$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: 4eFgLhyWgvz4I/KphhZoaEz8O526UUmWadbyOk/CY5M= Subject key identifier: 7B:AA:09:A0:A0:FE:7C:32:9E:6A:95:1F:0A:B1:6D:E0:7E:EC:5E:EF Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 153B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1520 Signing time: Mon 16 Jun 2025 16:52:16 +0000 Manifest this update: Mon 16 Jun 2025 16:52:15 +0000 Manifest next update: Mon 23 Jun 2025 16:52:15 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: bN0OXDZWPslKcT/a8AN3O3I3AyZrgIVbcs3jokL7RY8=) 2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5435 (0x153b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Jun 16 16:52:15 2025 GMT Not After : Jun 23 16:52:15 2025 GMT Subject: CN=68504bc0-5bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cd:53:6a:72:b8:5e:0e:62:34:13:09:ff:0f: de:ef:7f:6e:fe:b9:b4:62:e7:d1:b4:82:28:90:7f: 22:4c:d1:dc:c8:e4:d2:e7:de:03:92:9c:37:b5:1f: 50:03:0e:7f:52:9e:36:bf:7b:ef:09:71:cc:0f:08: 90:ea:12:ae:d0:d9:9a:5c:c7:78:31:5a:16:49:6c: c4:9c:be:16:2e:79:e9:09:9d:59:4c:b0:98:1c:47: 47:f2:5e:0d:88:03:66:8a:f1:48:5e:1e:19:0c:ec: e1:09:56:ce:a0:36:0e:1b:29:e0:fe:2b:b4:3b:cf: 46:43:d9:ad:1e:35:6e:e6:1f:91:ba:f7:ca:33:ff: f8:39:81:e1:2a:b9:61:36:88:bc:78:eb:be:4d:e5: 0f:10:85:ad:34:8d:c0:48:86:46:45:2f:37:26:5a: f0:00:a3:18:68:f4:8b:8f:a0:11:ed:7d:68:48:08: 42:9b:0f:38:fb:22:47:53:e7:13:c6:59:b9:6b:38: d8:b3:91:85:49:b0:4c:2a:12:84:9d:67:f5:2e:1b: 0a:54:3a:af:ea:fd:a5:c8:1d:3a:05:25:78:d3:d3: c0:ba:f5:50:22:62:e8:e6:69:df:dc:79:fa:05:20: 92:32:16:0f:7a:f1:86:7f:34:d2:ba:6d:3f:40:4d: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:09:A0:A0:FE:7C:32:9E:6A:95:1F:0A:B1:6D:E0:7E:EC:5E:EF X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:13:ed:90:eb:3d:04:28:31:b8:55:40:09:b8:80:86:3d:95: f8:25:25:0c:2d:18:69:4b:99:1c:3e:cb:3c:fd:c3:0c:80:4b: c6:76:f5:d8:3b:4d:08:9a:55:e7:02:ad:8c:9c:10:82:94:81: 22:fc:ad:55:68:6b:c7:98:f2:75:5f:bb:7c:24:ca:35:60:e2: e0:5b:fb:1f:20:38:72:55:93:69:1a:64:dd:51:18:a6:fe:88: 12:d1:12:fa:36:2b:34:98:ee:b8:8e:a1:2c:88:8f:f8:53:30: a7:97:23:cc:2d:6d:ab:52:45:9f:66:95:37:39:6e:69:e2:29: 16:6e:d9:39:32:e0:ab:5f:91:57:5f:fd:37:d1:03:3a:59:d8: 6d:e6:8c:3d:f4:b7:96:92:e8:05:fb:dd:1d:67:47:59:3a:aa: ca:a1:61:86:d4:f7:0f:67:54:85:05:92:cc:7f:be:d6:27:50: f6:d4:74:8f:83:7d:d8:bd:d4:fa:50:32:84:85:55:85:a1:15: f0:4b:6d:33:ad:44:92:71:cf:76:c7:ae:d0:e4:44:34:c0:85: d4:cd:32:e9:4f:9a:5f:0b:70:f7:a4:4b:bb:c1:9f:48:fc:98: 9c:c6:95:f2:8d:ea:eb:b5:a4:83:9f:d4:4d:b1:09:5f:36:07: e5:c4:31:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNjE2MTY1MjE1WhcNMjUwNjIzMTY1MjE1WjAYMRYwFAYD VQQDEw02ODUwNGJjMC01YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA581TanK4Xg5iNBMJ/w/e739u/rm0YufRtIIokH8iTNHcyOTS594Dkpw3tR9Q Aw5/Up42v3vvCXHMDwiQ6hKu0NmaXMd4MVoWSWzEnL4WLnnpCZ1ZTLCYHEdH8l4N iANmivFIXh4ZDOzhCVbOoDYOGyng/iu0O89GQ9mtHjVu5h+RuvfKM//4OYHhKrlh Noi8eOu+TeUPEIWtNI3ASIZGRS83JlrwAKMYaPSLj6AR7X1oSAhCmw84+yJHU+cT xlm5azjYs5GFSbBMKhKEnWf1LhsKVDqv6v2lyB06BSV409PAuvVQImLo5mnf3Hn6 BSCSMhYPevGGfzTSum0/QE1cZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuqCaCg /nwynmqVHwqxbeB+7F7vMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJE+2Q6z0EKDG4VUAJuICGPZX4JSUMLRhpS5kcPss8/cMMgEvGdvXY O00ImlXnAq2MnBCClIEi/K1VaGvHmPJ1X7t8JMo1YOLgW/sfIDhyVZNpGmTdURim /ogS0RL6Nis0mO64jqEsiI/4UzCnlyPMLW2rUkWfZpU3OW5p4ikWbtk5MuCrX5FX X/030QM6Wdht5ow99LeWkugF+90dZ0dZOqrKoWGG1PcPZ1SFBZLMf77WJ1D21HSP g33YvdT6UDKEhVWFoRXwS20zrUSScc92x67Q5EQ0wIXUzTLpT5pfC3D3pEu7wZ9I /JicxpXyjerrtaSDn9RNsQlfNgflxDFu -----END CERTIFICATE-----Generated at Wed Jun 18 06:33:26 2025 by rpki-client