$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json) Hash identifier: 1U3kOsYHzHrA4HVSXc9boaY8ShTxn59PdPs4qN72hPk= Subject key identifier: 15:97:65:83:A8:BA:A1:9E:CC:3F:BD:39:79:37:2F:76:0C:8A:4D:A7 Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft Manifest number: 0542 Signing time: Mon 30 Jun 2025 23:50:55 +0000 Manifest this update: Mon 30 Jun 2025 23:50:55 +0000 Manifest next update: Mon 07 Jul 2025 23:50:55 +0000 Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: tLzNy1IBGddDA5zJUSHZAnbrlK2Z3Nm6bH671pX2+N0=) 2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: Xe7orzQUYbTeZbeATWUGaYq/rRlqzWXLpAilQy3hdVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Validity Not Before: Jun 30 23:50:55 2025 GMT Not After : Jul 7 23:50:55 2025 GMT Subject: CN=686322df-81f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:0d:e7:fa:d3:f7:eb:3d:f6:c5:7e:73:af: dd:51:c9:77:65:d0:1c:3d:09:80:d6:09:48:da:27: d2:4c:16:e6:bb:d3:e4:52:8c:e9:ce:fc:77:c3:09: ba:9e:16:13:7e:fe:be:7a:dd:64:79:1f:be:65:dd: 83:8a:c4:3f:2a:7e:75:1f:68:4a:4d:66:05:fd:4f: 35:74:ec:c9:67:f6:2d:40:62:4f:16:1e:e6:71:db: 8b:e7:51:da:98:ba:39:ad:f3:94:80:10:ab:20:c9: 9f:61:9f:7d:42:7e:4d:d7:69:62:ea:19:39:f8:c9: 95:dc:a3:96:d1:83:05:2f:68:ab:e0:d5:45:95:00: 4f:53:21:bf:cb:71:a1:eb:30:5e:ee:d1:f9:a5:00: 39:3e:16:9b:10:86:88:f4:d8:3e:38:e5:a2:17:b4: dd:8f:8c:7a:d3:15:e0:d4:e7:d7:50:69:e9:04:14: 59:41:56:7b:e9:cf:5e:72:ad:b4:ca:ae:ad:77:12: 26:13:2b:68:8b:12:ef:57:05:a9:2e:d2:61:e7:11: 85:4d:c7:31:79:5d:39:2b:b7:b3:a8:fc:a1:85:3f: 37:df:be:cd:96:a1:b8:1c:1d:4a:bc:4d:76:d6:76: 1d:39:7b:c7:f3:ef:0c:d5:19:fc:45:bf:ba:ca:db: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:97:65:83:A8:BA:A1:9E:CC:3F:BD:39:79:37:2F:76:0C:8A:4D:A7 X509v3 Authority Key Identifier: keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ef:d0:60:f3:32:47:5a:8c:83:d7:cd:bb:c7:22:db:38:54: 73:0d:d9:5f:cc:c4:e2:67:61:d1:75:0c:32:3a:ae:45:1f:a3: d2:8f:60:2f:ef:1d:71:3c:61:ea:f4:96:73:a3:f0:ee:32:c4: e4:2c:8a:d2:ae:81:30:26:8c:c5:83:c5:02:2c:d8:ba:bd:16: e1:27:de:a5:4b:74:b7:7b:4e:50:24:fe:bd:e1:ae:a3:bd:44: 23:9d:e9:3e:54:06:02:f0:69:02:9f:0c:79:07:c9:a6:7d:5c: 86:0a:f6:e6:d5:b1:fb:26:a3:3d:bc:fc:31:f6:3f:a3:d3:b1: c4:9a:3b:e7:0c:1e:b8:13:df:4d:a5:21:87:4d:eb:ec:9f:9f: 99:0a:18:c5:66:8c:cf:9b:3a:b9:63:9f:d3:a0:ef:7b:b1:5a: 29:39:04:98:df:72:cb:eb:76:aa:0f:e9:4f:12:97:3b:e4:e5: 54:f2:20:1a:d7:61:63:ef:dd:88:06:a0:1f:bd:7f:e4:d6:fd: 46:49:cf:8c:1c:1e:c3:4f:e7:02:1a:63:63:bc:fa:e4:b5:55: 68:67:3b:5d:6d:66:53:75:26:3d:4d:ee:f8:5f:87:aa:95:4b: df:78:18:04:50:2a:6e:75:54:22:e6:4e:6a:d5:9b:3d:d0:58: 14:ec:6f:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURDRkIxMTAvBgNVBAUTKEE1MTc0MURDMTlDQjkzOTA0MDI2NzZBMDNBMUZEQUVC RTBFN0YyQkMwHhcNMjUwNjMwMjM1MDU1WhcNMjUwNzA3MjM1MDU1WjAYMRYwFAYD VQQDEw02ODYzMjJkZi04MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj4N5/rT9+s99sV+c6/dUcl3ZdAcPQmA1glI2ifSTBbmu9PkUozpzvx3wwm6 nhYTfv6+et1keR++Zd2DisQ/Kn51H2hKTWYF/U81dOzJZ/YtQGJPFh7mcduL51Ha mLo5rfOUgBCrIMmfYZ99Qn5N12li6hk5+MmV3KOW0YMFL2ir4NVFlQBPUyG/y3Gh 6zBe7tH5pQA5PhabEIaI9Ng+OOWiF7Tdj4x60xXg1OfXUGnpBBRZQVZ76c9ecq20 yq6tdxImEytoixLvVwWpLtJh5xGFTccxeV05K7ezqPyhhT83377NlqG4HB1KvE12 1nYdOXvH8+8M1Rn8Rb+6yttgqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWXZYOo uqGezD+9OXk3L3YMik2nMB8GA1UdIwQYMBaAFKUXQdwZy5OQQCZ2oDof2uvg5/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRENGQi9BQUVBMERDMEY5 QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1QkFKbmFnT2hfYTYtRG44 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BSZEIzQm5MazVCQUpuYWdPaF9hNi1Ebjhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RENGQi9BQUVBMERDMEY5QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1 QkFKbmFnT2hfYTYtRG44cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/79Bg8zJHWoyD1827xyLbOFRzDdlfzMTiZ2HRdQwyOq5FH6PSj2Av 7x1xPGHq9JZzo/DuMsTkLIrSroEwJozFg8UCLNi6vRbhJ96lS3S3e05QJP694a6j vUQjnek+VAYC8GkCnwx5B8mmfVyGCvbm1bH7JqM9vPwx9j+j07HEmjvnDB64E99N pSGHTevsn5+ZChjFZozPmzq5Y5/ToO97sVopOQSY33LL63aqD+lPEpc75OVU8iAa 12Fj792IBqAfvX/k1v1GSc+MHB7DT+cCGmNjvPrktVVoZztdbWZTdSY9Te74X4eq lUvfeBgEUCpudVQi5k5q1Zs90FgU7G/9 -----END CERTIFICATE-----Generated at Tue Jul 1 18:02:13 2025 by rpki-client