$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: Ib4SCy1DC414XKpKkitvYrpnWCchRIhfB8602FvRUus= Subject key identifier: B6:1B:9C:67:00:CD:62:77:6C:94:5E:E9:CF:98:62:A6:C1:6F:73:0D Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 01D0 Signing time: Sun 03 Aug 2025 03:11:38 +0000 Manifest this update: Sun 03 Aug 2025 03:11:37 +0000 Manifest next update: Sun 10 Aug 2025 03:11:37 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: XAQ4iDyWFQWQ6+tZG5on1lxbX8N1rHXpBl/xRgVd0/o=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Aug 3 03:11:37 2025 GMT Not After : Aug 10 03:11:37 2025 GMT Subject: CN=688ed36a-17b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:a2:11:4d:a1:01:6a:22:d0:31:c2:8d:07: 91:1b:f3:b2:3e:e3:f3:ff:84:0c:08:e6:49:96:5d: 3d:3e:3b:31:68:e6:dc:11:95:99:d6:54:f9:00:a6: 22:0c:69:98:b5:ec:21:af:84:3e:ad:41:e6:a0:20: 5f:4d:eb:60:4e:02:4a:50:f3:6f:e5:3c:aa:c9:70: f8:9e:55:37:ea:3d:a4:9a:64:57:df:9b:10:2f:a6: 16:b2:a9:1c:e2:c2:f7:5a:a5:12:da:ea:2b:ed:a8: 3c:8c:72:dc:3b:03:f7:8c:b7:83:1e:33:38:53:9d: 36:69:33:4a:3b:af:c0:f5:d3:22:3b:e9:45:2c:59: 1d:e7:7b:68:bc:88:e2:81:f4:21:1e:1d:eb:6b:ff: c9:22:ed:33:f5:e6:2d:e4:23:fe:dc:54:04:80:b0: 81:d0:18:ac:41:a1:ad:1b:fb:14:7a:87:aa:ef:cb: 1a:74:93:a4:48:40:27:4f:21:d7:48:c8:65:7f:b9: 01:5b:5d:b5:ad:8c:39:a9:c6:fc:72:1b:24:27:cc: e7:3d:44:65:c8:95:e0:cf:a8:40:69:2c:09:8b:5a: 8a:43:27:af:5e:ce:ea:92:d4:6f:79:d5:6e:61:2f: 0c:10:dd:33:e2:63:3a:4e:eb:d1:ab:89:93:b1:ef: a9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1B:9C:67:00:CD:62:77:6C:94:5E:E9:CF:98:62:A6:C1:6F:73:0D X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:19:36:80:c8:b7:40:db:66:57:63:e1:40:af:d2:80:0d:41: 46:84:36:4b:58:e9:df:4f:a8:43:5c:76:44:8e:38:2b:6e:18: 77:4d:7f:97:38:af:de:6a:e1:3b:df:ff:66:a8:f7:0a:a4:e1: e8:0b:3f:3a:c1:8d:e5:2c:82:20:87:1d:c4:08:72:39:e3:98: e4:77:a0:16:57:78:2c:5d:5c:5a:6c:f7:fe:d9:60:e1:0e:e8: 11:2c:c9:21:b4:cb:26:bd:34:76:f4:d5:98:db:11:48:f0:20: 19:77:bf:0d:79:44:a1:7d:14:ef:1a:76:30:80:27:0c:28:48: b1:57:e3:13:53:14:cd:f3:de:a4:95:21:0b:ec:27:5d:16:07: b5:26:39:51:c2:26:6e:2c:73:07:1c:5e:30:5c:1e:af:bb:cd: f9:32:8f:fc:d2:d9:98:ea:5e:b0:86:e6:00:e1:f6:78:08:8d: e7:f6:17:0f:4d:8a:6c:1d:d2:1f:27:13:60:80:78:85:21:ae: 74:61:d2:19:ca:dc:c9:1b:cd:ca:c3:8a:ae:2a:1b:dd:a9:0d: f4:86:4a:86:a9:72:e3:30:25:c1:1a:74:f0:4a:bb:64:5e:d3: 16:e5:26:cb:51:57:41:93:a6:7c:41:1f:d5:ee:1c:d5:f0:87: 99:33:c7:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUwODAzMDMxMTM3WhcNMjUwODEwMDMxMTM3WjAYMRYwFAYD VQQDEw02ODhlZDM2YS0xN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo52iEU2hAWoi0DHCjQeRG/OyPuPz/4QMCOZJll09PjsxaObcEZWZ1lT5AKYi DGmYtewhr4Q+rUHmoCBfTetgTgJKUPNv5TyqyXD4nlU36j2kmmRX35sQL6YWsqkc 4sL3WqUS2uor7ag8jHLcOwP3jLeDHjM4U502aTNKO6/A9dMiO+lFLFkd53tovIji gfQhHh3ra//JIu0z9eYt5CP+3FQEgLCB0BisQaGtG/sUeoeq78sadJOkSEAnTyHX SMhlf7kBW121rYw5qcb8chskJ8znPURlyJXgz6hAaSwJi1qKQyevXs7qktRvedVu YS8MEN0z4mM6TuvRq4mTse+pBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYbnGcA zWJ3bJRe6c+YYqbBb3MNMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXGTaAyLdA22ZXY+FAr9KADUFGhDZLWOnfT6hDXHZEjjgrbhh3TX+X OK/eauE73/9mqPcKpOHoCz86wY3lLIIghx3ECHI545jkd6AWV3gsXVxabPf+2WDh DugRLMkhtMsmvTR29NWY2xFI8CAZd78NeUShfRTvGnYwgCcMKEixV+MTUxTN896k lSEL7CddFge1JjlRwiZuLHMHHF4wXB6vu835Mo/80tmY6l6whuYA4fZ4CI3n9hcP TYpsHdIfJxNggHiFIa50YdIZytzJG83Kw4quKhvdqQ30hkqGqXLjMCXBGnTwSrtk XtMW5SbLUVdBk6Z8QR/V7hzV8IeZM8ce -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:32 2025 by rpki-client