$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: Om325rw32XImemC+Mx8NX42HBKl+DBstqb5WktwykkM= Subject key identifier: E1:24:7B:60:0F:51:53:9D:AF:63:8F:7C:B6:0F:37:EF:2F:25:73:6A Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 153D Signing time: Tue 12 Aug 2025 16:54:52 +0000 Manifest this update: Tue 12 Aug 2025 16:54:51 +0000 Manifest next update: Tue 19 Aug 2025 16:54:51 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: k9ZlJ07gQabAZ3QukYDykRdXpwgjTe1b9Yo3kN1wR4g=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5464 (0x1558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Aug 12 16:54:51 2025 GMT Not After : Aug 19 16:54:51 2025 GMT Subject: CN=689b71db-3b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:6c:7d:aa:36:ea:34:17:b6:b5:d6:59:7d: 6e:88:9e:54:4d:fc:43:ab:a0:36:8a:30:0d:af:0f: 1a:26:d0:97:6b:07:a5:5b:be:c0:4c:04:14:d9:8f: 07:80:f5:e1:30:9d:b6:c2:5a:29:25:da:a8:f7:bc: 23:76:1a:82:ed:66:06:ab:5a:a5:e6:87:f2:24:ce: f6:b0:eb:20:e3:98:d4:d2:c7:45:72:a6:2f:2e:14: 5c:e0:94:51:fa:f4:cf:82:f5:fe:80:f1:da:05:20: 41:e5:03:76:47:bb:bf:a2:50:09:be:20:cb:d2:bc: 7f:7a:41:14:e7:63:4c:91:82:05:ec:bc:74:54:be: 31:39:da:5e:cb:c0:41:3e:82:45:57:10:05:ca:4d: a4:85:7e:8c:2b:c1:24:f4:21:63:91:89:74:2b:68: c3:20:bf:97:80:ac:ce:d9:e8:65:d8:e0:28:05:ea: f7:ca:12:16:c7:80:9d:75:01:cf:d5:a3:a8:ad:23: b9:5c:cf:49:26:77:bb:4b:45:c0:19:7f:90:c0:54: c0:d6:da:74:c9:46:f2:13:5a:00:e5:68:b2:b8:33: 57:58:9a:b3:a1:5b:62:2b:59:eb:b9:60:fb:2a:50: fb:9e:ee:ba:2e:2f:26:86:2d:eb:0b:57:fe:be:98: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:7B:60:0F:51:53:9D:AF:63:8F:7C:B6:0F:37:EF:2F:25:73:6A X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c8:ad:13:98:25:c0:ec:60:31:f8:f8:b0:06:86:fc:83:24: f7:f9:1f:85:1a:57:e7:23:14:2b:66:46:9f:be:16:05:66:0d: 2f:25:df:57:5a:1a:b2:7c:bd:a0:17:d7:a8:4a:9c:6c:11:06: 30:c9:c8:9d:1f:0a:f6:c6:9f:ba:68:35:59:cf:fe:92:4e:ae: ee:60:b0:89:54:a1:71:af:90:39:58:4a:ff:74:bf:68:99:9c: 34:57:94:3f:af:a7:7a:e9:ea:0c:69:0c:36:44:cc:e8:cd:a3: 06:d9:d8:26:bb:32:4a:30:c6:97:76:97:4d:e5:c9:f4:3c:88: e2:6f:cf:19:f9:89:87:90:ea:bc:30:06:0c:ee:31:1e:08:7f: 66:9d:99:26:21:37:d0:56:67:9b:26:a1:ef:00:b8:f2:a7:0f: 7d:a2:0a:d0:ac:e2:21:04:a4:fe:cf:44:83:cd:b7:db:67:6a: f8:95:e1:c6:8b:f9:f6:aa:8d:dd:71:7c:84:9e:18:33:ef:24: 16:4a:dc:32:e6:1f:7b:20:38:23:f6:ce:33:31:ea:c4:92:3f: 8b:7a:fa:59:e0:e4:ff:be:b1:8c:ae:e3:d8:70:d5:77:59:89: 43:2b:d9:29:7c:61:a8:34:0d:d5:5e:21:df:cd:39:70:21:4d: 20:fc:ea:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwODEyMTY1NDUxWhcNMjUwODE5MTY1NDUxWjAYMRYwFAYD VQQDEw02ODliNzFkYi0zYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubhsfao26jQXtrXWWX1uiJ5UTfxDq6A2ijANrw8aJtCXawelW77ATAQU2Y8H gPXhMJ22wlopJdqo97wjdhqC7WYGq1ql5ofyJM72sOsg45jU0sdFcqYvLhRc4JRR +vTPgvX+gPHaBSBB5QN2R7u/olAJviDL0rx/ekEU52NMkYIF7Lx0VL4xOdpey8BB PoJFVxAFyk2khX6MK8Ek9CFjkYl0K2jDIL+XgKzO2ehl2OAoBer3yhIWx4CddQHP 1aOorSO5XM9JJne7S0XAGX+QwFTA1tp0yUbyE1oA5WiyuDNXWJqzoVtiK1nruWD7 KlD7nu66Li8mhi3rC1f+vpgS4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEke2AP UVOdr2OPfLYPN+8vJXNqMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqyK0TmCXA7GAx+PiwBob8gyT3+R+FGlfnIxQrZkafvhYFZg0vJd9X WhqyfL2gF9eoSpxsEQYwycidHwr2xp+6aDVZz/6STq7uYLCJVKFxr5A5WEr/dL9o mZw0V5Q/r6d66eoMaQw2RMzozaMG2dgmuzJKMMaXdpdN5cn0PIjib88Z+YmHkOq8 MAYM7jEeCH9mnZkmITfQVmebJqHvALjypw99ogrQrOIhBKT+z0SDzbfbZ2r4leHG i/n2qo3dcXyEnhgz7yQWStwy5h97IDgj9s4zMerEkj+LevpZ4OT/vrGMruPYcNV3 WYlDK9kpfGGoNA3VXiHfzTlwIU0g/OqE -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:25 2025 by rpki-client