$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: MVAMwGhkmuxBlGRn/knaEmMYz9PwkDbFEuF/wbylZeA= Subject key identifier: 07:E8:6E:E9:06:63:8E:48:5F:D7:ED:8F:7A:6A:DE:93:06:FB:F9:90 Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 3C Signing time: Sat 23 Aug 2025 07:46:45 +0000 Manifest this update: Sat 23 Aug 2025 07:46:45 +0000 Manifest next update: Sat 30 Aug 2025 07:46:45 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: S0tLefFgYGkesO3zrRrgPCepmDNWbJstgiKOWHx/vBE=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: YdheOlkOrvYc+0WcsN5XG/W9vQjumV6X4tfqEURTyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Aug 23 07:46:45 2025 GMT Not After : Aug 30 07:46:45 2025 GMT Subject: CN=68a971e5-c9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:a5:1a:b4:a3:4c:ff:e0:be:af:ef:84:f5: dd:a9:d0:f2:49:fe:0b:15:5e:95:20:fa:f7:f9:73: ef:3d:85:69:c1:d4:a8:a2:2b:75:af:e7:3e:f9:06: 21:46:1f:8d:8d:47:f5:30:74:5d:ac:e1:8c:a8:8f: 7b:79:70:34:fd:64:46:d3:59:e8:c7:03:80:eb:ee: 21:ea:4e:fe:6b:b7:50:b6:cc:f2:54:cd:9e:d2:aa: 1a:1d:4a:23:c0:81:c2:0d:46:31:04:12:1f:83:78: dd:db:9f:d6:c0:e1:4f:f7:f6:6d:a3:11:4e:51:ea: 29:93:4f:75:b1:c5:79:e1:a5:97:54:9e:32:d2:02: a6:8b:26:12:fc:b8:03:51:8c:b5:ea:4d:ce:69:dc: 01:f8:b5:8e:02:fe:88:eb:56:e7:5d:bb:23:80:09: e6:5f:05:81:ee:37:00:9e:90:59:e5:23:04:dc:a6: fb:8d:58:ca:77:82:6d:56:5b:af:84:a4:5b:fb:51: 90:e6:c8:b5:b8:43:01:03:d8:66:9a:b2:b8:55:b0: 90:af:2b:ee:37:4b:ff:b4:3d:eb:8d:e4:ee:2d:b7: 10:57:ca:18:d3:0f:92:ac:76:7f:ee:b2:e7:c7:d9: f4:75:63:52:86:c5:9a:8a:5c:cb:32:59:e6:e2:01: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:6E:E9:06:63:8E:48:5F:D7:ED:8F:7A:6A:DE:93:06:FB:F9:90 X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a2:a6:fa:2a:34:cf:cc:bb:69:cf:a9:1e:6a:9f:eb:88:db: 3d:d0:ad:95:12:bf:74:2a:d5:97:16:4a:16:7c:35:49:13:56: 0f:e7:6f:bb:23:23:96:57:a5:64:06:fa:bc:74:77:ca:ac:0d: 8a:41:d4:b7:10:c7:2a:7b:20:07:ef:d1:0a:d0:47:68:27:c3: f4:ba:35:89:c2:0f:44:50:48:c3:10:ff:d6:54:b5:ad:28:2a: 74:53:10:dd:51:6b:f5:4a:13:2c:5e:ea:87:de:b1:82:82:9a: 96:f5:44:73:cc:0e:95:18:9e:1b:14:10:1b:d0:ea:de:eb:26: 7b:6f:59:95:20:19:ab:03:5d:d0:d5:39:35:b5:f3:7f:eb:c9: b7:e3:96:64:4f:68:62:18:8b:73:5c:db:0c:a9:ee:6a:bf:81: 08:70:57:dc:11:c3:39:70:ca:2e:99:9d:9a:fa:0c:ee:bb:26: 12:47:f6:00:16:51:23:9f:29:0e:a2:cf:53:ed:52:69:e0:85: f3:29:1b:8c:7b:65:50:73:65:1c:a2:81:43:b1:89:9c:f0:58: 9f:d6:ef:17:48:1a:07:ab:a8:9c:32:8b:aa:bb:7e:07:5f:6a: 9a:e2:09:c1:60:9f:9d:50:cd:ff:53:78:49:b5:64:39:b7:3a: 14:b2:bf:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTA4MjMwNzQ2NDVaFw0yNTA4MzAwNzQ2NDVaMBgxFjAUBgNV BAMTDTY4YTk3MWU1LWM5ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8XaUatKNM/+C+r++E9d2p0PJJ/gsVXpUg+vf5c+89hWnB1KiiK3Wv5z75BiFG H42NR/UwdF2s4Yyoj3t5cDT9ZEbTWejHA4Dr7iHqTv5rt1C2zPJUzZ7SqhodSiPA gcINRjEEEh+DeN3bn9bA4U/39m2jEU5R6imTT3WxxXnhpZdUnjLSAqaLJhL8uANR jLXqTc5p3AH4tY4C/ojrVudduyOACeZfBYHuNwCekFnlIwTcpvuNWMp3gm1WW6+E pFv7UZDmyLW4QwED2GaasrhVsJCvK+43S/+0PeuN5O4ttxBXyhjTD5Ksdn/usufH 2fR1Y1KGxZqKXMsyWebiATHFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB+hu6QZj jkhf1+2Pemrekwb7+ZAwHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABeipvoqNM/Mu2nPqR5qn+uI2z3QrZUSv3Qq1ZcWShZ8NUkTVg/nb7sj I5ZXpWQG+rx0d8qsDYpB1LcQxyp7IAfv0QrQR2gnw/S6NYnCD0RQSMMQ/9ZUta0o KnRTEN1Ra/VKEyxe6ofesYKCmpb1RHPMDpUYnhsUEBvQ6t7rJntvWZUgGasDXdDV OTW183/rybfjlmRPaGIYi3Nc2wyp7mq/gQhwV9wRwzlwyi6ZnZr6DO67JhJH9gAW USOfKQ6iz1PtUmnghfMpG4x7ZVBzZRyigUOxiZzwWJ/W7xdIGgerqJwyi6q7fgdf apriCcFgn51Qzf9TeEm1ZDm3OhSyvyE= -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:22 2025 by rpki-client