$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: QYRT1oxVr78nf6/Zbm4kvp9hTYN43Qm65zPPQ4ndodM= Subject key identifier: B2:D8:D9:0F:6E:5D:A2:2B:AC:6F:CE:50:92:CD:8B:14:36:26:70:47 Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3BD6 Signing time: Mon 30 Jun 2025 14:40:07 +0000 Manifest this update: Mon 30 Jun 2025 14:40:07 +0000 Manifest next update: Mon 07 Jul 2025 14:40:07 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: QvG1HAQ8oCtRXS0f8qypMnKe0C9M4PsPOUBDLj/EcgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: Jun 30 14:40:07 2025 GMT Not After : Jul 7 14:40:07 2025 GMT Subject: CN=6862a1c7-2bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:4e:ce:43:a7:de:e6:c8:87:09:cc:a0:67: 4e:1e:b5:67:90:7e:81:35:d5:3b:90:0f:e6:68:5c: 1e:0c:09:c5:8f:58:c1:e9:50:b5:1d:cb:49:96:50: 1f:cc:1a:dc:10:57:a7:c3:72:78:b8:a5:6b:b0:71: 1e:62:15:10:31:18:36:97:89:40:e1:9f:f0:a0:57: 18:6a:77:78:94:52:7a:67:5d:4c:2f:a0:33:2d:12: b7:9a:b1:f2:fd:4f:1d:d3:49:5c:25:c9:9b:14:6a: 89:af:e8:a3:63:3b:87:9f:38:81:62:b2:71:96:20: 4e:b7:fc:15:ab:22:b2:9c:4e:d1:cd:54:db:47:27: 43:e6:17:a1:cd:72:e5:1f:95:09:e3:d2:3f:d0:e6: 42:80:27:95:07:84:c8:37:db:4f:b5:96:10:aa:3d: 7d:b7:6c:3c:e7:87:6a:f1:d4:4e:e6:70:13:e7:5c: f5:d3:ff:49:3c:b5:df:40:f8:24:62:52:c4:fa:fd: df:d3:f7:97:35:1d:83:e0:05:f5:c3:fe:a1:7a:4a: 29:24:78:bb:56:2d:99:51:90:6f:6f:0c:1f:eb:e4: 84:a5:ba:73:ee:9c:a5:2e:c3:d7:2b:79:02:3c:56: 7c:ba:6c:d3:18:b1:b3:20:40:f2:f7:20:ca:dd:c7: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:D9:0F:6E:5D:A2:2B:AC:6F:CE:50:92:CD:8B:14:36:26:70:47 X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:c4:76:9d:d4:bc:5a:d7:00:26:1b:00:59:81:ed:03:28: 4a:79:46:93:25:e4:57:6d:0a:08:7b:2b:3f:98:a4:54:86:0f: f8:b7:95:d2:75:f1:21:74:91:33:25:ec:28:4b:53:65:41:6b: c9:40:3f:8f:29:8e:21:06:84:f7:5d:b8:be:e9:6b:2b:dc:1b: ef:fe:be:db:be:ac:3a:c9:bb:3b:0f:ad:df:d9:8a:61:fc:5c: 89:b5:c9:47:2e:aa:20:19:51:ec:e0:b2:92:c0:4b:1a:ed:de: 0c:05:19:da:f7:d6:46:87:3a:b6:02:24:10:8f:1c:1e:15:73: 1d:78:2d:39:06:40:2f:fe:cd:52:c7:66:43:52:78:3a:d7:1e: 14:c5:99:85:dc:d1:76:1f:4f:6f:50:e3:ae:b9:dc:e1:79:9d: 88:fb:1a:31:a0:cc:ca:6f:c5:8f:2a:34:1f:e0:d8:13:22:e3: ec:f2:53:b2:08:b4:74:22:61:a3:28:5d:27:65:46:67:57:84: 7e:36:0f:f7:29:b8:46:37:f9:7d:80:fa:fe:88:04:97:6c:cb: ad:27:d3:89:60:1d:0d:e7:df:33:be:97:a5:66:67:a8:37:90: e9:39:5b:cd:cc:84:f5:27:3f:56:87:79:a2:b5:14:00:3b:87: 43:77:45:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjUwNjMwMTQ0MDA3WhcNMjUwNzA3MTQ0MDA3WjAYMRYwFAYD VQQDEw02ODYyYTFjNy0yYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIhOzkOn3ubIhwnMoGdOHrVnkH6BNdU7kA/maFweDAnFj1jB6VC1HctJllAf zBrcEFenw3J4uKVrsHEeYhUQMRg2l4lA4Z/woFcYand4lFJ6Z11ML6AzLRK3mrHy /U8d00lcJcmbFGqJr+ijYzuHnziBYrJxliBOt/wVqyKynE7RzVTbRydD5hehzXLl H5UJ49I/0OZCgCeVB4TIN9tPtZYQqj19t2w854dq8dRO5nAT51z10/9JPLXfQPgk YlLE+v3f0/eXNR2D4AX1w/6hekopJHi7Vi2ZUZBvbwwf6+SEpbpz7pylLsPXK3kC PFZ8umzTGLGzIEDy9yDK3ccQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLY2Q9u XaIrrG/OUJLNixQ2JnBHMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0K8R2ndS8WtcAJhsAWYHtAyhKeUaTJeRXbQoIeys/mKRUhg/4t5XS dfEhdJEzJewoS1NlQWvJQD+PKY4hBoT3Xbi+6Wsr3Bvv/r7bvqw6ybs7D63f2Yph /FyJtclHLqogGVHs4LKSwEsa7d4MBRna99ZGhzq2AiQQjxweFXMdeC05BkAv/s1S x2ZDUng61x4UxZmF3NF2H09vUOOuudzheZ2I+xoxoMzKb8WPKjQf4NgTIuPs8lOy CLR0ImGjKF0nZUZnV4R+Ng/3KbhGN/l9gPr+iASXbMutJ9OJYB0N598zvpelZmeo N5DpOVvNzIT1Jz9Wh3mitRQAO4dDd0VM -----END CERTIFICATE-----Generated at Tue Jul 1 20:59:40 2025 by rpki-client