$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: iK/tnrjK4PDsrk4GwiyingRbUGtHRa8k57W7+QBmWX0= Subject key identifier: EB:03:AC:53:06:95:83:A7:F8:F8:7B:A6:C6:52:9C:D8:A4:B2:C2:2A Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 11A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 119F Signing time: Fri 08 Aug 2025 17:23:51 +0000 Manifest this update: Fri 08 Aug 2025 17:23:51 +0000 Manifest next update: Fri 15 Aug 2025 17:23:51 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: 9Vi6Ax5frzibrduQyNEsbgTvpCfiLgPJsSqzJHeMKiQ=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: GyMFJG7vpXHHpv3BwX4n2XQfqCBxAhnBsVULLZ+wmKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4520 (0x11a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Aug 8 17:23:51 2025 GMT Not After : Aug 15 17:23:51 2025 GMT Subject: CN=689632a7-0c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:88:84:5f:e5:20:97:57:87:ce:22:26:c5: 36:a8:22:43:3e:dd:40:7e:b1:d9:f6:30:af:bb:67: 2b:a9:1d:c6:e4:24:2d:94:d5:b9:fb:d6:ae:20:49: 42:d4:2d:9c:d4:75:13:42:17:68:6a:78:2e:63:9c: 30:ed:22:54:05:a8:3f:be:c3:d9:51:f7:e8:a6:ea: ef:28:1c:5a:38:63:66:14:2a:fc:23:22:8f:fa:ce: 33:7c:67:17:5f:47:de:4f:59:c7:e2:9b:9c:ad:7b: 5e:b8:51:09:e1:2d:a5:fa:fe:4a:00:95:c7:86:d3: 79:b1:0b:ff:5a:99:b7:12:db:16:a7:ac:5a:c5:dc: b9:0a:a6:2d:ca:02:be:68:3d:84:75:9d:91:1e:f2: 13:9b:8b:af:85:e0:1a:35:a5:99:67:1a:d8:f4:4f: d1:7f:de:72:58:6a:cb:cd:d8:b2:b1:0e:26:3b:b4: 91:54:7c:de:23:74:fd:82:17:e4:37:f9:e4:0f:bf: 75:5d:1a:cf:a6:c9:cc:7d:a1:2e:f0:6c:5d:0b:a4: b2:ec:2c:d3:fa:ef:85:f7:3f:da:48:7a:58:b8:64: 12:42:41:70:a0:66:e9:8c:95:e3:2d:da:62:7d:7a: 4a:cb:34:b0:f6:18:a7:77:ae:86:ee:f2:1c:5e:52: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:AC:53:06:95:83:A7:F8:F8:7B:A6:C6:52:9C:D8:A4:B2:C2:2A X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:74:41:81:61:c3:86:8d:2c:d8:4a:4b:87:c9:58:d0:f8:70: df:03:63:0c:5d:68:78:2f:f4:49:90:cb:ab:e6:ce:f2:ab:dd: 88:4f:06:dd:82:69:e8:95:bc:d7:58:81:18:fd:f7:9f:ad:60: da:17:01:71:2c:22:5b:71:54:cc:2f:8c:0e:e0:22:71:e4:cf: 00:34:4f:d5:f7:6d:34:17:bb:cf:81:cc:c3:fc:97:6e:76:50: cc:cb:82:85:09:2e:0b:d0:c1:a9:18:dd:8d:90:69:34:25:9a: 30:c1:f3:e3:21:71:ea:15:55:f0:2c:c7:a0:e6:c5:65:87:b2: 33:f2:e7:0b:b9:32:9f:1c:d5:e5:16:11:ef:6b:fa:98:aa:16: 2b:64:6b:fd:aa:c8:a7:4c:85:95:13:aa:06:e4:57:ed:b5:0d: 41:f1:c9:25:ea:63:d6:ca:4d:c1:54:31:05:81:f5:00:12:25: 18:0b:0c:ed:81:84:f2:f1:62:13:0f:09:ba:33:e1:96:1c:fc: 2a:4b:79:a4:64:4b:dd:be:6a:e7:23:7f:e9:0d:6e:f7:a3:f4: fa:f1:4d:17:26:10:e7:11:e7:e1:36:b2:d7:3d:2f:c3:ba:f1: e1:4c:64:65:c0:7f:17:7c:43:ff:b5:68:aa:dd:ce:36:3b:49: af:c1:f1:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUwODA4MTcyMzUxWhcNMjUwODE1MTcyMzUxWjAYMRYwFAYD VQQDEw02ODk2MzJhNy0wYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycmIhF/lIJdXh84iJsU2qCJDPt1AfrHZ9jCvu2crqR3G5CQtlNW5+9auIElC 1C2c1HUTQhdoanguY5ww7SJUBag/vsPZUffopurvKBxaOGNmFCr8IyKP+s4zfGcX X0feT1nH4pucrXteuFEJ4S2l+v5KAJXHhtN5sQv/Wpm3EtsWp6xaxdy5CqYtygK+ aD2EdZ2RHvITm4uvheAaNaWZZxrY9E/Rf95yWGrLzdiysQ4mO7SRVHzeI3T9ghfk N/nkD791XRrPpsnMfaEu8GxdC6Sy7CzT+u+F9z/aSHpYuGQSQkFwoGbpjJXjLdpi fXpKyzSw9hind66G7vIcXlLOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsDrFMG lYOn+Ph7psZSnNikssIqMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7dEGBYcOGjSzYSkuHyVjQ+HDfA2MMXWh4L/RJkMur5s7yq92ITwbd gmnolbzXWIEY/fefrWDaFwFxLCJbcVTML4wO4CJx5M8ANE/V9200F7vPgczD/Jdu dlDMy4KFCS4L0MGpGN2NkGk0JZowwfPjIXHqFVXwLMeg5sVlh7Iz8ucLuTKfHNXl FhHva/qYqhYrZGv9qsinTIWVE6oG5FfttQ1B8ckl6mPWyk3BVDEFgfUAEiUYCwzt gYTy8WITDwm6M+GWHPwqS3mkZEvdvmrnI3/pDW73o/T68U0XJhDnEefhNrLXPS/D uvHhTGRlwH8XfEP/tWiq3c42O0mvwfEP -----END CERTIFICATE-----Generated at Sat Aug 9 10:42:49 2025 by rpki-client