$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: QAL+lcKXtDefdIoFzW/lW1e69Sqyt8wT9T7o7lfRKHM= Subject key identifier: 4A:93:80:01:D2:36:FB:54:E7:BD:DF:6F:5D:F6:54:26:F6:B5:4E:45 Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 04BE Signing time: Sat 23 Aug 2025 00:05:36 +0000 Manifest this update: Sat 23 Aug 2025 00:05:36 +0000 Manifest next update: Sat 30 Aug 2025 00:05:36 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: tDfA69ferMYlqTPhFNVi/gM3B83wUw5kj/a+o4Fhdjs=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Validity Not Before: Aug 23 00:05:36 2025 GMT Not After : Aug 30 00:05:36 2025 GMT Subject: CN=68a905d0-16fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:e9:35:89:ff:46:6e:d4:d4:0e:fe:93:eb: cf:ff:0d:83:2b:7c:9f:86:b6:03:13:15:2d:ce:d7: f1:54:84:e9:a9:7a:84:13:c2:20:d7:53:0a:bd:c2: 66:5d:51:9c:4d:0c:7a:38:70:9b:0d:95:e2:04:a6: 3b:01:c7:c8:af:23:0c:d8:31:de:6a:eb:b8:94:42: 24:e8:92:33:0a:50:7d:6a:0d:f3:d2:4f:d5:fe:3a: 11:33:7d:26:79:94:d6:c2:b5:59:29:d8:b5:e5:53: 2d:8a:47:26:d6:b1:16:04:ed:5d:61:dc:a8:bb:82: b7:bf:b0:16:72:ad:05:49:c7:48:8c:f6:36:92:37: 48:92:45:c8:58:f4:db:ea:a9:d3:05:4d:50:6c:3f: 09:78:ac:ac:14:92:27:08:78:9a:44:19:e8:9d:00: b2:a7:25:d4:f7:ff:28:72:b3:13:c9:e3:d5:1f:2b: ad:3f:c3:9f:39:55:27:c8:38:04:ac:e8:60:1d:d5: c6:d5:0a:7d:95:07:7f:3e:f2:b4:b3:5a:07:c9:9c: 79:91:5f:d6:74:49:eb:97:44:47:c9:62:92:a9:d7: 24:5b:45:8e:b6:99:d0:30:11:19:15:05:a1:37:b1: 96:53:55:d7:10:87:fa:13:4b:54:30:90:34:c5:8c: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:93:80:01:D2:36:FB:54:E7:BD:DF:6F:5D:F6:54:26:F6:B5:4E:45 X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7e:5b:0e:4a:f7:4e:e7:06:eb:d6:e1:94:75:2e:3d:0f:93: 79:1b:80:87:f0:e6:ad:44:d9:e1:f5:96:c3:f3:07:54:f0:cc: 1f:00:d9:f0:dd:7a:88:36:e6:f7:23:96:09:2b:aa:32:e3:5b: 8a:03:a6:45:ee:28:c2:a6:b0:31:c9:33:67:1a:59:fe:a4:f2: e1:46:8d:7c:13:b7:b2:01:c7:e4:71:b0:60:77:ba:13:65:26: d1:46:30:31:d6:46:db:11:0b:c7:d6:29:1f:30:f6:ce:03:43: 01:50:94:98:7b:69:54:45:71:2d:c9:9e:f5:cb:97:a8:62:33: 7f:be:00:a4:9a:65:af:2f:75:16:93:2c:e6:b7:ff:be:04:90: db:fe:b7:57:df:5a:81:e1:4f:49:96:a5:43:73:03:59:1c:f5: 9e:3a:a2:8e:71:c7:e1:41:e2:52:c8:f1:fa:12:6a:69:f3:49: b6:3e:ba:66:00:9c:45:fa:62:fd:3f:bc:07:f6:00:49:95:d4: 7c:a0:2b:24:c6:bd:8b:ce:8a:5e:c3:f7:e2:63:2d:b3:36:b4: 5d:97:d5:99:ae:af:e5:08:d5:d9:68:3e:fe:86:21:d9:1d:6d: 2b:db:1d:5c:64:55:60:3f:a2:7c:33:d3:5a:b3:d0:63:e0:37: e1:86:5e:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUwODIzMDAwNTM2WhcNMjUwODMwMDAwNTM2WjAYMRYwFAYD VQQDEw02OGE5MDVkMC0xNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKPpNYn/Rm7U1A7+k+vP/w2DK3yfhrYDExUtztfxVITpqXqEE8Ig11MKvcJm XVGcTQx6OHCbDZXiBKY7AcfIryMM2DHeauu4lEIk6JIzClB9ag3z0k/V/joRM30m eZTWwrVZKdi15VMtikcm1rEWBO1dYdyou4K3v7AWcq0FScdIjPY2kjdIkkXIWPTb 6qnTBU1QbD8JeKysFJInCHiaRBnonQCypyXU9/8ocrMTyePVHyutP8OfOVUnyDgE rOhgHdXG1Qp9lQd/PvK0s1oHyZx5kV/WdEnrl0RHyWKSqdckW0WOtpnQMBEZFQWh N7GWU1XXEIf6E0tUMJA0xYx8XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqTgAHS NvtU573fb132VCb2tU5FMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKflsOSvdO5wbr1uGUdS49D5N5G4CH8OatRNnh9ZbD8wdU8MwfANnw 3XqINub3I5YJK6oy41uKA6ZF7ijCprAxyTNnGln+pPLhRo18E7eyAcfkcbBgd7oT ZSbRRjAx1kbbEQvH1ikfMPbOA0MBUJSYe2lURXEtyZ71y5eoYjN/vgCkmmWvL3UW kyzmt/++BJDb/rdX31qB4U9JlqVDcwNZHPWeOqKOccfhQeJSyPH6Empp80m2Prpm AJxF+mL9P7wH9gBJldR8oCskxr2Lzopew/fiYy2zNrRdl9WZrq/lCNXZaD7+hiHZ HW0r2x1cZFVgP6J8M9Nas9Bj4Dfhhl53 -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:56 2025 by rpki-client