$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: bagkqFq5cvJ55KCp0v4o6E7hWDWJ1cU7DcsZlgkdDqs= Subject key identifier: F0:4C:BB:05:C6:7E:AC:12:4A:80:3B:CA:65:A9:FC:06:27:92:A5:E0 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34A0 Signing time: Wed 02 Jul 2025 14:43:13 +0000 Manifest this update: Wed 02 Jul 2025 14:43:13 +0000 Manifest next update: Wed 09 Jul 2025 14:43:13 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: wfxo+sPEcrH6f0sQYDbPuwnU/ZgG+kkFDaXu06LAOi0=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Jul 2 14:43:13 2025 GMT Not After : Jul 9 14:43:13 2025 GMT Subject: CN=68654581-f830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:ca:3b:79:43:0b:72:7e:c4:01:ed:c8:9e: a3:f5:d9:b8:51:ec:1c:b9:5d:2e:af:85:cf:ba:5e: f1:84:ba:45:5e:92:90:5b:ab:83:ed:70:4d:85:f0: da:9d:fa:56:ac:2c:28:b1:cf:bc:8c:b0:e4:36:af: 84:9b:80:05:22:fc:bd:44:e3:1b:f7:c8:db:4c:6f: 88:f9:cf:21:aa:a5:60:82:68:81:30:bc:88:a6:98: d9:9f:ff:dc:b7:8e:6b:d0:6b:62:ef:2c:d2:81:e8: bd:59:49:6f:c7:e9:e0:cc:84:6f:22:48:0b:cd:c9: eb:ce:7b:00:b3:87:2d:b3:86:40:fc:0b:b0:71:dd: a5:d9:d2:b0:bb:2f:ec:51:0d:47:8d:f7:6f:62:1c: 03:06:a3:91:17:d4:74:54:4d:03:fa:d9:9a:9c:d2: fc:1a:73:eb:a3:e1:3f:ef:a3:3e:62:97:ee:0a:db: c3:57:0c:23:95:bb:a0:1e:83:bc:39:79:6a:09:0e: 22:c6:5d:d2:4d:47:5d:ab:02:02:f8:8d:6b:a3:21: da:26:e8:10:f9:84:31:35:fa:1d:a7:f1:57:04:6e: 32:53:2a:b7:2f:b3:bd:e2:49:c1:cc:72:52:47:98: 46:b2:55:49:d0:f7:6d:0c:b2:ac:54:67:50:40:c7: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4C:BB:05:C6:7E:AC:12:4A:80:3B:CA:65:A9:FC:06:27:92:A5:E0 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:86:af:34:8c:1a:ce:9d:8e:b2:77:6e:40:4d:f3:7d:ae:c5: 2a:09:cb:18:f6:c4:32:55:50:49:53:bd:0a:2b:10:02:ab:9d: 91:94:31:4d:5f:50:92:38:9d:19:ce:bf:3e:0d:f1:85:80:4d: f6:eb:9b:0f:86:16:25:56:87:51:16:06:48:15:f8:c1:c8:71: 55:9e:f2:29:79:1b:b6:8d:73:3f:10:60:7e:6a:55:07:ae:92: 59:29:8b:bc:ab:4c:ca:e0:79:85:59:eb:25:21:9d:15:96:41: c6:6f:a8:3c:32:d0:73:af:97:25:ef:43:05:ec:68:fe:74:15: 5f:1d:f7:1e:27:e7:0c:00:4d:09:4e:6c:6e:90:d7:20:86:2a: f5:51:fb:c4:ff:bd:dd:36:85:dd:ad:7a:12:ce:f4:1a:27:9d: 95:25:ac:fe:2a:9c:15:4a:ce:51:ef:0f:a5:ee:ca:e8:0b:91: d1:b8:9e:2a:a4:e2:a5:63:93:e0:a0:36:1a:0e:7b:d1:aa:56: 90:d0:61:5d:19:01:5c:f1:47:cc:fe:ac:e4:dd:77:7b:dc:76: cb:46:a7:90:6d:22:17:e2:bd:39:78:16:43:ad:89:cf:08:4c: 29:d0:cc:6d:f7:bc:39:bf:f2:4e:7b:05:b6:7f:03:72:71:7e: 6b:a7:cc:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUwNzAyMTQ0MzEzWhcNMjUwNzA5MTQ0MzEzWjAYMRYwFAYD VQQDEw02ODY1NDU4MS1mODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fPKO3lDC3J+xAHtyJ6j9dm4UewcuV0ur4XPul7xhLpFXpKQW6uD7XBNhfDa nfpWrCwosc+8jLDkNq+Em4AFIvy9ROMb98jbTG+I+c8hqqVggmiBMLyIppjZn//c t45r0Gti7yzSgei9WUlvx+ngzIRvIkgLzcnrznsAs4cts4ZA/Auwcd2l2dKwuy/s UQ1HjfdvYhwDBqORF9R0VE0D+tmanNL8GnPro+E/76M+YpfuCtvDVwwjlbugHoO8 OXlqCQ4ixl3STUddqwIC+I1royHaJugQ+YQxNfodp/FXBG4yUyq3L7O94knBzHJS R5hGslVJ0PdtDLKsVGdQQMd8nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBMuwXG fqwSSoA7ymWp/AYnkqXgMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbhq80jBrOnY6yd25ATfN9rsUqCcsY9sQyVVBJU70KKxACq52RlDFN X1CSOJ0Zzr8+DfGFgE3265sPhhYlVodRFgZIFfjByHFVnvIpeRu2jXM/EGB+alUH rpJZKYu8q0zK4HmFWeslIZ0VlkHGb6g8MtBzr5cl70MF7Gj+dBVfHfceJ+cMAE0J TmxukNcghir1UfvE/73dNoXdrXoSzvQaJ52VJaz+KpwVSs5R7w+l7sroC5HRuJ4q pOKlY5PgoDYaDnvRqlaQ0GFdGQFc8UfM/qzk3Xd73HbLRqeQbSIX4r05eBZDrYnP CEwp0Mxt97w5v/JOewW2fwNycX5rp8w1 -----END CERTIFICATE-----Generated at Thu Jul 3 00:49:00 2025 by rpki-client