$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: Fi4nwcqOYBsA/lRJ3IXHGXEungxog7vzd6FauX8uTd4= Subject key identifier: 60:1C:26:71:DE:18:8B:B5:E3:07:90:14:99:81:FD:A1:D3:7E:B0:51 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1F2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1F07 Signing time: Mon 30 Jun 2025 16:10:36 +0000 Manifest this update: Mon 30 Jun 2025 16:10:35 +0000 Manifest next update: Mon 07 Jul 2025 16:10:35 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: Wg7+AIiXpj1TTV3+a1U1BS/Ia7dA4BJo4lljmh6srP8=) 2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=) 3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7980 (0x1f2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Jun 30 16:10:35 2025 GMT Not After : Jul 7 16:10:35 2025 GMT Subject: CN=6862b6fb-b573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:a3:26:5c:42:ea:de:31:10:0c:6f:63:b5: 3e:bf:ab:46:00:7a:b6:ce:1b:f2:43:29:0a:f7:5e: c1:ff:b8:cb:1f:8d:c3:f9:04:b0:6c:1d:25:94:73: f5:7b:45:f4:02:28:a7:17:84:65:ba:33:9c:b5:df: 29:65:26:a7:d2:d8:45:d3:cc:14:8a:84:f8:01:0f: 58:ee:f1:b5:4a:9e:07:56:5a:df:85:20:79:3e:4e: 40:14:5e:8d:91:27:b6:3c:e1:96:5e:09:9a:b1:ba: 83:e1:37:00:24:f5:52:98:9c:92:df:e3:86:2a:55: 4c:62:67:25:6a:6b:67:d3:24:b8:79:96:b3:02:df: 32:02:ba:ce:88:69:0b:ec:93:7c:29:41:a9:3e:78: 7f:80:47:9c:59:f4:20:6f:ed:48:3b:ec:fc:7b:b1: ff:bc:87:e9:59:26:62:45:0c:43:6c:0f:d8:c1:51: 46:c1:d5:8e:11:54:c2:03:58:79:21:17:e8:dd:e5: 52:f8:58:03:59:2d:9e:91:08:39:93:c0:8a:3a:ae: f4:88:b3:ec:8a:e2:47:aa:66:1c:d0:2b:72:bc:6d: 70:8b:b7:61:0a:26:80:ab:e0:64:46:6e:0e:ee:48: 54:63:9e:f7:82:16:4e:c0:8f:db:bd:ee:4a:0f:f6: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:26:71:DE:18:8B:B5:E3:07:90:14:99:81:FD:A1:D3:7E:B0:51 X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:02:d1:9f:b5:26:a8:29:98:98:7f:f4:af:8b:65:18:d5:11: 30:4a:17:a9:a3:e0:bf:35:ed:f4:d6:aa:d3:ca:ab:b9:fd:d5: 1c:68:0f:a1:48:12:e1:8d:49:ce:5c:e7:b0:20:bd:77:3e:3a: bf:e7:d6:2b:57:8b:98:6d:39:ea:ec:d4:e5:ea:90:46:3d:e2: 59:01:16:3a:23:e9:57:46:6b:bc:a6:1f:e3:ce:99:89:34:2b: 8a:26:01:f7:3a:c8:53:b3:e2:36:45:4c:d8:7f:1a:41:93:bb: 8b:6e:8d:97:8e:b1:69:cf:9c:51:bc:31:6b:54:f9:35:be:66: c1:5f:af:b9:d4:25:fc:13:aa:2b:11:7d:5e:69:cc:40:28:b6: 50:5a:cc:b0:18:1c:56:c5:4b:16:84:aa:b3:88:e8:36:9a:85: 80:81:cc:a2:06:4c:ee:b0:9f:9b:34:24:d7:27:95:31:42:7b: ff:21:1a:fa:c4:72:b6:76:62:61:83:a9:be:a6:85:a9:af:6e: 20:d2:20:44:31:8a:64:36:f0:0f:b4:a5:2d:89:9c:13:ea:fb: d7:20:39:7b:60:80:1d:e9:e9:3f:cb:6e:0f:e2:c1:8d:32:52: 28:96:87:ae:2b:d3:7d:2a:55:56:57:a6:1a:cf:e8:59:90:76: 0b:e6:e8:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjUwNjMwMTYxMDM1WhcNMjUwNzA3MTYxMDM1WjAYMRYwFAYD VQQDEw02ODYyYjZmYi1iNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1x2jJlxC6t4xEAxvY7U+v6tGAHq2zhvyQykK917B/7jLH43D+QSwbB0llHP1 e0X0AiinF4RlujOctd8pZSan0thF08wUioT4AQ9Y7vG1Sp4HVlrfhSB5Pk5AFF6N kSe2POGWXgmasbqD4TcAJPVSmJyS3+OGKlVMYmclamtn0yS4eZazAt8yArrOiGkL 7JN8KUGpPnh/gEecWfQgb+1IO+z8e7H/vIfpWSZiRQxDbA/YwVFGwdWOEVTCA1h5 IRfo3eVS+FgDWS2ekQg5k8CKOq70iLPsiuJHqmYc0CtyvG1wi7dhCiaAq+BkRm4O 7khUY573ghZOwI/bve5KD/ZDGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAcJnHe GIu14weQFJmB/aHTfrBRMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2AtGftSaoKZiYf/Svi2UY1REwShepo+C/Ne301qrTyqu5/dUcaA+h SBLhjUnOXOewIL13Pjq/59YrV4uYbTnq7NTl6pBGPeJZARY6I+lXRmu8ph/jzpmJ NCuKJgH3OshTs+I2RUzYfxpBk7uLbo2XjrFpz5xRvDFrVPk1vmbBX6+51CX8E6or EX1eacxAKLZQWsywGBxWxUsWhKqziOg2moWAgcyiBkzusJ+bNCTXJ5UxQnv/IRr6 xHK2dmJhg6m+poWpr24g0iBEMYpkNvAPtKUtiZwT6vvXIDl7YIAd6ek/y24P4sGN MlIoloeuK9N9KlVWV6Yaz+hZkHYL5ugl -----END CERTIFICATE-----Generated at Wed Jul 2 10:17:39 2025 by rpki-client