$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: 4qeRN8IEeeiPn40s/EMa7akTdpYNgQM4VqtLtdSbonM= Subject key identifier: 77:A5:0E:56:D3:67:E3:8E:18:23:BC:57:A6:58:DB:E7:AE:71:C6:4A Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 07C2 Signing time: Wed 02 Jul 2025 21:25:08 +0000 Manifest this update: Wed 02 Jul 2025 21:25:07 +0000 Manifest next update: Wed 09 Jul 2025 21:25:07 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: ipJu8AjemwPmFQ9C/oY0MfUey2fKagZ5wfonBCH+hbQ=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: Jul 2 21:25:07 2025 GMT Not After : Jul 9 21:25:07 2025 GMT Subject: CN=6865a3b3-516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:af:c7:a0:e5:bc:52:4f:17:27:75:98:f8: 68:59:dd:92:85:da:3e:a1:4d:3d:ef:2a:7e:db:f8: 09:9b:ad:07:bd:fc:7e:ef:b3:9d:25:d2:10:05:fa: 08:03:e6:90:d6:b2:36:4e:81:66:4e:53:1f:84:2d: 9a:fa:37:11:b2:3e:31:60:de:4b:f3:d4:0d:12:93: 83:f6:e3:b1:35:5d:ca:d1:ef:de:db:b2:b3:c7:4d: 93:ea:df:0d:5e:fb:d1:0f:ef:99:32:75:4f:d0:6a: 07:a7:67:5e:08:11:30:57:b2:ed:a6:0c:45:9e:2e: a9:16:93:10:63:d0:f3:45:6d:de:8e:60:4d:52:b2: bc:14:04:00:d7:7e:31:84:09:17:8c:a3:8a:01:39: 00:8e:7b:8f:f2:fd:37:af:2e:de:ec:61:8c:b2:38: b0:a2:04:76:b3:af:bd:be:16:f6:cd:3e:4f:3c:19: 4f:01:18:ee:86:6f:32:75:dc:88:7f:08:3e:b7:c8: 2a:2a:e4:73:b4:e4:21:45:aa:15:d6:9b:fa:7e:88: fa:62:a4:31:b4:ac:f0:82:0c:c9:a9:01:48:bc:ed: 25:88:3f:9d:79:52:35:04:06:42:4e:6f:ad:65:2f: 63:32:3e:3e:49:94:d8:d0:2f:6b:28:8a:fd:99:ad: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:0E:56:D3:67:E3:8E:18:23:BC:57:A6:58:DB:E7:AE:71:C6:4A X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ce:c8:cd:6f:1a:a7:de:00:55:61:ef:64:47:51:18:6d:13: 13:05:c8:3f:d2:73:e2:a6:25:9c:26:29:eb:18:dd:21:88:c5: ce:3d:ff:96:43:a2:2c:dc:1f:a0:b7:9d:98:db:78:ad:be:90: 9e:06:80:5b:69:ec:ad:3f:2e:24:b0:42:43:4b:ce:30:f5:14: 81:e2:dd:ce:3f:f2:68:44:98:b7:f9:2f:f9:c0:6c:12:f7:7f: ed:ef:9d:e5:13:c9:44:4d:7a:e1:ae:ff:e5:96:9d:5a:25:5b: 8a:23:d1:c9:57:19:6a:77:d8:e8:9e:54:be:1d:cd:56:7b:03: a4:5e:03:49:0a:34:e1:51:cb:7e:c2:5b:65:6d:ce:da:6b:21: bb:53:d8:6f:99:6f:bd:4f:57:1a:f1:fe:03:e1:3c:37:04:3d: 00:e3:d5:a8:e0:08:1c:73:79:e6:01:55:b0:7d:1d:36:51:a0: 6a:9d:06:18:ba:d7:75:0e:d1:d6:66:8c:c5:68:26:65:21:3d: d7:0c:ce:dd:74:bd:8b:76:b0:d9:6c:9c:cc:21:3b:04:14:97: b9:e1:1b:46:2f:44:32:b6:15:39:58:bd:24:fb:e7:d5:63:55: fe:bc:f7:76:5d:4d:52:0d:29:5c:cc:b6:cb:cb:b6:57:00:25: 83:91:69:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjUwNzAyMjEyNTA3WhcNMjUwNzA5MjEyNTA3WjAYMRYwFAYD VQQDEw02ODY1YTNiMy01MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2I+vx6DlvFJPFyd1mPhoWd2Shdo+oU097yp+2/gJm60Hvfx+77OdJdIQBfoI A+aQ1rI2ToFmTlMfhC2a+jcRsj4xYN5L89QNEpOD9uOxNV3K0e/e27Kzx02T6t8N XvvRD++ZMnVP0GoHp2deCBEwV7LtpgxFni6pFpMQY9DzRW3ejmBNUrK8FAQA134x hAkXjKOKATkAjnuP8v03ry7e7GGMsjiwogR2s6+9vhb2zT5PPBlPARjuhm8yddyI fwg+t8gqKuRztOQhRaoV1pv6foj6YqQxtKzwggzJqQFIvO0liD+deVI1BAZCTm+t ZS9jMj4+SZTY0C9rKIr9ma1TiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHelDlbT Z+OOGCO8V6ZY2+euccZKMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0zsjNbxqn3gBVYe9kR1EYbRMTBcg/0nPipiWcJinrGN0hiMXOPf+W Q6Is3B+gt52Y23itvpCeBoBbaeytPy4ksEJDS84w9RSB4t3OP/JoRJi3+S/5wGwS 93/t753lE8lETXrhrv/llp1aJVuKI9HJVxlqd9jonlS+Hc1WewOkXgNJCjThUct+ wltlbc7aayG7U9hvmW+9T1ca8f4D4Tw3BD0A49Wo4Agcc3nmAVWwfR02UaBqnQYY utd1DtHWZozFaCZlIT3XDM7ddL2LdrDZbJzMITsEFJe54RtGL0QythU5WL0k++fV Y1X+vPd2XU1SDSlczLbLy7ZXACWDkWn/ -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:42 2025 by rpki-client