$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: U2ygMDL+tuCPj3NpZG9s9fxjG/uOpMb/jj7LAuwwqaU= Subject key identifier: F6:CD:20:07:16:60:86:0A:00:0F:CE:1F:B0:46:DF:8D:CC:80:41:CE Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 016C Signing time: Sat 09 Aug 2025 04:12:39 +0000 Manifest this update: Sat 09 Aug 2025 04:12:38 +0000 Manifest next update: Sat 16 Aug 2025 04:12:38 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: v/NiPufNDWGX3cOTXsQbTNpwJHN7iwf3r7vwe/CLjps=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Aug 9 04:12:38 2025 GMT Not After : Aug 16 04:12:38 2025 GMT Subject: CN=6896cab6-cb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:e8:8e:91:93:b4:fc:33:3d:14:5c:10:80: 7a:15:7b:04:08:ec:79:fa:2a:7d:13:03:28:bc:27: 13:ac:66:04:b9:d3:ec:42:db:1e:c4:3d:26:d1:35: f8:7c:b2:59:4c:ba:f8:20:87:c7:bf:00:8f:ef:0d: c5:3f:28:0e:f9:e1:be:db:cf:01:eb:f4:ba:8c:93: 71:c1:b1:3b:69:16:2b:2a:2c:66:a9:a9:dd:24:36: 53:b1:e8:af:2a:e3:17:22:4f:c5:de:49:14:2e:68: 76:a1:4e:2b:6d:34:61:4d:91:64:df:c5:cb:04:26: ac:87:ab:21:e6:70:c2:78:8a:8b:de:ae:55:f6:03: a9:3c:a7:2c:82:d0:f5:16:17:bf:b5:d0:6d:28:22: 5d:b3:98:19:31:4a:dd:1b:0b:2a:4d:34:a0:78:fc: 27:e7:15:12:e0:04:7e:33:40:c3:b5:30:f5:0c:3b: de:f5:7d:75:33:57:0a:33:3e:57:3c:ca:fa:04:85: 12:28:88:3b:d5:05:eb:25:11:41:b4:72:5e:2a:a7: d9:10:da:42:16:8b:cc:19:32:0c:32:3c:32:89:01: 49:64:bd:70:a2:8e:5e:cb:a3:62:c9:7d:0e:cf:b4: 1d:b0:ff:ea:7e:dd:d9:78:5f:d6:f8:dd:f7:9a:78: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CD:20:07:16:60:86:0A:00:0F:CE:1F:B0:46:DF:8D:CC:80:41:CE X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:26:54:de:f5:04:ab:e3:b6:1b:a4:91:e0:19:67:a3:91:b5: 89:a0:2a:68:f0:26:19:f6:24:97:65:54:52:fb:b5:95:68:f9: 8a:2d:f6:99:e7:b7:12:2d:99:bd:59:c7:d2:16:eb:b8:c3:88: c3:f8:ac:0f:b5:3a:c4:6f:e1:b5:23:55:59:9f:18:21:44:8e: 89:00:33:01:df:43:ab:6e:79:05:1f:ee:8b:ec:a0:9a:8d:07: 47:16:31:05:87:5d:cf:e7:e3:9b:56:99:65:3d:af:db:2c:49: 29:15:26:6b:de:ed:80:4d:d8:c1:a3:56:96:c2:a0:01:eb:0f: af:c8:c3:74:ec:0b:b3:46:9d:a5:76:1a:fd:fd:6a:84:f9:3c: 52:f9:64:fb:88:d3:92:ca:98:ba:b0:4c:4e:95:dc:1f:a5:93: 6f:a7:f6:81:da:35:f6:3a:13:5d:38:8f:f7:16:64:2b:b8:7b: b7:3a:59:81:65:4d:73:ab:4a:16:ac:65:6f:f1:08:27:d3:92: 56:0d:99:3a:e0:ff:b9:df:27:35:08:b9:30:81:6e:0b:74:42: b9:f8:32:7d:85:92:05:bf:fa:f2:be:a6:08:b9:74:d3:e3:b1: 63:8c:e9:65:65:fd:73:d8:f3:0a:2c:7e:3b:6b:30:c0:da:12: e2:45:8d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwODA5MDQxMjM4WhcNMjUwODE2MDQxMjM4WjAYMRYwFAYD VQQDEw02ODk2Y2FiNi1jYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsynojpGTtPwzPRRcEIB6FXsECOx5+ip9EwMovCcTrGYEudPsQtsexD0m0TX4 fLJZTLr4IIfHvwCP7w3FPygO+eG+288B6/S6jJNxwbE7aRYrKixmqandJDZTseiv KuMXIk/F3kkULmh2oU4rbTRhTZFk38XLBCash6sh5nDCeIqL3q5V9gOpPKcsgtD1 Fhe/tdBtKCJds5gZMUrdGwsqTTSgePwn5xUS4AR+M0DDtTD1DDve9X11M1cKMz5X PMr6BIUSKIg71QXrJRFBtHJeKqfZENpCFovMGTIMMjwyiQFJZL1woo5ey6NiyX0O z7QdsP/qft3ZeF/W+N33mng/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbNIAcW YIYKAA/OH7BG343MgEHOMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrJlTe9QSr47YbpJHgGWejkbWJoCpo8CYZ9iSXZVRS+7WVaPmKLfaZ 57cSLZm9WcfSFuu4w4jD+KwPtTrEb+G1I1VZnxghRI6JADMB30OrbnkFH+6L7KCa jQdHFjEFh13P5+ObVpllPa/bLEkpFSZr3u2ATdjBo1aWwqAB6w+vyMN07AuzRp2l dhr9/WqE+TxS+WT7iNOSypi6sExOldwfpZNvp/aB2jX2OhNdOI/3FmQruHu3OlmB ZU1zq0oWrGVv8Qgn05JWDZk64P+53yc1CLkwgW4LdEK5+DJ9hZIFv/ryvqYIuXTT 47FjjOllZf1z2PMKLH47azDA2hLiRY0m -----END CERTIFICATE-----Generated at Sat Aug 9 23:20:40 2025 by rpki-client