$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json) Hash identifier: 01J5Zx6mEMHCJNc1PiDI2219JbPsvbiLHq7Z48jaGAM= Subject key identifier: BC:B0:38:C7:21:E1:A7:87:F4:15:12:34:55:8F:70:05:01:88:4C:75 Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft Manifest number: 0131 Signing time: Sat 09 Aug 2025 04:55:59 +0000 Manifest this update: Sat 09 Aug 2025 04:55:59 +0000 Manifest next update: Sat 16 Aug 2025 04:55:59 +0000 Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: vHfttxZ5DXW/XObuynYIYj+8dKnutHFm2w+4eifqP2c=) 2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: Czi7PWRQ87B1nKXSiQO2Heb4QoSzR8e/1K23JvG3RhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Validity Not Before: Aug 9 04:55:59 2025 GMT Not After : Aug 16 04:55:59 2025 GMT Subject: CN=6896d4df-29e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:8e:af:3b:51:a9:03:68:c9:b8:bb:5f:34: 57:b8:23:7f:1e:a4:d7:a1:b8:23:db:f5:4a:15:d5: 74:13:42:8a:0e:cd:10:4b:a0:58:fc:51:41:44:c1: 89:68:c1:59:a5:10:8f:ca:4d:2a:aa:3a:42:5f:6d: 64:e0:67:9a:4b:52:cb:34:4b:2e:36:e0:f6:30:4c: 7d:4b:35:08:08:94:d5:1d:a2:35:1d:72:07:f3:9f: 72:da:f0:09:65:ef:dd:f3:0c:cc:ee:42:f7:66:2d: 2b:08:32:a0:c0:f4:fa:1e:5b:00:ad:8b:b8:dd:20: 99:1e:a3:37:bb:cc:51:27:73:84:e3:1f:ed:5c:a2: b9:1d:8e:05:28:33:55:11:39:57:28:02:7b:cb:ed: 7c:ca:0e:a9:57:81:08:b1:4f:7d:3c:bc:fb:e8:de: 5c:1d:36:7c:d1:84:88:01:54:42:28:0e:77:10:1c: dd:20:5b:87:bc:cf:db:b5:d9:e6:ae:ea:43:96:29: a8:2f:df:f0:10:9d:44:e8:e7:a6:72:8f:2b:61:54: 69:b5:a4:84:3c:33:27:43:9d:6e:17:14:34:c5:5e: a0:6a:b7:6b:79:6a:af:f4:b6:45:17:cc:53:1e:c3: d5:c0:11:b4:20:5d:e4:46:3a:82:f8:e0:0e:99:48: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:38:C7:21:E1:A7:87:F4:15:12:34:55:8F:70:05:01:88:4C:75 X509v3 Authority Key Identifier: keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:d1:d5:d9:f6:b9:67:e1:53:ab:a9:f7:ab:00:b9:92:f5: 87:b2:ed:05:fb:b0:a1:cd:60:a5:93:88:7f:c6:f9:04:d6:dc: c2:e7:0e:6e:ca:14:ee:80:64:e3:99:e2:08:64:43:62:bf:09: 67:b5:12:90:d3:ab:12:12:2c:0a:5f:08:96:a6:82:c1:2b:30: 9f:f3:99:c5:87:77:d5:06:23:0f:fa:a9:66:85:5d:f4:9e:4f: 60:29:82:2d:33:36:95:cb:f2:03:12:54:77:e4:a8:51:92:30: fb:70:3a:d4:cb:69:fa:a1:6c:1c:fd:87:d5:66:5f:3f:28:1c: 7b:a5:96:11:81:6a:ec:34:b5:24:ff:bd:fa:ac:16:1d:49:5b: 84:e0:5d:eb:b3:3c:ac:24:9b:bb:7f:cb:94:35:1f:f7:50:88: 42:2d:33:21:f3:94:34:5a:24:95:22:77:5d:86:8e:d4:cf:9a: 48:16:94:1c:6e:4d:bf:fc:87:84:e3:7f:f3:b7:8e:6e:eb:b9: 31:03:2c:b2:5e:cb:47:32:54:7b:10:87:d2:f8:0b:a1:e3:06: 06:57:76:71:b1:9e:e8:6e:7e:04:6f:d9:5f:60:e1:c8:33:e9: 82:a5:ec:80:09:9d:5c:4a:64:08:63:e4:8a:af:76:cc:de:f3: b4:60:e1:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0 RTY1RkRGMjIwHhcNMjUwODA5MDQ1NTU5WhcNMjUwODE2MDQ1NTU5WjAYMRYwFAYD VQQDEw02ODk2ZDRkZi0yOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw66OrztRqQNoybi7XzRXuCN/HqTXobgj2/VKFdV0E0KKDs0QS6BY/FFBRMGJ aMFZpRCPyk0qqjpCX21k4GeaS1LLNEsuNuD2MEx9SzUICJTVHaI1HXIH859y2vAJ Ze/d8wzM7kL3Zi0rCDKgwPT6HlsArYu43SCZHqM3u8xRJ3OE4x/tXKK5HY4FKDNV ETlXKAJ7y+18yg6pV4EIsU99PLz76N5cHTZ80YSIAVRCKA53EBzdIFuHvM/btdnm rupDlimoL9/wEJ1E6Oemco8rYVRptaSEPDMnQ51uFxQ0xV6gardreWqv9LZFF8xT HsPVwBG0IF3kRjqC+OAOmUj5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLywOMch 4aeH9BUSNFWPcAUBiEx1MB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr d3BsRlBNdEkxM3RPWmYzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAltdHV2fa5Z+FTq6n3qwC5kvWHsu0F+7ChzWClk4h/xvkE1tzC5w5u yhTugGTjmeIIZENivwlntRKQ06sSEiwKXwiWpoLBKzCf85nFh3fVBiMP+qlmhV30 nk9gKYItMzaVy/IDElR35KhRkjD7cDrUy2n6oWwc/YfVZl8/KBx7pZYRgWrsNLUk /736rBYdSVuE4F3rszysJJu7f8uUNR/3UIhCLTMh85Q0WiSVInddho7Uz5pIFpQc bk2//IeE43/zt45u67kxAyyyXstHMlR7EIfS+Auh4wYGV3ZxsZ7obn4Eb9lfYOHI M+mCpeyACZ1cSmQIY+SKr3bM3vO0YOE/ -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:22 2025 by rpki-client