$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: iOpBnBUte8cLL9FvIUc74yRICg8oNVOPndHstqVSbV4= Subject key identifier: 2D:C1:49:AB:29:EF:47:EE:C5:86:C9:DC:B6:C7:5A:81:12:27:28:6F Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 21 Signing time: Tue 01 Jul 2025 08:40:26 +0000 Manifest this update: Tue 01 Jul 2025 08:40:26 +0000 Manifest next update: Tue 08 Jul 2025 08:40:26 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: GbCbfWdv8CX0jd/wphjBM03kbjkhYrfgkA4j9CL3lfU=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: YdheOlkOrvYc+0WcsN5XG/W9vQjumV6X4tfqEURTyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Jul 1 08:40:26 2025 GMT Not After : Jul 8 08:40:26 2025 GMT Subject: CN=68639efa-942f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:ce:1f:1e:ee:bd:fc:d1:35:d7:d4:c2:93: ed:40:f1:6c:50:2f:07:4c:04:f6:09:f0:9d:13:e4: ff:3d:96:41:fd:ce:bf:21:ce:cc:eb:d7:db:a7:3b: 39:21:58:9f:80:55:db:88:37:ab:d9:6b:6a:87:88: 9e:21:6e:bc:ae:57:77:52:d0:fc:46:73:1c:62:bc: f6:37:5e:ae:86:48:1a:d9:3c:2e:ce:51:38:26:38: 2a:26:a8:97:4e:2d:72:83:cd:0c:e3:4c:2b:37:24: ed:80:c2:62:a4:f0:ac:7a:d0:32:10:1a:f3:1b:56: 7e:15:b0:f9:76:77:65:9a:75:d3:91:48:50:c6:8b: 04:67:4d:77:52:d8:c6:24:6d:c2:1a:80:1a:13:9a: 69:66:53:5e:b7:6a:ae:f2:19:4b:2d:8a:1b:4f:1b: 5a:ba:68:4c:98:b6:38:23:1d:46:9f:63:63:e1:fa: c5:89:ad:86:88:00:c8:0b:a5:af:cf:3e:2e:5c:a8: d5:be:2a:f4:85:8f:74:11:6b:99:cb:7d:04:12:11: cc:5d:0d:2b:e0:8d:7a:d9:a9:3c:a6:e3:02:8c:21: 00:06:6b:a4:e0:0a:70:4a:80:59:ea:35:27:59:0a: 9f:75:93:e1:fb:75:85:f7:ad:06:06:60:2f:f6:95: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:49:AB:29:EF:47:EE:C5:86:C9:DC:B6:C7:5A:81:12:27:28:6F X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bd:88:e7:c9:06:5c:f0:2c:73:4f:12:c8:ef:c4:5f:34:f0: ab:e2:28:bc:5e:e5:fc:f1:e3:f6:7e:53:77:54:61:de:bc:75: 78:9b:9f:c3:f9:d3:db:90:3a:ad:fa:96:26:50:e2:a4:28:a6: 92:c1:7b:bc:cc:ba:84:19:41:19:32:2c:fa:d0:23:c6:52:39: b1:d1:12:20:54:28:c1:ad:b0:29:3a:bc:30:05:d3:b2:9a:f9: 56:7c:2e:fd:d9:83:56:46:14:18:80:f3:e4:94:e3:c0:7a:49: 80:ae:e8:7d:59:e8:40:01:ee:c3:d0:2c:41:fd:62:8f:a1:ac: e9:31:cd:05:1f:82:1e:63:b6:d3:44:cb:e4:47:9f:7c:ff:96: 48:95:06:aa:3e:98:c0:d6:ca:4f:e9:87:7f:d4:a3:68:aa:f4: 7e:fc:87:68:6b:ad:8e:12:f1:24:b3:97:1c:22:e2:9b:8e:ad: 93:9d:ba:25:c2:6d:86:17:06:27:0d:51:ef:0e:e5:4e:a5:9d: a7:7b:9a:eb:f7:a3:04:8f:1a:c6:b8:bc:e6:22:99:b4:bf:49: 5d:01:48:1c:e7:23:27:bb:da:a1:37:3e:74:c4:7e:21:a7:90: d9:31:6f:11:6d:3e:84:05:18:85:0c:09:00:f3:75:63:fa:16: 02:79:08:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTA3MDEwODQwMjZaFw0yNTA3MDgwODQwMjZaMBgxFjAUBgNV BAMTDTY4NjM5ZWZhLTk0MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjqM4fHu69/NE119TCk+1A8WxQLwdMBPYJ8J0T5P89lkH9zr8hzszr19unOzkh WJ+AVduIN6vZa2qHiJ4hbryuV3dS0PxGcxxivPY3Xq6GSBrZPC7OUTgmOComqJdO LXKDzQzjTCs3JO2AwmKk8Kx60DIQGvMbVn4VsPl2d2WaddORSFDGiwRnTXdS2MYk bcIagBoTmmlmU163aq7yGUstihtPG1q6aEyYtjgjHUafY2Ph+sWJrYaIAMgLpa/P Pi5cqNW+KvSFj3QRa5nLfQQSEcxdDSvgjXrZqTym4wKMIQAGa6TgCnBKgFnqNSdZ Cp91k+H7dYX3rQYGYC/2lYdXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULcFJqynv R+7FhsnctsdagRInKG8wHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAy9iOfJBlzwLHNPEsjvxF808KviKLxe5fzx4/Z+U3dUYd68dXibn8P5 09uQOq36liZQ4qQoppLBe7zMuoQZQRkyLPrQI8ZSObHREiBUKMGtsCk6vDAF07Ka +VZ8Lv3Zg1ZGFBiA8+SU48B6SYCu6H1Z6EAB7sPQLEH9Yo+hrOkxzQUfgh5jttNE y+RHn3z/lkiVBqo+mMDWyk/ph3/Uo2iq9H78h2hrrY4S8SSzlxwi4puOrZOduiXC bYYXBicNUe8O5U6lnad7muv3owSPGsa4vOYimbS/SV0BSBznIye72qE3PnTEfiGn kNkxbxFtPoQFGIUMCQDzdWP6FgJ5CCk= -----END CERTIFICATE-----Generated at Thu Jul 3 04:28:53 2025 by rpki-client