$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: MH0EQslsM0BXcET7t33ONn2ohcjl6qki+GIB8wlfQ3s= Subject key identifier: 98:E2:A2:1D:3F:A2:3F:ED:B8:82:85:9E:C6:08:06:A3:C1:C5:B5:B7 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1527 Signing time: Mon 30 Jun 2025 17:00:39 +0000 Manifest this update: Mon 30 Jun 2025 17:00:39 +0000 Manifest next update: Mon 07 Jul 2025 17:00:39 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: lx+5vbbK8wJJz+uJAMDLWUwx3UBwWHZ6RfSTx4B+UdQ=) 2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5442 (0x1542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Jun 30 17:00:39 2025 GMT Not After : Jul 7 17:00:39 2025 GMT Subject: CN=6862c2b7-a515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:60:04:a3:12:f2:10:8f:e9:ef:d6:7c:58: 84:89:fb:e8:f9:e8:c4:be:09:6b:66:1e:68:cd:1a: 11:53:bd:ad:8e:1c:44:66:2f:42:78:be:1c:39:51: 6a:a5:e6:99:ef:e7:3d:27:8a:cb:f7:70:b2:1e:24: ea:84:8e:4e:fb:f8:c3:5a:37:38:f7:a5:05:ea:15: a3:8f:f4:84:aa:af:d5:4d:e8:ac:bf:60:f5:44:fc: 19:05:45:f6:1a:75:61:a3:3f:3c:09:8c:84:68:eb: 63:a5:1f:06:d6:b6:9c:09:9d:74:e7:63:75:93:c1: 37:09:97:b1:41:d8:4f:24:0c:72:bf:a9:ee:3e:b8: 24:88:c1:61:12:2a:3e:21:33:50:e7:f3:8d:4f:0e: 93:26:63:00:62:d8:20:33:a5:ca:f0:dc:e4:ac:55: d5:b5:20:8d:ad:d3:ef:5b:72:52:0a:82:86:22:69: ad:4c:7a:36:73:80:07:24:94:e1:05:a5:72:4a:2a: 8f:d1:11:35:6a:f3:da:f1:4b:92:d9:f7:84:38:d1: 0c:8f:39:29:b9:ba:d7:ac:e6:8a:62:b0:63:28:ed: e8:59:3a:06:f2:58:78:11:ee:55:90:f8:58:e7:61: c9:72:ed:34:e3:72:ad:d6:53:7d:58:88:cf:8f:6a: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:A2:1D:3F:A2:3F:ED:B8:82:85:9E:C6:08:06:A3:C1:C5:B5:B7 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a3:83:04:c5:b8:de:25:48:2c:ab:b9:12:33:a6:0c:56:36: 9e:73:4b:eb:6a:dd:56:c6:d4:6a:a4:0f:a0:8a:c4:2f:e3:22: 11:44:b4:68:48:b7:19:7a:89:09:2a:83:25:56:90:ce:a3:d7: 7d:ae:60:36:82:6f:3e:fc:96:4c:c2:1a:26:05:44:be:5e:ef: 41:5e:91:0d:15:8d:3d:6c:aa:c8:c5:f3:b5:0a:4e:9d:c2:2f: 9e:09:a8:bb:1a:ed:74:55:53:ad:7d:0c:0c:19:91:81:4c:94: 96:50:44:e7:7a:5a:94:70:26:47:35:90:8e:25:2f:ba:fb:f5: ed:0b:17:bc:0e:38:35:b8:4d:de:76:2d:b7:63:ec:5c:d0:52: 72:d3:9e:6e:30:e6:1a:96:b2:1b:e5:fc:14:b4:02:b4:91:7e: 95:51:90:09:94:42:36:33:86:e7:2f:af:3c:4c:39:5f:2b:e1: 99:44:bd:d1:0e:a2:5a:49:e2:b1:b9:0f:59:d0:68:d9:03:99: 4e:fa:ea:89:7d:04:bd:26:14:3c:70:64:2c:bd:30:5e:cb:82: 46:b6:24:e6:dc:80:a5:5a:15:db:09:d7:e1:cb:b4:ab:2d:62: 97:b1:f2:10:66:19:6e:af:87:e5:e0:8d:4b:c7:6b:80:ad:b1: e4:0c:87:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNjMwMTcwMDM5WhcNMjUwNzA3MTcwMDM5WjAYMRYwFAYD VQQDEw02ODYyYzJiNy1hNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcNgBKMS8hCP6e/WfFiEifvo+ejEvglrZh5ozRoRU72tjhxEZi9CeL4cOVFq peaZ7+c9J4rL93CyHiTqhI5O+/jDWjc496UF6hWjj/SEqq/VTeisv2D1RPwZBUX2 GnVhoz88CYyEaOtjpR8G1racCZ1052N1k8E3CZexQdhPJAxyv6nuPrgkiMFhEio+ ITNQ5/ONTw6TJmMAYtggM6XK8NzkrFXVtSCNrdPvW3JSCoKGImmtTHo2c4AHJJTh BaVySiqP0RE1avPa8UuS2feEONEMjzkpubrXrOaKYrBjKO3oWToG8lh4Ee5VkPhY 52HJcu0043Kt1lN9WIjPj2pRYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjioh0/ oj/tuIKFnsYIBqPBxbW3MB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdo4MExbjeJUgsq7kSM6YMVjaec0vrat1WxtRqpA+gisQv4yIRRLRo SLcZeokJKoMlVpDOo9d9rmA2gm8+/JZMwhomBUS+Xu9BXpENFY09bKrIxfO1Ck6d wi+eCai7Gu10VVOtfQwMGZGBTJSWUETnelqUcCZHNZCOJS+6+/XtCxe8Djg1uE3e di23Y+xc0FJy055uMOYalrIb5fwUtAK0kX6VUZAJlEI2M4bnL688TDlfK+GZRL3R DqJaSeKxuQ9Z0GjZA5lO+uqJfQS9JhQ8cGQsvTBey4JGtiTm3IClWhXbCdfhy7Sr LWKXsfIQZhlur4fl4I1Lx2uArbHkDIcR -----END CERTIFICATE-----Generated at Wed Jul 2 16:19:39 2025 by rpki-client