$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft File: 1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json) Hash identifier: f2phWgmWSqwEQjIo8lgzzJZJbdHFUIfHR5+5deRuUdo= Subject key identifier: D1:FF:5D:C0:09:02:1D:53:8A:FA:77:70:6E:1A:BF:9B:E3:33:4E:CE Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20 Certificate issuer: /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft Manifest number: 01BE Signing time: Mon 11 Aug 2025 03:07:37 +0000 Manifest this update: Mon 11 Aug 2025 03:07:37 +0000 Manifest next update: Mon 18 Aug 2025 03:07:37 +0000 Files and hashes: 1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: I/ZtgATL74gPVbNyrGzBA5YdfIgnOwWJlkocqYJcBbw=) 2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: 445y7dnFbGIJcED/nA18M8HZ1X9DaCKTToZbs8yrxpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220 Validity Not Before: Aug 11 03:07:37 2025 GMT Not After : Aug 18 03:07:37 2025 GMT Subject: CN=68995e79-7299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:4f:cc:4a:53:b2:2b:c9:41:ef:4a:80:25: 42:8c:56:f4:c8:27:90:0d:18:20:d9:a7:b2:cd:15: 3a:f0:6f:21:74:a2:64:3f:d3:6a:a2:58:82:dd:16: fa:4b:bf:73:4e:c9:e0:cb:05:2a:94:6b:54:e3:e3: 14:76:bd:c7:7b:b4:70:48:ee:a7:06:6a:6d:3d:8f: 2a:02:e0:2c:f2:1f:7d:4d:51:f0:99:a6:29:fb:5b: 82:59:3a:fb:5c:c4:aa:2b:df:08:09:f6:94:97:59: 2b:18:f6:ad:7f:52:d4:07:75:b6:8b:e2:59:77:b7: b5:1a:75:55:2d:90:da:7c:c2:bd:aa:4c:5b:d8:11: 9f:22:15:84:40:de:06:65:0a:42:2f:c1:57:00:e6: 3a:0e:83:57:8b:24:c5:5a:8f:6b:7c:37:35:5a:e1: 56:75:5b:cd:fa:71:a9:a4:f0:89:b8:19:51:30:3c: 62:63:f9:d9:0b:8f:81:0e:3f:71:54:f9:bd:36:d0: f6:b2:72:2c:27:fe:78:d3:f7:47:63:7e:e1:fc:54: 7e:38:26:26:98:9f:a0:12:11:41:bd:0a:d8:b7:f4: b9:96:8c:1d:fb:53:9d:bf:bd:7e:61:b0:d8:f2:d9: 22:58:b1:a5:37:eb:83:d1:0f:47:3f:f4:de:62:27: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:5D:C0:09:02:1D:53:8A:FA:77:70:6E:1A:BF:9B:E3:33:4E:CE X509v3 Authority Key Identifier: keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:bb:cf:a0:53:87:da:dd:d3:a0:61:08:42:69:b7:fd:1f:03: 46:ba:ad:7b:93:8c:ff:c6:4f:56:8e:d8:8b:b4:0e:36:3d:66: a6:be:15:96:d4:65:62:90:57:09:af:94:44:6c:cd:20:47:d0: 10:6f:5a:04:53:06:d1:90:d7:de:fe:aa:2d:b1:74:41:32:3d: db:3e:3a:0e:ce:f6:eb:13:67:8b:25:66:12:cd:88:41:a1:4a: 85:c3:62:ca:c8:9f:ac:ba:17:08:30:f1:b3:18:bb:a3:da:b9: da:82:92:78:a1:53:9d:34:47:6e:14:3c:b5:d0:38:5d:e5:4f: 89:fa:c0:96:19:ed:2b:65:ff:e1:f4:66:d4:3f:bd:ee:4e:aa: ad:1d:ef:16:af:99:d5:29:36:4d:77:1f:be:16:d8:c0:2b:26: 32:39:87:a9:9b:b5:b5:ce:76:e4:d9:07:cb:4e:8e:67:37:76: 48:6c:de:08:71:60:d0:db:c8:3a:00:41:82:14:42:99:11:e3: 63:00:f8:1b:59:8f:f6:c3:ad:48:94:c8:cf:27:47:c4:7b:6e: 43:b7:b5:e0:bc:59:76:c5:af:7d:1a:88:5a:f6:b8:85:f0:f9: 08:43:66:8a:49:82:9b:10:d3:6d:80:25:9e:45:15:08:76:a4: d4:2c:0c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQjgxMTAvBgNVBAUTKEQ1RkEzMzYzMzRGOTlBRTM2M0VBNTg2N0QyOEU4QTUw MjMxRTQyMjAwHhcNMjUwODExMDMwNzM3WhcNMjUwODE4MDMwNzM3WjAYMRYwFAYD VQQDEw02ODk5NWU3OS03Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz9PzEpTsivJQe9KgCVCjFb0yCeQDRgg2aeyzRU68G8hdKJkP9NqoliC3Rb6 S79zTsngywUqlGtU4+MUdr3He7RwSO6nBmptPY8qAuAs8h99TVHwmaYp+1uCWTr7 XMSqK98ICfaUl1krGPatf1LUB3W2i+JZd7e1GnVVLZDafMK9qkxb2BGfIhWEQN4G ZQpCL8FXAOY6DoNXiyTFWo9rfDc1WuFWdVvN+nGppPCJuBlRMDxiY/nZC4+BDj9x VPm9NtD2snIsJ/540/dHY37h/FR+OCYmmJ+gEhFBvQrYt/S5lowd+1Odv71+YbDY 8tkiWLGlN+uD0Q9HP/TeYifw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH/XcAJ Ah1Tivp3cG4av5vjM07OMB8GA1UdIwQYMBaAFNX6M2M0+ZrjY+pYZ9KOilAjHkIg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJCOC8yRjE3NjA4QUND MkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11Tmo2bGhuMG82S1VDTWVR aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmb3pZelQ1bXVOajZsaG4wbzZLVUNNZVFpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjJCOC8yRjE3NjA4QUNDMkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11 Tmo2bGhuMG82S1VDTWVRaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBju8+gU4fa3dOgYQhCabf9HwNGuq17k4z/xk9WjtiLtA42PWamvhWW 1GVikFcJr5REbM0gR9AQb1oEUwbRkNfe/qotsXRBMj3bPjoOzvbrE2eLJWYSzYhB oUqFw2LKyJ+suhcIMPGzGLuj2rnagpJ4oVOdNEduFDy10Dhd5U+J+sCWGe0rZf/h 9GbUP73uTqqtHe8Wr5nVKTZNdx++FtjAKyYyOYepm7W1znbk2QfLTo5nN3ZIbN4I cWDQ28g6AEGCFEKZEeNjAPgbWY/2w61IlMjPJ0fEe25Dt7XgvFl2xa99Goha9riF 8PkIQ2aKSYKbENNtgCWeRRUIdqTULAyE -----END CERTIFICATE-----Generated at Mon Aug 11 12:56:46 2025 by rpki-client