f:41:7a:ec:61:77:87: c8:0c:af:ad:0d:2c:86:4f:46:ae:bb:38:b6:72:7d:c7:1c:ba: fa:89:70:67:9e:af:55:6a:fc:fc:fc:12:a1:57:76:fb:84:68: a2:ee:b3:e1:7b:d0:1b:6b:14:0e:82:35:28:9a:bf:af:24:9b: 3b:df:9c:e0:47:39:21:cc:5b:c2:d3:6d:64:04:3e:d7:c4:6a: 77:32:4d:b1:3d:69:4d:44:22:3e:2c:69:1b:be:a0:a8:71:71: 0f:bc:58:22:78:86:5e:ec:dc:8c:30:42:3f:3e:be:c4:01:1f: f8:49:ac:e0:05:2b:0f:e6:15:fe:40:c9:5a:6b:d3:79:b0:8e: 60:c8:69:bc:53:2d:26:17:8b:57:8e:6f:0c:10:28:21:8d:e0: ee:00:91:13:a2:a5:f3:00:21:c6:5a:8b:29:2b:44:c5:6c:5d: a2:c9:71:e7:ec:8f:02:3a:39:28:66:50:77:42:96:76:1e:04: bb:bc:96:9b:75:bb:21:9a:20:75:53:aa:c6:54:b1:c0:c6:17: a6:e4:36:14:b4:0a:b7:84:0b:75:50:ee:d0:cd:0c:bf:94:ab: 20:69:87:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwODIyMTgyNTE1WhcNMjUwODI5MTgyNTE1WjAYMRYwFAYD VQQDEw02OGE4YjYwYy01ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+SLuw3cezaDPbhPajRGdcI2W7JI+dDL83Q6m1vm+bPNpTNYhaOs8wkgFtUB 4zaEsQ3SHvPoM333XWOvR25Zte8Aa2I5iOrdCcmzUKgWuqw8LZVspdmxIxWSbFLl aM5zvpqKoFSJwQu3WojzSE4nxkTI0vxcXN81Novtk99rPzYdWHaxwBDBMtcv3lby ceGQS2zEuPq7RsgKoEkZtpcKfIAbJ/ak1PgoCGVw8iDrI20ZCLjIDnRmTzji+gw9 fQ7PF0dwJXGGQIcLnvkK/M3IcFWaUYmuZZ+g+eQ84yz9p24meo29nuh0Om35nKQ0 0GquXByv3kvQ+VVvVAC9R+866wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP23A2CF GZMNMSD4xS6+afL0Ok0DMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxiL1ZDyKjFJ6UWOVgPS2M2jQusse234YrUyRL6z9Beuxhd4fIDK+t DSyGT0auuzi2cn3HHLr6iXBnnq9Vavz8/BKhV3b7hGii7rPhe9AbaxQOgjUomr+v JJs735zgRzkhzFvC021kBD7XxGp3Mk2xPWlNRCI+LGkbvqCocXEPvFgieIZe7NyM MEI/Pr7EAR/4SazgBSsP5hX+QMlaa9N5sI5gyGm8Uy0mF4tXjm8MECghjeDuAJET oqXzACHGWospK0TFbF2iyXHn7I8COjkoZlB3QpZ2HgS7vJabdbshmiB1U6rGVLHA xhem5DYUtAq3hAt1UO7QzQy/lKsgaYeY -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:39 2025 by rpki-client