$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: U8OGRFx7WGQiRs+B9geoXD2NBa5Jx5l+Vd6VQoao/rM= Subject key identifier: 78:1A:55:48:CA:2E:3D:CA:02:A6:AD:0C:F9:D9:09:28:58:43:92:32 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 155D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1542 Signing time: Fri 22 Aug 2025 16:55:22 +0000 Manifest this update: Fri 22 Aug 2025 16:55:21 +0000 Manifest next update: Fri 29 Aug 2025 16:55:21 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: mC7h3bkxo8ywaSg63u3D58nyZWA+UutD2XETtg5vRJM=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5469 (0x155d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Aug 22 16:55:21 2025 GMT Not After : Aug 29 16:55:21 2025 GMT Subject: CN=68a8a0fa-8cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:1d:a4:f1:0a:4c:00:19:c5:5c:ca:c7:c4: 4d:56:c5:f1:5e:34:89:d9:f9:09:a8:a7:1d:60:9e: 85:05:6b:3c:54:3c:c3:c2:8e:ec:de:75:1b:2e:91: d6:f5:bc:b7:95:99:79:c4:39:d3:e0:70:b4:2e:b6: 14:d8:aa:69:32:41:39:b0:b2:cf:5d:25:cd:9d:2e: f5:75:92:13:06:c4:1d:d1:70:f1:ec:74:83:b5:7f: 02:25:68:d8:f4:0e:77:70:1d:5f:b4:50:1a:40:63: 1c:a5:08:d6:60:57:95:4c:7a:ca:66:1a:a3:d4:43: ed:fe:1f:e4:76:c5:51:64:79:43:1a:e8:a3:69:d5: 5c:ad:b0:74:04:fa:91:bd:e6:65:f0:56:f0:94:13: 39:e7:30:b5:b2:d5:71:e8:91:2c:a6:ff:f4:36:65: 49:e7:37:23:d5:be:34:f9:13:1e:db:fa:6f:47:8c: e7:5f:10:87:32:25:98:d3:2f:72:33:0c:83:db:76: f7:f8:10:57:f6:89:ad:74:42:1a:df:8f:6b:9d:ee: 20:c5:f4:da:60:9e:4c:10:2e:ff:62:f9:7c:fb:af: e4:b1:41:c1:41:26:62:31:27:a0:27:e9:fb:04:0b: 69:4d:aa:d3:5d:a5:49:94:ea:9c:65:f6:ae:f2:e3: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1A:55:48:CA:2E:3D:CA:02:A6:AD:0C:F9:D9:09:28:58:43:92:32 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:51:01:3f:7c:85:0e:9d:a4:c3:18:9e:d9:18:69:3e:66: 46:52:40:4f:36:45:c1:88:87:69:eb:de:3a:c3:4f:e9:83:0a: c7:ff:c8:49:10:2f:bf:d0:f3:7c:40:0e:97:67:e0:41:a7:cd: e5:47:28:c2:6f:9e:48:db:a4:2e:45:41:39:10:9a:47:f7:c0: 16:c1:fc:32:98:d8:1d:84:30:f4:78:9f:47:dd:5f:61:33:f4: cf:99:2e:6f:e5:02:d4:20:c5:fd:53:8f:ba:40:5b:a6:50:d4: 0d:e6:76:b2:bb:f7:8d:0c:b3:2c:80:7d:7e:45:ed:59:b0:44: 13:56:45:76:61:8f:24:b7:65:b5:b8:be:5c:8f:ae:81:a3:f9: 9f:9c:09:39:49:5b:e9:d4:43:a0:7b:dc:8d:57:df:4a:20:97: 35:26:96:cc:a8:09:40:7e:27:ca:cf:ef:f2:ac:5c:aa:a9:81: fd:4f:e3:1b:b0:b4:a5:d4:fd:c0:51:cd:a5:30:f9:52:1f:7d: 3f:81:b7:24:70:81:b4:16:dd:ba:09:c6:f9:db:30:5c:a7:e9: e6:47:e4:6d:5b:84:88:4c:9e:be:e2:7c:e6:bc:f9:cf:e0:ba: c3:3d:b4:9d:40:60:ab:c6:5f:9a:c6:27:f1:69:7a:eb:4e:0a: 03:72:ac:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwODIyMTY1NTIxWhcNMjUwODI5MTY1NTIxWjAYMRYwFAYD VQQDEw02OGE4YTBmYS04Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm8dpPEKTAAZxVzKx8RNVsXxXjSJ2fkJqKcdYJ6FBWs8VDzDwo7s3nUbLpHW 9by3lZl5xDnT4HC0LrYU2KppMkE5sLLPXSXNnS71dZITBsQd0XDx7HSDtX8CJWjY 9A53cB1ftFAaQGMcpQjWYFeVTHrKZhqj1EPt/h/kdsVRZHlDGuijadVcrbB0BPqR veZl8FbwlBM55zC1stVx6JEspv/0NmVJ5zcj1b40+RMe2/pvR4znXxCHMiWY0y9y MwyD23b3+BBX9omtdEIa349rne4gxfTaYJ5MEC7/Yvl8+6/ksUHBQSZiMSegJ+n7 BAtpTarTXaVJlOqcZfau8uPg/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgaVUjK Lj3KAqatDPnZCShYQ5IyMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZb1EBP3yFDp2kwxie2RhpPmZGUkBPNkXBiIdp6946w0/pgwrH/8hJ EC+/0PN8QA6XZ+BBp83lRyjCb55I26QuRUE5EJpH98AWwfwymNgdhDD0eJ9H3V9h M/TPmS5v5QLUIMX9U4+6QFumUNQN5nayu/eNDLMsgH1+Re1ZsEQTVkV2YY8kt2W1 uL5cj66Bo/mfnAk5SVvp1EOge9yNV99KIJc1JpbMqAlAfifKz+/yrFyqqYH9T+Mb sLSl1P3AUc2lMPlSH30/gbckcIG0Ft26Ccb52zBcp+nmR+RtW4SITJ6+4nzmvPnP 4LrDPbSdQGCrxl+axifxaXrrTgoDcqzL -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:41 2025 by rpki-client