$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json) Hash identifier: bscrrNNfZQZc9swQQ9iFXqEMsoq+EV2faWtDL8yI2os= Subject key identifier: CA:10:3D:0D:EA:C1:FD:ED:66:DA:B3:8D:A4:0E:20:A3:15:F6:75:7C Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft Manifest number: 074A Signing time: Fri 08 Aug 2025 22:09:30 +0000 Manifest this update: Fri 08 Aug 2025 22:09:29 +0000 Manifest next update: Fri 15 Aug 2025 22:09:29 +0000 Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: 7WfVSBtbYS49YFVI7k53vxWcMmbgcCYRVvz5u3cL/iw=) 2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: U4a8o1KXqQZowZ9aJ6tXOocb6xkGyoj65dTRVzeEvrE=) 3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4ckscgD2BUTAR0THvAEvfsoW09ZipVLLJmm4EZ3VF2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: Aug 8 22:09:29 2025 GMT Not After : Aug 15 22:09:29 2025 GMT Subject: CN=6896759a-dd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:3f:9e:d2:12:73:ec:c8:e4:a0:93:2b:9e: 19:07:6e:ad:1f:bc:22:df:82:ef:ba:61:e6:58:28: 6c:6c:03:2f:a7:5d:54:15:ed:92:72:5e:54:8b:7a: f6:cc:2a:b9:b6:f2:b1:fc:45:d1:a2:eb:84:93:f9: 04:f3:17:2b:51:32:49:95:e4:3c:ee:0b:0a:f4:db: 56:66:10:d7:74:2b:30:08:76:ae:9b:85:be:70:0f: 2b:2c:e8:36:87:52:a6:52:16:2c:54:41:c1:e0:3e: 3a:9e:34:e0:22:45:87:04:94:e7:4a:2f:64:ad:70: a3:5e:b8:a5:fd:78:2c:59:f7:ea:c5:3b:d8:8c:5c: e6:85:a8:54:8f:79:7a:07:7e:55:15:49:6c:9a:d8: de:d2:b7:e4:da:55:3a:c3:7c:78:c4:34:1c:16:5b: 98:8f:4d:b3:04:ca:3c:b2:f3:ea:70:6e:65:15:66: 51:90:f4:c7:17:48:df:ce:1a:01:61:90:b5:01:89: 36:00:c9:3e:c0:30:51:8c:a6:38:e3:9b:f8:84:a6: 9c:96:32:fb:e2:aa:03:d5:42:73:f1:83:73:6a:47: a4:39:43:4f:80:78:2d:39:b0:d6:b9:e0:92:61:89: 38:bd:c9:95:79:12:10:c7:05:3c:85:25:a3:a0:2c: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:10:3D:0D:EA:C1:FD:ED:66:DA:B3:8D:A4:0E:20:A3:15:F6:75:7C X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:35:7e:20:fd:e5:16:2a:e8:ed:d8:d2:4a:0d:f4:cd:d4:5e: f6:d8:6e:91:c5:1d:54:bd:c3:de:17:ad:68:f6:3b:d7:52:5e: 24:18:b9:7a:db:71:50:21:13:4b:55:46:3e:8a:1b:b9:7a:fa: 4c:e9:ff:26:53:6f:0c:20:c7:f2:b2:85:5d:63:da:7a:0f:6b: cd:30:f4:ed:3d:e9:9e:df:d4:94:39:54:c0:1a:42:4a:1c:f0: bd:0a:3b:65:0a:ac:22:ef:b6:2c:27:77:cb:e2:0d:52:30:c0: a4:f7:0e:dd:33:0a:0a:82:e1:5b:5f:8b:82:f6:ac:a4:5c:de: 5f:7a:2e:5e:8b:72:c4:09:3a:ac:2f:6f:04:08:b7:a1:4a:e0: 39:65:14:75:11:2b:f8:36:40:95:d2:aa:b3:f2:b4:44:f3:fa: 30:cf:cb:24:62:3c:41:d8:a9:27:b6:0e:a9:8d:5a:3d:f5:38: 8a:81:f8:8b:4d:16:55:bf:67:7b:d2:b6:87:a0:8f:e7:e2:b1: b9:9f:01:2b:5e:05:3e:76:44:15:71:3c:9f:04:23:88:72:ab: 70:9d:bb:47:a8:36:e1:62:a8:f4:67:4f:d7:02:ca:a6:af:2e: 5f:73:cf:b4:5f:ec:57:a3:52:f2:10:7b:76:5d:a4:23:7b:63: f8:ed:69:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjUwODA4MjIwOTI5WhcNMjUwODE1MjIwOTI5WjAYMRYwFAYD VQQDEw02ODk2NzU5YS1kZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ0/ntISc+zI5KCTK54ZB26tH7wi34LvumHmWChsbAMvp11UFe2Scl5Ui3r2 zCq5tvKx/EXRouuEk/kE8xcrUTJJleQ87gsK9NtWZhDXdCswCHaum4W+cA8rLOg2 h1KmUhYsVEHB4D46njTgIkWHBJTnSi9krXCjXril/XgsWffqxTvYjFzmhahUj3l6 B35VFUlsmtje0rfk2lU6w3x4xDQcFluYj02zBMo8svPqcG5lFWZRkPTHF0jfzhoB YZC1AYk2AMk+wDBRjKY445v4hKacljL74qoD1UJz8YNzakekOUNPgHgtObDWueCS YYk4vcmVeRIQxwU8hSWjoCxmAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoQPQ3q wf3tZtqzjaQOIKMV9nV8MB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp bDBkYlNFdmQwUHUtTkpEbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhNX4g/eUWKujt2NJKDfTN1F722G6RxR1UvcPeF61o9jvXUl4kGLl6 23FQIRNLVUY+ihu5evpM6f8mU28MIMfysoVdY9p6D2vNMPTtPeme39SUOVTAGkJK HPC9CjtlCqwi77YsJ3fL4g1SMMCk9w7dMwoKguFbX4uC9qykXN5fei5ei3LECTqs L28ECLehSuA5ZRR1ESv4NkCV0qqz8rRE8/owz8skYjxB2Kkntg6pjVo99TiKgfiL TRZVv2d70raHoI/n4rG5nwErXgU+dkQVcTyfBCOIcqtwnbtHqDbhYqj0Z0/XAsqm ry5fc8+0X+xXo1LyEHt2XaQje2P47WlP -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:19 2025 by rpki-client