$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: bGfdzVQHA+AO6qiZ08aaLFeaHPWZRA4qh8c0DVmCBT4= Subject key identifier: D4:CA:42:85:E3:A7:82:D7:2F:79:0F:DB:39:60:CE:1C:1F:FB:A7:95 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 34FF Signing time: Fri 22 Aug 2025 14:22:48 +0000 Manifest this update: Fri 22 Aug 2025 14:22:48 +0000 Manifest next update: Fri 29 Aug 2025 14:22:48 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: wFFTJ1+CWmLYhmBCCUQUIgiWLnWraXBLeNFqkMGffbk=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Aug 22 14:22:48 2025 GMT Not After : Aug 29 14:22:48 2025 GMT Subject: CN=68a87d38-6256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:15:a7:37:f7:1a:bf:2b:c6:e8:de:da:be:f1: 9d:77:77:a1:b3:68:73:46:a3:c4:cb:cb:c5:45:54: 81:a2:97:aa:2e:4f:fd:68:80:ba:9b:55:ae:04:54: 93:39:0d:2f:e7:37:8d:37:ae:00:be:d0:80:d3:21: d0:7a:a1:47:84:81:4a:ec:08:c0:8a:49:ec:37:3b: d6:c8:87:21:a3:10:58:b9:29:da:b3:cf:aa:5d:d7: 02:30:71:89:88:04:af:46:a5:28:a6:42:63:e0:61: a1:11:5b:e0:7f:af:f7:e6:ce:2a:bb:49:7f:2d:44: 6c:6b:e9:cc:51:a4:91:66:c3:10:b1:a9:c4:3f:be: dd:83:9c:11:22:28:a1:49:19:99:8d:62:0f:4b:f9: 40:8a:b3:91:d1:55:20:8c:65:62:89:59:71:4b:b3: 34:fb:37:7e:db:a8:30:b2:af:10:10:e5:81:ad:b9: ff:5c:d6:8c:d0:84:ea:54:5a:98:38:6d:a7:aa:3e: db:ee:98:fd:10:3e:3d:ff:71:70:e3:8b:af:c3:0a: be:c9:2b:2d:3c:b6:7b:89:ed:8d:b8:28:b6:53:66: 1c:a9:f0:95:3c:7a:16:75:85:84:64:2e:85:78:91: 5b:e9:1f:bd:8b:f4:00:af:55:b8:5d:30:0c:2d:9d: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CA:42:85:E3:A7:82:D7:2F:79:0F:DB:39:60:CE:1C:1F:FB:A7:95 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:ed:72:d8:42:a1:4e:9a:ab:bb:83:f0:8c:d8:8a:e0:f0: 8e:53:c2:87:36:5d:63:99:40:d3:32:a8:3f:b8:f4:8a:e4:28: 80:11:83:eb:30:0c:f4:00:cf:c0:bf:e0:b1:b5:f9:b4:50:a1: 13:d9:e4:2c:97:fc:81:6d:8b:13:29:3b:71:be:25:10:cd:95: 65:ad:24:ab:d6:55:58:0e:e1:0e:c8:70:f3:d5:b1:6f:1f:ef: 56:94:f6:99:ef:18:a4:36:97:ce:f1:2e:5d:ab:9e:11:c2:f6: 80:96:87:73:ef:04:75:54:42:b6:c4:83:22:5d:da:87:13:bd: 59:44:16:ac:cb:12:b1:2a:e4:c9:df:d1:eb:ec:71:95:9a:c0: bc:e7:38:bc:15:67:e7:6b:d6:23:73:ba:b4:11:a7:cc:8c:ee: 03:ff:b7:00:79:20:c1:50:9b:f4:79:13:97:c7:4c:ba:ed:49: 5a:cb:dc:34:e2:3d:d7:1d:de:b4:c7:d3:8a:85:94:21:7e:3d: 14:0f:e5:57:59:98:47:bd:87:7b:c2:7b:96:13:5c:08:1c:85: 27:9c:83:6b:b4:18:98:3b:d0:69:67:ff:0b:6e:f5:07:ab:54: 8d:81:78:b8:f9:e6:d1:d2:bf:e5:ea:a3:fb:d5:8f:1a:c2:40: d4:e5:71:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwODIyMTQyMjQ4WhcNMjUwODI5MTQyMjQ4WjAYMRYwFAYD VQQDEw02OGE4N2QzOC02MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hWnN/cavyvG6N7avvGdd3ehs2hzRqPEy8vFRVSBopeqLk/9aIC6m1WuBFST OQ0v5zeNN64AvtCA0yHQeqFHhIFK7AjAiknsNzvWyIchoxBYuSnas8+qXdcCMHGJ iASvRqUopkJj4GGhEVvgf6/35s4qu0l/LURsa+nMUaSRZsMQsanEP77dg5wRIiih SRmZjWIPS/lAirOR0VUgjGViiVlxS7M0+zd+26gwsq8QEOWBrbn/XNaM0ITqVFqY OG2nqj7b7pj9ED49/3Fw44uvwwq+ySstPLZ7ie2NuCi2U2YcqfCVPHoWdYWEZC6F eJFb6R+9i/QAr1W4XTAMLZ1MMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTKQoXj p4LXL3kP2zlgzhwf+6eVMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGMO1y2EKhTpqru4PwjNiK4PCOU8KHNl1jmUDTMqg/uPSK5CiAEYPr MAz0AM/Av+Cxtfm0UKET2eQsl/yBbYsTKTtxviUQzZVlrSSr1lVYDuEOyHDz1bFv H+9WlPaZ7xikNpfO8S5dq54RwvaAlodz7wR1VEK2xIMiXdqHE71ZRBasyxKxKuTJ 39Hr7HGVmsC85zi8FWfna9Yjc7q0EafMjO4D/7cAeSDBUJv0eROXx0y67Ulay9w0 4j3XHd60x9OKhZQhfj0UD+VXWZhHvYd7wnuWE1wIHIUnnINrtBiYO9BpZ/8LbvUH q1SNgXi4+ebR0r/l6qP71Y8awkDU5XF8 -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:39 2025 by rpki-client