$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: sGkoDN9iBttClwh7o/n/Kyz/kviQyj/vQYLsI7HU2uM= Subject key identifier: 6E:16:56:34:8B:E3:7F:5E:B9:C6:06:E7:A4:F1:DF:37:88:C6:84:0E Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 15 Signing time: Mon 11 Aug 2025 08:18:36 +0000 Manifest this update: Mon 11 Aug 2025 08:18:35 +0000 Manifest next update: Mon 18 Aug 2025 08:18:35 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: hLiFfQ6syecCB5dzAUBB0E/JeHLIVuTN3MnU6BS/zJ8=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Aug 11 08:18:35 2025 GMT Not After : Aug 18 08:18:35 2025 GMT Subject: CN=6899a75c-5f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:cc:3c:72:0b:2d:56:7f:13:93:1a:cd:77: d6:38:21:71:27:7f:36:b9:03:79:b2:51:96:80:69: 80:93:e0:b5:29:6c:94:dc:0d:f2:74:6b:d0:b2:d9: 84:04:e8:c2:98:8a:5f:23:77:3e:6b:98:21:2a:7e: 7f:c3:2c:3b:f4:a4:63:da:f5:f2:c9:99:84:3c:51: 5a:65:42:86:e4:58:c3:ac:42:e5:6d:f0:56:d8:b0: de:d3:c6:2e:69:70:90:e9:f4:4e:f2:50:2c:cd:35: e7:78:3e:06:59:e0:72:47:58:4c:73:25:2a:b1:63: 95:74:1c:4b:93:59:3b:ab:7d:82:3d:e9:2c:06:8a: 8e:7f:ea:9b:5d:fa:7e:1e:d7:f3:b4:13:fc:a1:3f: 33:38:cb:4f:74:0d:79:a3:98:76:7e:9c:2f:7a:90: a3:dd:7f:ad:ed:16:f7:e5:de:12:7a:30:05:88:5f: 94:25:22:29:d1:9f:69:f0:88:0c:6b:53:ee:7a:b1: b0:2e:cc:ee:38:c8:6e:60:a1:bf:4c:85:55:59:2c: e8:76:53:44:5e:7d:1d:2a:a2:32:dd:f1:4b:93:25: b9:a0:da:fb:d5:50:25:2a:a3:54:10:c6:19:d2:b3: ec:39:3a:15:4c:0c:50:d4:0f:a9:48:31:e0:2c:0f: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:16:56:34:8B:E3:7F:5E:B9:C6:06:E7:A4:F1:DF:37:88:C6:84:0E X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2e:56:e1:a2:f0:f4:13:8c:87:0d:e8:b3:67:16:76:48:af: da:dc:a5:9e:75:7b:27:50:4b:32:ec:10:02:8b:37:ef:e1:ea: c4:88:50:6b:dd:e2:e4:4f:a4:29:d6:1a:30:12:c6:da:62:18: 4b:50:bb:a3:f4:da:ef:c6:4e:e9:34:eb:a2:a6:a5:43:1b:6e: 01:99:6b:35:ea:71:19:db:e8:96:8e:2a:60:4b:01:b4:a9:8a: fd:65:d8:12:17:cb:b3:e1:2e:b7:eb:2e:65:8c:d8:ec:0e:2d: 1a:df:98:6a:ff:91:46:b1:26:9b:07:f2:c1:ba:a5:02:f6:a2: 16:ab:7b:4d:d7:7f:20:cb:e4:74:a3:e4:14:48:07:26:94:cb: 97:26:8a:7c:37:9d:60:b7:23:dd:a4:c4:20:ec:87:c0:7b:40: 92:1b:de:1b:50:3c:0e:c7:30:14:85:72:45:86:78:b0:fe:0f: 5e:78:2b:ed:c3:09:cc:bc:b4:35:14:b2:a9:4f:56:39:3f:08: 3a:04:cf:f3:a7:04:c2:2d:9f:a6:b7:51:d2:67:d0:a1:4a:4f: 43:1e:ef:10:09:ba:bd:b3:c4:a2:a7:5d:ae:5d:9b:cc:6b:dd: 5a:b5:24:c8:c7:91:18:db:0d:cd:89:5a:06:86:fb:38:5f:0d: f8:67:c3:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTA4MTEwODE4MzVaFw0yNTA4MTgwODE4MzVaMBgxFjAUBgNV BAMTDTY4OTlhNzVjLTVmM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRr8w8cgstVn8TkxrNd9Y4IXEnfza5A3myUZaAaYCT4LUpbJTcDfJ0a9Cy2YQE 6MKYil8jdz5rmCEqfn/DLDv0pGPa9fLJmYQ8UVplQobkWMOsQuVt8FbYsN7Txi5p cJDp9E7yUCzNNed4PgZZ4HJHWExzJSqxY5V0HEuTWTurfYI96SwGio5/6ptd+n4e 1/O0E/yhPzM4y090DXmjmHZ+nC96kKPdf63tFvfl3hJ6MAWIX5QlIinRn2nwiAxr U+56sbAuzO44yG5gob9MhVVZLOh2U0RefR0qojLd8UuTJbmg2vvVUCUqo1QQxhnS s+w5OhVMDFDUD6lIMeAsD2tBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbhZWNIvj f165xgbnpPHfN4jGhA4wHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMuVuGi8PQTjIcN6LNnFnZIr9rcpZ51eydQSzLsEAKLN+/h6sSIUGvd 4uRPpCnWGjASxtpiGEtQu6P02u/GTuk066KmpUMbbgGZazXqcRnb6JaOKmBLAbSp iv1l2BIXy7PhLrfrLmWM2OwOLRrfmGr/kUaxJpsH8sG6pQL2ohare03XfyDL5HSj 5BRIByaUy5cminw3nWC3I92kxCDsh8B7QJIb3htQPA7HMBSFckWGeLD+D154K+3D Ccy8tDUUsqlPVjk/CDoEz/OnBMItn6a3UdJn0KFKT0Me7xAJur2zxKKnXa5dm8xr 3Vq1JMjHkRjbDc2JWgaG+zhfDfhnw9o= -----END CERTIFICATE-----Generated at Mon Aug 11 15:12:03 2025 by rpki-client