$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json) Hash identifier: 3+p97m678n8NzJEDraAliA0GfYwaOu23oz/WxC+35uo= Subject key identifier: D8:BA:1B:74:F2:6E:A7:B6:0C:84:9C:B0:05:A1:76:C8:EE:C0:E1:DD Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft Manifest number: 040B Signing time: Sat 09 Aug 2025 00:55:48 +0000 Manifest this update: Sat 09 Aug 2025 00:55:47 +0000 Manifest next update: Sat 16 Aug 2025 00:55:47 +0000 Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 8XqCnuy4H7mtAuUUhloPbCmUf6CK4vVnFkb/7kdJHCc=) 2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Validity Not Before: Aug 9 00:55:47 2025 GMT Not After : Aug 16 00:55:47 2025 GMT Subject: CN=68969c93-42e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:78:73:40:22:bc:d7:04:0c:06:b1:a5:33: da:1f:6a:b3:4c:73:a0:ae:e0:e7:f2:a7:2c:2c:a1: cd:22:b2:f6:23:da:23:42:90:57:49:46:cf:fd:a8: fc:fe:25:d4:21:85:68:0c:64:e2:4e:dd:c1:cf:43: 16:69:4f:a5:17:52:6b:6a:e7:3e:dc:86:44:e0:36: 57:05:da:f3:99:b9:41:12:98:e4:0a:b9:03:54:4e: 00:3a:6e:0f:70:82:a2:c1:af:f1:6c:fc:40:79:d8: 41:14:41:cf:d9:e3:28:3a:67:1b:06:19:b3:81:c8: 4f:aa:43:37:4c:2d:4d:61:45:12:59:71:0a:99:64: b6:3a:51:21:6e:69:16:e0:42:53:70:d9:ea:ed:7f: 50:15:5c:00:2d:36:37:e2:67:9d:19:9b:09:81:7a: 2c:e5:8c:3b:b6:e3:f8:ee:af:10:6c:1c:40:c9:23: cf:a3:a6:1a:84:58:d1:9b:0b:a6:c3:5a:77:72:6c: 9c:f1:b7:54:dc:44:7a:8e:97:4e:13:c7:97:72:c8: 80:c6:85:1e:4f:8e:f1:9f:38:55:07:9d:88:68:ba: 07:14:db:c1:5f:13:88:6e:c2:9d:f0:2f:07:82:08: 23:16:df:89:ea:88:1f:c7:1f:c1:92:25:f5:19:f9: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:1B:74:F2:6E:A7:B6:0C:84:9C:B0:05:A1:76:C8:EE:C0:E1:DD X509v3 Authority Key Identifier: keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:71:3e:63:3e:c1:db:0c:c0:57:59:4a:ac:ea:a6:19:ff:b4: 6b:7b:57:71:6a:12:5a:5e:89:cc:42:4a:d7:98:8d:69:26:9d: 6d:87:a8:ca:47:72:89:35:42:19:7e:fa:25:c0:fa:a5:ce:b6: d4:6e:07:44:66:fb:04:2d:5a:88:ed:77:65:e1:fc:fd:3f:02: ce:1c:01:ca:89:c8:57:50:9b:c3:ed:c9:00:65:b5:19:1e:1f: b5:26:de:7f:b3:24:e4:42:65:4d:81:74:36:b1:3c:3a:d0:83: 36:6c:ab:64:a7:1e:8a:0e:c8:10:7d:8b:8e:8a:94:fe:7d:ad: 7a:de:93:fb:eb:b9:08:b8:0c:90:48:5b:62:02:92:7b:8e:b5: b5:4c:8b:01:ec:51:dd:a6:d5:9d:67:30:aa:c9:1d:11:7f:01: c9:52:eb:62:13:1b:1d:24:7a:4b:d0:d2:00:bc:b6:1b:4c:13: 60:1d:3a:9f:69:aa:08:9b:d5:6a:68:5f:b9:d9:2d:62:b3:d1: 9c:21:87:25:29:66:c3:b4:c4:36:e2:9d:1a:66:44:73:79:56: 4f:83:e5:57:d1:01:e1:d3:39:43:be:50:43:81:e1:02:63:88: f5:1c:31:03:97:06:81:e9:0d:d4:a1:10:1d:01:6a:24:a5:44: 04:81:46:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx QTQ4QUUxQTQwHhcNMjUwODA5MDA1NTQ3WhcNMjUwODE2MDA1NTQ3WjAYMRYwFAYD VQQDEw02ODk2OWM5My00MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYF4c0AivNcEDAaxpTPaH2qzTHOgruDn8qcsLKHNIrL2I9ojQpBXSUbP/aj8 /iXUIYVoDGTiTt3Bz0MWaU+lF1Jrauc+3IZE4DZXBdrzmblBEpjkCrkDVE4AOm4P cIKiwa/xbPxAedhBFEHP2eMoOmcbBhmzgchPqkM3TC1NYUUSWXEKmWS2OlEhbmkW 4EJTcNnq7X9QFVwALTY34medGZsJgXos5Yw7tuP47q8QbBxAySPPo6YahFjRmwum w1p3cmyc8bdU3ER6jpdOE8eXcsiAxoUeT47xnzhVB52IaLoHFNvBXxOIbsKd8C8H gggjFt+J6ogfxx/BkiX1GfnuSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi6G3Ty bqe2DIScsAWhdsjuwOHdMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa RTg4eHI4LXBvcElhU0s0YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAacT5jPsHbDMBXWUqs6qYZ/7Rre1dxahJaXonMQkrXmI1pJp1th6jK R3KJNUIZfvolwPqlzrbUbgdEZvsELVqI7Xdl4fz9PwLOHAHKichXUJvD7ckAZbUZ Hh+1Jt5/syTkQmVNgXQ2sTw60IM2bKtkpx6KDsgQfYuOipT+fa163pP767kIuAyQ SFtiApJ7jrW1TIsB7FHdptWdZzCqyR0RfwHJUutiExsdJHpL0NIAvLYbTBNgHTqf aaoIm9VqaF+52S1is9GcIYclKWbDtMQ24p0aZkRzeVZPg+VX0QHh0zlDvlBDgeEC Y4j1HDEDlwaB6Q3UoRAdAWokpUQEgUY6 -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:03 2025 by rpki-client