$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: VCcbuFO7YwP/eT/ZtFoh4BiXwqcvSgk/XYhniIcrZjs= Subject key identifier: BF:19:6B:AF:6A:9C:74:35:FB:88:89:C9:FA:47:80:F5:F5:2A:36:DE Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 356C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 351C Signing time: Sat 18 Oct 2025 14:24:12 +0000 Manifest this update: Sat 18 Oct 2025 14:24:12 +0000 Manifest next update: Sat 25 Oct 2025 14:24:12 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: xDcm+VS68BRSdCeH0W9R78nAm10bu3LulnHYSOgFslg=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13676 (0x356c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Oct 18 14:24:12 2025 GMT Not After : Oct 25 14:24:12 2025 GMT Subject: CN=68f3a30c-abfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:16:9c:09:00:4c:50:43:6f:6c:c0:1a:47: 51:86:4d:b5:52:85:ae:f9:96:a3:bc:01:12:d0:99: cb:a5:5a:d0:97:7e:cd:c9:f5:ad:ba:bb:d9:93:86: 99:6d:2b:2b:f5:20:75:91:f2:49:7c:a9:3a:9d:c5: 1f:5d:f7:11:92:8a:ee:38:40:54:6e:4c:3c:12:bc: 99:56:55:e2:79:75:25:c6:e7:bb:6a:63:87:75:6a: 5e:90:24:26:45:9c:60:b9:a4:8f:74:7b:e1:b8:39: 72:58:96:d7:53:38:5e:8d:24:19:64:4c:33:f2:27: ca:f8:64:9a:c0:47:5e:f9:ec:eb:e5:6d:ea:c6:ef: 7d:02:96:f1:e8:3a:b9:38:23:65:6d:17:c8:49:82: 17:e6:25:83:ef:c6:8a:ff:01:02:b1:9d:73:71:95: f9:cb:b7:7b:24:c7:15:8d:92:12:0c:9a:c6:51:40: e0:1c:2a:7a:d4:62:7e:64:ce:20:f7:50:39:a3:af: 97:4d:db:e5:ee:a3:1f:32:c4:d4:c3:5b:26:90:78: 35:51:0f:fc:fe:13:fc:8a:d4:4e:27:4e:ea:ae:0c: 62:69:65:81:63:c1:d8:cb:d5:d4:96:d3:66:15:1c: a9:28:b6:15:9c:1c:74:b3:43:91:72:9b:d0:be:37: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:19:6B:AF:6A:9C:74:35:FB:88:89:C9:FA:47:80:F5:F5:2A:36:DE X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:40:e7:7f:67:d9:af:81:81:af:40:f9:b4:1c:2f:b6:ce:54: 67:8f:99:ae:a0:e3:1b:5b:52:88:39:8c:cf:39:d0:4c:77:61: 35:28:8d:ba:e0:08:82:9f:a3:bb:f9:4e:fc:35:e4:1d:82:fb: 16:a6:5e:f9:9a:26:ca:5b:9b:50:fb:a2:ad:d1:7c:ab:f4:c0: 48:d3:ff:ed:af:8e:ea:8f:cb:6d:fc:aa:2a:8b:47:d4:e8:14: 2b:c5:55:b0:0d:f7:bc:38:ee:0e:55:76:2c:59:39:9f:ad:66: 90:95:c7:c0:37:79:39:95:1f:5e:59:14:73:eb:d1:0c:3a:82: 55:d6:68:35:61:8b:6d:15:0f:a9:fa:23:b1:74:bd:9e:cb:ac: 85:9d:2e:5f:55:6b:d9:88:35:d2:cf:cc:b2:40:50:c8:aa:31: eb:26:f3:87:f8:1e:a9:f8:4e:4f:1d:0b:3e:50:f9:2b:6c:1d: e2:b1:68:cc:9e:88:74:1b:d5:7e:bc:ea:85:5a:68:f4:fa:41: f9:0c:2b:ec:c8:dc:f9:2a:94:5a:52:1b:cc:d3:9f:7d:75:e8: 72:7e:d6:09:20:10:0b:e3:79:82:98:78:17:fa:d9:fa:dc:5e: 3c:bd:62:b7:22:ab:48:ab:5e:08:c8:7b:da:92:19:fa:2b:fe: cf:f9:f0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUxMDE4MTQyNDEyWhcNMjUxMDI1MTQyNDEyWjAYMRYwFAYD VQQDEw02OGYzYTMwYy1hYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA368WnAkATFBDb2zAGkdRhk21UoWu+ZajvAES0JnLpVrQl37NyfWturvZk4aZ bSsr9SB1kfJJfKk6ncUfXfcRkoruOEBUbkw8EryZVlXieXUlxue7amOHdWpekCQm RZxguaSPdHvhuDlyWJbXUzhejSQZZEwz8ifK+GSawEde+ezr5W3qxu99Apbx6Dq5 OCNlbRfISYIX5iWD78aK/wECsZ1zcZX5y7d7JMcVjZISDJrGUUDgHCp61GJ+ZM4g 91A5o6+XTdvl7qMfMsTUw1smkHg1UQ/8/hP8itROJ07qrgxiaWWBY8HYy9XUltNm FRypKLYVnBx0s0ORcpvQvjeY2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8Za69q nHQ1+4iJyfpHgPX1KjbeMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1QOd/Z9mvgYGvQPm0HC+2zlRnj5muoOMbW1KIOYzPOdBMd2E1KI26 4AiCn6O7+U78NeQdgvsWpl75mibKW5tQ+6Kt0Xyr9MBI0//tr47qj8tt/Koqi0fU 6BQrxVWwDfe8OO4OVXYsWTmfrWaQlcfAN3k5lR9eWRRz69EMOoJV1mg1YYttFQ+p +iOxdL2ey6yFnS5fVWvZiDXSz8yyQFDIqjHrJvOH+B6p+E5PHQs+UPkrbB3isWjM noh0G9V+vOqFWmj0+kH5DCvsyNz5KpRaUhvM0599dehyftYJIBAL43mCmHgX+tn6 3F48vWK3IqtIq14IyHvakhn6K/7P+fA9 -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:20 2025 by rpki-client