$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json) Hash identifier: 7E6vkwA+9PCzmWe2ogusV/a27CmLr5uopZomCbnZc6Y= Subject key identifier: 39:C8:BB:78:67:E8:8D:5C:C0:BA:95:AF:91:97:B4:69:90:24:ED:F3 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft Manifest number: 0751 Signing time: Fri 22 Aug 2025 21:53:22 +0000 Manifest this update: Fri 22 Aug 2025 21:53:21 +0000 Manifest next update: Fri 29 Aug 2025 21:53:21 +0000 Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: /lpgBMT9okd3PFzJDk+BUa/RgeJPnma2FzR0yYUQS64=) 2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: U4a8o1KXqQZowZ9aJ6tXOocb6xkGyoj65dTRVzeEvrE=) 3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4ckscgD2BUTAR0THvAEvfsoW09ZipVLLJmm4EZ3VF2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: Aug 22 21:53:21 2025 GMT Not After : Aug 29 21:53:21 2025 GMT Subject: CN=68a8e6d2-28e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:59:41:72:dc:74:e0:55:95:03:69:47:32: bd:57:e9:8b:8b:13:9f:01:1d:5c:92:81:c9:e4:0f: 7b:4f:77:c8:b2:be:e3:00:c3:bc:65:41:a2:78:44: dc:37:27:8e:ab:bf:f4:3d:23:f5:27:f7:b3:94:b2: 56:f1:7d:d2:14:c8:a4:bf:71:17:19:fb:f7:2a:3a: 87:8f:47:b4:ff:fb:d0:c1:41:7b:64:26:45:d3:d3: f2:53:fd:23:7e:b7:b4:9d:2f:be:66:25:82:13:73: f8:fb:8c:a1:53:6b:36:e2:0f:5a:6d:7c:ed:0e:35: 8d:c6:d9:e3:95:b2:05:95:e3:66:9b:c9:72:66:26: 07:ee:ea:4f:99:39:56:3a:6e:f8:50:9f:6e:84:c3: ec:26:ac:77:51:32:5d:89:3d:8a:11:93:02:b8:bb: c8:84:23:14:b5:f4:83:d7:3a:e5:a1:d4:7f:59:fd: 63:dc:a6:e9:6d:24:08:6f:6c:30:4c:1e:c4:95:c9: 52:be:8a:8b:8c:8e:28:2e:ac:3c:c3:2d:95:04:7f: 4d:09:b8:01:93:aa:d4:5a:87:be:c7:41:44:e8:e8: ad:82:cd:c5:61:3d:1a:7c:a1:a1:27:56:a3:ee:53: ec:ea:3a:fd:0b:9a:b7:9b:9b:c3:29:40:45:51:1b: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C8:BB:78:67:E8:8D:5C:C0:BA:95:AF:91:97:B4:69:90:24:ED:F3 X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d5:c2:ed:8b:b7:28:58:14:a1:dd:09:22:11:4d:00:5b:c2: 79:4f:bc:87:f7:07:c7:f1:e4:85:8f:8c:33:cc:0d:ea:8b:70: 03:57:54:25:3d:06:f6:1d:9f:8d:2f:21:c7:c1:2c:5d:43:85: 75:eb:aa:a1:98:4a:38:10:46:fe:e3:1a:fa:e3:77:7a:b6:dc: b9:ba:42:54:6e:d9:cb:2c:87:1a:aa:9f:af:d7:8b:e3:95:9e: f2:43:23:99:9f:65:89:f3:6f:c1:f3:84:eb:45:b1:b0:d3:8d: 23:59:b1:9b:84:e3:ae:dd:ea:17:0c:81:9f:6c:2d:55:e6:d8: c0:76:e6:d8:65:24:85:2c:6c:db:c1:50:b9:c4:8e:43:4c:70: c8:16:fc:bc:d5:8b:09:f4:a0:97:86:3d:2e:b6:47:18:e0:a9: 5b:16:a7:bc:b1:51:71:4f:97:77:cd:20:02:46:56:57:09:c0: 4e:30:f5:94:9f:63:ce:eb:c3:34:f2:36:b5:cb:7a:de:f4:05: a1:88:92:dc:4c:a4:d9:64:d3:bf:ca:d9:d2:bd:c9:5d:fc:27: 0e:d2:21:d3:7f:6f:3d:f9:2b:fa:3f:9c:56:20:47:3e:25:6a: a8:b6:07:ec:26:1c:e6:de:a3:c3:f7:64:38:a9:c7:7f:13:62: 7e:95:83:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjUwODIyMjE1MzIxWhcNMjUwODI5MjE1MzIxWjAYMRYwFAYD VQQDEw02OGE4ZTZkMi0yOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJJZQXLcdOBVlQNpRzK9V+mLixOfAR1ckoHJ5A97T3fIsr7jAMO8ZUGieETc NyeOq7/0PSP1J/ezlLJW8X3SFMikv3EXGfv3KjqHj0e0//vQwUF7ZCZF09PyU/0j fre0nS++ZiWCE3P4+4yhU2s24g9abXztDjWNxtnjlbIFleNmm8lyZiYH7upPmTlW Om74UJ9uhMPsJqx3UTJdiT2KEZMCuLvIhCMUtfSD1zrlodR/Wf1j3KbpbSQIb2ww TB7ElclSvoqLjI4oLqw8wy2VBH9NCbgBk6rUWoe+x0FE6Oitgs3FYT0afKGhJ1aj 7lPs6jr9C5q3m5vDKUBFURv/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnIu3hn 6I1cwLqVr5GXtGmQJO3zMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp bDBkYlNFdmQwUHUtTkpEbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl1cLti7coWBSh3QkiEU0AW8J5T7yH9wfH8eSFj4wzzA3qi3ADV1Ql PQb2HZ+NLyHHwSxdQ4V166qhmEo4EEb+4xr643d6tty5ukJUbtnLLIcaqp+v14vj lZ7yQyOZn2WJ82/B84TrRbGw040jWbGbhOOu3eoXDIGfbC1V5tjAdubYZSSFLGzb wVC5xI5DTHDIFvy81YsJ9KCXhj0utkcY4KlbFqe8sVFxT5d3zSACRlZXCcBOMPWU n2PO68M08ja1y3re9AWhiJLcTKTZZNO/ytnSvcld/CcO0iHTf289+Sv6P5xWIEc+ JWqotgfsJhzm3qPD92Q4qcd/E2J+lYOH -----END CERTIFICATE-----Generated at Sun Aug 24 00:12:56 2025 by rpki-client