$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: OCfLn3ghqga1BpxN9b+2wXHP256xOsJ5+pUXk/LFFB8= Subject key identifier: DE:A3:BB:93:91:73:D6:A6:8C:86:F0:9D:91:9B:27:F3:56:F5:74:BB Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 04B7 Signing time: Sat 09 Aug 2025 00:23:15 +0000 Manifest this update: Sat 09 Aug 2025 00:23:15 +0000 Manifest next update: Sat 16 Aug 2025 00:23:15 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: HXKwoY3feVOW3I3DiFETTdKIIaMHaRxw9//+2rTZP/E=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Validity Not Before: Aug 9 00:23:15 2025 GMT Not After : Aug 16 00:23:15 2025 GMT Subject: CN=689694f3-8ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:a4:3e:9c:65:6b:4e:61:21:a8:23:c3:94: 0b:17:ca:6b:80:9f:92:d4:71:0b:54:62:bd:45:7c: 1b:c1:28:d0:08:f0:c2:4b:0c:ba:11:a8:9b:0c:55: d7:12:ec:6c:bb:b3:e0:c7:26:e3:99:90:94:02:18: 75:1e:13:f4:19:14:29:e5:83:8b:2a:ae:81:ae:7d: f7:26:42:ae:80:b7:5e:ff:ad:3e:48:a0:18:cf:1d: 8b:e0:fc:56:69:a8:31:fd:c9:a2:21:38:cb:ab:5f: f9:bf:f7:ec:5e:21:de:ff:c1:19:ae:30:a3:12:f0: 17:16:41:95:cf:7d:b9:dd:3c:39:74:36:7c:9b:98: 77:ec:cb:5b:53:6d:2e:e5:85:7f:ce:24:90:c3:4f: 33:b8:30:1f:12:ca:78:bf:82:f0:d7:db:d0:4b:f5: d8:0f:b2:48:61:be:ef:5a:24:32:fd:51:ea:78:ab: da:d0:a5:8a:f6:54:b6:bf:9f:80:76:bc:d1:a6:09: c3:28:26:ff:77:30:6b:ca:d4:e9:4a:ff:81:80:f8: 7a:c8:9a:08:75:97:f3:b9:ce:91:ea:6f:33:54:8f: a0:46:32:e5:0a:e3:9b:06:75:34:5a:9f:0d:e7:f2: ad:67:3b:69:02:62:17:93:4e:0d:c0:db:c0:10:b3: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:BB:93:91:73:D6:A6:8C:86:F0:9D:91:9B:27:F3:56:F5:74:BB X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:5f:fa:ae:56:4c:d7:c3:78:9f:0f:20:42:43:f2:47:f7:68: c0:25:c3:06:9a:24:46:46:b5:a7:af:1b:dc:12:0a:3e:fe:dd: 96:ba:cc:4c:73:d5:64:51:39:d1:4e:99:ac:34:ae:7d:93:17: 50:d6:96:26:de:76:cb:bd:e8:5f:d8:66:29:e8:5e:d6:b3:04: 1d:de:d4:73:6f:55:35:d1:47:4a:26:fd:93:71:1f:2f:cb:f9: 34:24:ed:b8:96:5b:e3:9f:bb:5f:fd:1d:a9:60:6f:88:a3:33: 06:82:4a:09:ea:2c:75:6c:81:44:00:61:93:59:57:0e:87:21: 6e:60:75:d9:5b:36:4c:93:78:98:86:ed:8f:27:e7:a6:ba:79: 5c:e0:96:07:ba:2c:5a:ec:cf:fe:77:09:13:87:86:27:dc:f7: ed:fa:19:5c:ff:91:ae:ea:ee:70:4b:31:23:2c:f3:e6:7c:1d: fe:49:fe:38:6b:d6:bd:78:5e:53:63:d2:03:c4:b6:42:cc:c2: 03:c9:fc:73:c7:76:46:65:63:12:67:84:28:5f:37:85:24:7c: a6:39:84:4d:2f:ba:e1:bc:3d:c8:c0:d2:bd:c2:a1:3a:bc:ab: dd:4a:ba:b0:ca:fb:86:50:56:30:54:68:9f:f4:be:a3:84:30: 91:c2:7e:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUwODA5MDAyMzE1WhcNMjUwODE2MDAyMzE1WjAYMRYwFAYD VQQDEw02ODk2OTRmMy04YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7ukPpxla05hIagjw5QLF8prgJ+S1HELVGK9RXwbwSjQCPDCSwy6EaibDFXX Euxsu7PgxybjmZCUAhh1HhP0GRQp5YOLKq6Brn33JkKugLde/60+SKAYzx2L4PxW aagx/cmiITjLq1/5v/fsXiHe/8EZrjCjEvAXFkGVz3253Tw5dDZ8m5h37MtbU20u 5YV/ziSQw08zuDAfEsp4v4Lw19vQS/XYD7JIYb7vWiQy/VHqeKva0KWK9lS2v5+A drzRpgnDKCb/dzBrytTpSv+BgPh6yJoIdZfzuc6R6m8zVI+gRjLlCuObBnU0Wp8N 5/KtZztpAmIXk04NwNvAELMQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6ju5OR c9amjIbwnZGbJ/NW9XS7MB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHX/quVkzXw3ifDyBCQ/JH92jAJcMGmiRGRrWnrxvcEgo+/t2WusxM c9VkUTnRTpmsNK59kxdQ1pYm3nbLvehf2GYp6F7WswQd3tRzb1U10UdKJv2TcR8v y/k0JO24llvjn7tf/R2pYG+IozMGgkoJ6ix1bIFEAGGTWVcOhyFuYHXZWzZMk3iY hu2PJ+emunlc4JYHuixa7M/+dwkTh4Yn3Pft+hlc/5Gu6u5wSzEjLPPmfB3+Sf44 a9a9eF5TY9IDxLZCzMIDyfxzx3ZGZWMSZ4QoXzeFJHymOYRNL7rhvD3IwNK9wqE6 vKvdSrqwyvuGUFYwVGif9L6jhDCRwn4E -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:56 2025 by rpki-client