$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: Y+OSwWRocQKXtjftrB/Yynkzlb/rJYC6TnsQO7zTjl4= Subject key identifier: DC:FD:34:5A:05:A8:78:FF:70:D3:C7:6E:87:19:86:2F:10:DD:2F:60 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: B7 Signing time: Sat 09 Aug 2025 06:26:21 +0000 Manifest this update: Sat 09 Aug 2025 06:26:20 +0000 Manifest next update: Sat 16 Aug 2025 06:26:20 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: VgJRUTBfiL7cfulqgAM4cEul6hSZy1qevZD3h7ZuER0=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: WK09suWPiJTW5VawW56fPInSd31p6Tm1C+edtUFR9pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Aug 9 06:26:20 2025 GMT Not After : Aug 16 06:26:20 2025 GMT Subject: CN=6896ea0d-ea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:71:49:dc:a4:17:70:f5:2a:97:a2:7f:61: ab:3a:d0:0c:56:30:4e:a8:af:66:03:70:e4:17:dc: bd:e8:1f:c3:0f:8f:1f:c3:41:68:e1:35:a5:8d:0d: 63:66:7e:8a:3a:23:d2:c8:28:cf:70:f0:dd:fa:0b: 87:36:c4:de:cc:0c:00:12:d3:16:3c:6b:ec:3b:dd: 6a:f0:6f:81:e3:08:e7:3f:74:64:c9:43:d5:af:41: 4c:8d:37:c3:44:5f:6d:de:c9:4a:99:31:e2:9b:70: ef:bb:90:de:be:c7:cd:45:13:1d:7b:55:84:44:d0: 3c:c9:b0:ac:d3:c6:b2:c1:3d:f2:c8:f1:6a:5c:dd: ee:83:48:31:8c:65:66:25:82:06:7e:1b:ca:42:e4: 87:f2:fb:6f:d1:67:9c:69:93:23:16:62:ae:58:e9: 13:dc:f1:6c:da:5b:76:e4:f4:ea:d0:4f:8b:92:09: 2d:99:f2:2c:8c:35:f0:36:72:4a:98:0f:00:5d:ec: 11:5c:30:e4:c2:1d:74:99:1e:30:4d:81:46:e0:65: 93:da:f3:d7:e7:a5:fd:ab:a7:e1:9b:54:e7:02:06: f8:6b:2e:23:64:3c:2a:ea:ff:9e:09:90:02:8e:26: 81:ac:2e:aa:3b:c3:0d:1d:3e:0a:52:ab:de:c0:38: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:34:5A:05:A8:78:FF:70:D3:C7:6E:87:19:86:2F:10:DD:2F:60 X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:1f:89:a0:d8:8d:c0:02:73:3f:64:6c:b4:da:c1:92:cf:d1: 5f:ec:65:0e:af:0a:68:62:15:61:62:96:89:f6:01:2f:4a:f8: ea:2a:97:76:38:76:40:73:88:d9:d9:a4:c8:fd:b3:ef:f7:b4: 8e:60:15:0f:06:30:88:5b:d5:14:b6:01:ba:53:03:79:1a:4b: 98:05:dc:cb:1d:e3:46:57:01:a5:a4:d0:7e:48:fa:12:c9:15: 23:01:27:d6:55:1a:ec:da:10:a6:f3:4d:35:d5:ad:0f:04:7b: 3e:67:f6:71:f4:a2:9b:bf:be:76:f9:d0:74:3a:ba:9c:c4:4a: 10:18:ad:c7:97:58:c1:f7:55:be:7e:03:52:84:37:4f:61:c6: 6c:89:f7:77:18:cb:dc:4d:9c:85:f4:45:eb:f7:05:45:ff:c2: 41:07:2f:5b:e7:11:40:e8:8f:bc:3a:a9:74:79:0a:b4:24:0b: 40:61:4c:a5:1b:3e:58:7f:84:69:a4:3d:fc:ea:6a:2f:50:3b: e1:d2:bc:bf:c6:4f:03:34:3c:59:c9:b6:8c:bf:54:31:fd:71: 54:08:cf:bc:86:fa:59:0f:62:f6:d5:82:34:09:ab:9b:9e:e4: 32:e8:55:f4:9f:1c:8c:1b:0c:ce:09:0e:1e:a6:4f:c8:a3:35: 82:3a:9f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwODA5MDYyNjIwWhcNMjUwODE2MDYyNjIwWjAYMRYwFAYD VQQDEw02ODk2ZWEwZC1lYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hNxSdykF3D1Kpeif2GrOtAMVjBOqK9mA3DkF9y96B/DD48fw0Fo4TWljQ1j Zn6KOiPSyCjPcPDd+guHNsTezAwAEtMWPGvsO91q8G+B4wjnP3RkyUPVr0FMjTfD RF9t3slKmTHim3Dvu5DevsfNRRMde1WERNA8ybCs08aywT3yyPFqXN3ug0gxjGVm JYIGfhvKQuSH8vtv0WecaZMjFmKuWOkT3PFs2lt25PTq0E+LkgktmfIsjDXwNnJK mA8AXewRXDDkwh10mR4wTYFG4GWT2vPX56X9q6fhm1TnAgb4ay4jZDwq6v+eCZAC jiaBrC6qO8MNHT4KUqvewDgIgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz9NFoF qHj/cNPHbocZhi8Q3S9gMB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIH4mg2I3AAnM/ZGy02sGSz9Ff7GUOrwpoYhVhYpaJ9gEvSvjqKpd2 OHZAc4jZ2aTI/bPv97SOYBUPBjCIW9UUtgG6UwN5GkuYBdzLHeNGVwGlpNB+SPoS yRUjASfWVRrs2hCm80011a0PBHs+Z/Zx9KKbv752+dB0OrqcxEoQGK3Hl1jB91W+ fgNShDdPYcZsifd3GMvcTZyF9EXr9wVF/8JBBy9b5xFA6I+8Oql0eQq0JAtAYUyl Gz5Yf4RppD386movUDvh0ry/xk8DNDxZybaMv1Qx/XFUCM+8hvpZD2L21YI0Caub nuQy6FX0nxyMGwzOCQ4epk/IozWCOp+L -----END CERTIFICATE-----Generated at Sun Aug 10 16:06:42 2025 by rpki-client