$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: eQDTHQbbKUjJDd5nSAyBjyIdd/suLrD+0ewZju8N7Z0= Subject key identifier: 53:13:E9:57:2A:AB:4B:A2:D2:66:04:D3:3F:63:8B:6C:51:8C:9E:33 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C77 Signing time: Sun 10 Aug 2025 18:19:14 +0000 Manifest this update: Sun 10 Aug 2025 18:19:14 +0000 Manifest next update: Sun 17 Aug 2025 18:19:14 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: IfzHaYsJh+CKZLcWLQOR1JnVSAzNyPbkzQXPGSYfFIg=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Aug 10 18:19:14 2025 GMT Not After : Aug 17 18:19:14 2025 GMT Subject: CN=6898e2a2-a022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:54:f7:1f:23:30:d1:74:e5:fa:ef:e7:5c: 51:45:8b:87:38:44:00:0e:7b:3e:fe:9e:35:7a:08: c2:60:dd:af:f8:8c:d8:ab:90:86:cd:6c:c5:7d:56: 21:49:a9:bd:1c:49:7b:d7:64:4d:b7:8c:15:65:f1: ab:c7:fd:69:b9:0c:09:44:3d:6b:2f:14:91:98:0d: 9d:be:8d:27:77:00:f6:68:c5:1f:d6:29:d3:f8:f8: a9:21:2e:11:8a:b7:a7:89:52:42:ed:77:ed:2d:57: 32:97:f5:5a:d2:9d:12:66:13:1d:4a:e1:cb:3f:fb: d4:e9:1a:8c:fd:91:d7:54:cb:1f:e4:81:cb:2f:90: 4d:71:b3:47:7a:c8:e2:b1:97:83:73:61:1b:ca:c4: a6:93:ed:fe:77:75:ba:6f:9e:28:57:00:84:68:f1: 12:22:4e:0e:f2:ca:3f:b8:aa:c2:d1:f2:d4:70:f8: f0:9c:ce:01:b0:b8:56:d3:ee:33:30:f5:17:eb:38: c7:88:77:15:24:cf:da:47:46:76:95:bd:99:51:61: d6:43:49:06:4a:77:04:af:78:5d:fc:ba:88:2f:3e: 6f:75:54:55:4b:e8:59:39:80:74:c5:55:8a:98:6f: 0e:6d:0b:d1:c1:9d:be:40:0f:dc:bd:0a:68:e0:22: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:E9:57:2A:AB:4B:A2:D2:66:04:D3:3F:63:8B:6C:51:8C:9E:33 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:34:5f:c4:62:d5:4c:80:1a:75:39:1a:93:82:f4:79:81:eb: bc:c5:e7:00:28:3c:ff:3b:1c:03:d6:4e:1e:2d:6e:74:3f:70: b6:80:e0:80:17:32:a2:4f:bf:97:8f:94:ad:53:69:dc:c9:1e: 85:0f:ae:2f:27:5e:6c:65:49:2d:16:e7:f0:a3:24:b5:78:bc: 75:62:cd:c0:74:22:19:53:ac:f8:3a:44:9a:9d:e5:2e:ad:ce: 4e:d0:73:13:bb:51:09:db:4c:f0:37:9d:65:91:12:a6:0c:6f: 7b:40:68:df:4a:e4:b1:30:75:58:4f:64:4e:51:2b:fc:4c:8b: ec:39:e7:6b:c8:7e:f2:57:d4:76:82:fc:14:f6:7b:d9:ba:2a: 7f:c3:14:c4:40:50:cf:4b:58:48:99:65:09:dc:3b:20:74:db: 16:11:95:fb:28:b9:b8:05:84:c2:a6:26:e2:a4:8d:4d:7b:e9: 9b:03:da:7e:11:42:a6:de:30:fe:a5:66:84:5d:f3:49:1b:10: e9:34:5b:77:30:31:a6:23:bc:d7:58:3f:b4:d0:3c:d6:87:b8: 38:71:31:6d:fa:a3:fb:32:f7:34:0e:8e:3a:73:50:ae:92:01: a7:20:9f:1b:39:95:01:40:d8:3d:ea:4a:40:fb:0f:a4:b7:f6: f5:ec:5c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwODEwMTgxOTE0WhcNMjUwODE3MTgxOTE0WjAYMRYwFAYD VQQDEw02ODk4ZTJhMi1hMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq55U9x8jMNF05frv51xRRYuHOEQADns+/p41egjCYN2v+IzYq5CGzWzFfVYh Sam9HEl712RNt4wVZfGrx/1puQwJRD1rLxSRmA2dvo0ndwD2aMUf1inT+PipIS4R ireniVJC7XftLVcyl/Va0p0SZhMdSuHLP/vU6RqM/ZHXVMsf5IHLL5BNcbNHesji sZeDc2EbysSmk+3+d3W6b54oVwCEaPESIk4O8so/uKrC0fLUcPjwnM4BsLhW0+4z MPUX6zjHiHcVJM/aR0Z2lb2ZUWHWQ0kGSncEr3hd/LqILz5vdVRVS+hZOYB0xVWK mG8ObQvRwZ2+QA/cvQpo4CLqoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMT6Vcq q0ui0mYE0z9ji2xRjJ4zMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhNF/EYtVMgBp1ORqTgvR5geu8xecAKDz/OxwD1k4eLW50P3C2gOCA FzKiT7+Xj5StU2ncyR6FD64vJ15sZUktFufwoyS1eLx1Ys3AdCIZU6z4OkSaneUu rc5O0HMTu1EJ20zwN51lkRKmDG97QGjfSuSxMHVYT2ROUSv8TIvsOedryH7yV9R2 gvwU9nvZuip/wxTEQFDPS1hImWUJ3DsgdNsWEZX7KLm4BYTCpibipI1Ne+mbA9p+ EUKm3jD+pWaEXfNJGxDpNFt3MDGmI7zXWD+00DzWh7g4cTFt+qP7Mvc0Do46c1Cu kgGnIJ8bOZUBQNg96kpA+w+kt/b17FwY -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:03 2025 by rpki-client