$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: mR4XmipEQ/m5dHCcM+LJpmi35aminvkoAMFqoZTvL9Q= Subject key identifier: F7:46:CE:73:94:BA:7A:01:FA:F0:17:7F:67:8F:55:DE:8D:C6:2D:D3 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 3535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 34F3 Signing time: Fri 08 Aug 2025 14:47:23 +0000 Manifest this update: Fri 08 Aug 2025 14:47:22 +0000 Manifest next update: Fri 15 Aug 2025 14:47:22 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: Cfn21EM+ioRvnBNckXEgFO88zbGDChkN73PrY76dPwc=) 2: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: blgTc5XvQYnU0ep+sG7C9QHqLwdacO0GP/AFo7Q8RWs=) 3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: ir6EbSttFLUXNeH20jsAyQelAKUJ2g+sCpcB0UwAb9I=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: WlVHKhM+QwijE+SR8uQjozWScXJjKVRCH43Kmj5ogqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13621 (0x3535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Aug 8 14:47:22 2025 GMT Not After : Aug 15 14:47:22 2025 GMT Subject: CN=68960dfb-6cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:86:61:06:b2:07:50:75:b9:90:6d:0e:23: 6b:89:e6:18:af:d6:9b:23:e3:dd:93:ca:53:d3:a1: 74:c1:33:c2:4a:7c:bd:c1:44:6b:35:c9:33:52:e5: 15:52:06:ec:eb:af:26:cb:8c:64:ab:0e:68:e7:3a: 34:25:6e:77:01:64:58:8e:3a:47:23:43:ad:97:3a: 25:ff:b3:3c:97:48:ad:41:7f:65:42:38:72:b9:0b: 21:58:29:59:2e:ec:9a:39:9c:81:50:11:ee:8e:b7: ec:62:e6:48:82:a5:10:47:dc:cc:91:c5:09:41:35: ea:20:3b:e4:35:25:c2:13:ad:1f:3e:0f:28:51:2c: be:2d:ed:38:0c:f1:e1:4c:51:53:27:0e:0b:a8:9e: d6:e4:75:33:db:45:c4:c2:dd:d3:3d:29:5a:c9:2c: 2a:8b:81:59:f4:f3:52:02:51:d7:88:fd:0c:79:bc: d7:20:b4:0f:af:98:54:0b:97:c4:c3:9e:87:e9:64: 5a:3e:7c:02:39:1a:17:ce:8d:92:46:45:e7:ae:f2: 7f:15:4a:50:1b:74:b9:f4:ef:5d:e1:0b:05:69:22: aa:cb:47:0d:94:54:e9:a1:8c:63:b4:6e:e3:aa:16: 4f:1e:e3:2c:f5:8a:fe:de:1d:7c:64:46:60:91:05: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:46:CE:73:94:BA:7A:01:FA:F0:17:7F:67:8F:55:DE:8D:C6:2D:D3 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:32:6e:d6:8d:39:29:bb:df:03:eb:cc:af:62:43:69:5f:8b: 4b:13:7c:52:51:3f:04:3a:e9:ca:fa:82:b0:aa:5f:32:39:48: e6:ec:c4:a2:0d:e4:ca:cf:7a:6a:6d:d5:a1:a4:6f:7b:8c:0e: d7:15:96:03:4c:36:a8:8c:d5:cf:b6:4c:15:19:af:5e:1b:8f: e0:b3:0d:7c:04:45:d4:2c:9b:f0:b1:f7:6c:69:dd:eb:66:d8: ca:b9:d0:cb:3b:aa:92:27:71:61:42:9f:99:d1:0f:67:c6:f7: 70:ca:64:4c:82:23:bd:3b:d8:40:cf:27:e4:75:16:e0:cc:a4: 36:05:91:ac:ce:88:53:4b:93:75:6c:41:21:7d:52:18:b9:40: e5:45:d7:61:11:65:37:10:05:45:ee:4f:fc:78:80:ca:2b:68: 1a:f3:01:ce:f9:97:bf:68:e6:2c:db:fd:d3:9d:65:6d:3a:09: f6:7d:db:e2:39:9c:f4:52:67:85:50:da:be:c3:ab:9d:8d:f0: ef:70:66:4c:06:47:93:14:8b:65:a5:6c:0c:2a:36:14:23:f1: 2f:3f:47:09:ac:e0:43:83:76:0f:1e:61:29:7b:a3:f2:d4:ea: 74:cf:73:c5:84:22:15:ae:89:dd:52:d0:74:e3:c3:69:64:33: 9f:f2:5e:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUwODA4MTQ0NzIyWhcNMjUwODE1MTQ0NzIyWjAYMRYwFAYD VQQDEw02ODk2MGRmYi02Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMmGYQayB1B1uZBtDiNrieYYr9abI+Pdk8pT06F0wTPCSny9wURrNckzUuUV Ugbs668my4xkqw5o5zo0JW53AWRYjjpHI0Otlzol/7M8l0itQX9lQjhyuQshWClZ LuyaOZyBUBHujrfsYuZIgqUQR9zMkcUJQTXqIDvkNSXCE60fPg8oUSy+Le04DPHh TFFTJw4LqJ7W5HUz20XEwt3TPSlaySwqi4FZ9PNSAlHXiP0MebzXILQPr5hUC5fE w56H6WRaPnwCORoXzo2SRkXnrvJ/FUpQG3S59O9d4QsFaSKqy0cNlFTpoYxjtG7j qhZPHuMs9Yr+3h18ZEZgkQWX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdGznOU unoB+vAXf2ePVd6Nxi3TMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcMm7WjTkpu98D68yvYkNpX4tLE3xSUT8EOunK+oKwql8yOUjm7MSi DeTKz3pqbdWhpG97jA7XFZYDTDaojNXPtkwVGa9eG4/gsw18BEXULJvwsfdsad3r ZtjKudDLO6qSJ3FhQp+Z0Q9nxvdwymRMgiO9O9hAzyfkdRbgzKQ2BZGszohTS5N1 bEEhfVIYuUDlRddhEWU3EAVF7k/8eIDKK2ga8wHO+Ze/aOYs2/3TnWVtOgn2fdvi OZz0UmeFUNq+w6udjfDvcGZMBkeTFItlpWwMKjYUI/EvP0cJrOBDg3YPHmEpe6Py 1Op0z3PFhCIVrondUtB048NpZDOf8l4E -----END CERTIFICATE-----Generated at Sat Aug 9 01:17:00 2025 by rpki-client