$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft File: PfacqYyxMelltbxKM_znG50156g.mft (raw, json) Hash identifier: YixGvEifG+byGTd7zAi5q+bi8oufDJlecMoQEF3P2nM= Subject key identifier: 04:DF:25:E2:20:30:FA:E1:18:B2:86:86:2D:EE:5B:69:C8:1B:E9:9E Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 076B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft Manifest number: 075D Signing time: Wed 02 Jul 2025 21:55:01 +0000 Manifest this update: Wed 02 Jul 2025 21:55:01 +0000 Manifest next update: Wed 09 Jul 2025 21:55:01 +0000 Files and hashes: 1: PfacqYyxMelltbxKM_znG50156g.crl (hash: HqsBJmCEf9DvINmljrlGRJ4QFrYfIxefaDn3hK54koE=) 2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1899 (0x76b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Validity Not Before: Jul 2 21:55:01 2025 GMT Not After : Jul 9 21:55:01 2025 GMT Subject: CN=6865aab5-1c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:c7:18:66:ab:8b:10:4c:7a:48:b3:84:5e: 55:e4:f6:d9:64:25:3f:96:cd:5a:a0:d2:d8:ee:ed: db:60:66:d8:98:f4:9f:ba:5a:39:cf:73:8f:8f:0b: a0:01:2f:d3:1f:55:48:fc:32:6d:4c:7a:61:fc:a7: 4e:e7:8d:ba:06:e7:c5:b6:84:a3:0b:55:f9:b3:ad: e9:b3:0a:72:16:c6:b5:a5:6d:f1:09:9a:f1:f7:90: 23:45:cd:45:4d:fd:be:48:1d:b8:95:c4:63:0e:09: e3:44:ca:23:6a:e2:0b:3d:73:80:d6:8d:c6:0e:6a: 12:20:d8:35:82:77:3c:9c:78:c1:f8:e1:b1:35:34: 40:2f:09:6f:c9:18:a9:1e:c0:6f:42:ae:cd:35:a7: ae:c8:d5:c4:05:88:42:8a:6d:da:c5:f3:63:bc:11: f0:91:41:9b:6b:c1:ee:70:04:7c:68:c2:b6:34:c1: dc:31:fc:10:6d:e1:05:77:c0:35:62:66:0f:e9:f5: 60:9c:7c:e6:a3:cd:9c:c7:66:32:cc:35:29:84:69: 9f:22:bc:b3:14:45:53:6d:08:13:b2:aa:a6:6c:52: 3a:5a:00:03:7b:90:99:04:76:e7:52:ef:03:58:99: 33:b7:9d:43:23:cb:58:fa:76:43:3b:8c:1a:ab:aa: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:25:E2:20:30:FA:E1:18:B2:86:86:2D:EE:5B:69:C8:1B:E9:9E X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:2e:c2:43:47:49:05:ea:72:cb:7c:df:61:71:9c:b9:39:b8: 52:36:c7:4c:ac:78:78:e0:62:3d:49:f1:a5:3a:dc:9c:e8:42: 8c:52:4d:07:ba:0b:7e:f5:a1:d5:44:86:9e:56:b4:2c:c3:39: 2d:f0:92:81:4a:63:de:d7:75:de:20:72:11:18:7a:12:fe:45: 45:23:15:01:e4:e1:4b:40:b2:10:a7:9a:6e:9c:80:ff:98:8c: a5:71:e7:8c:78:14:a7:66:b5:63:4a:21:03:db:cd:9c:8b:d8: 0d:c7:71:ea:86:c4:ad:95:fb:41:fb:84:88:f5:f8:a0:8a:13: 4a:c4:83:55:8e:66:ea:05:cd:b9:fd:ef:f1:2a:2e:01:ae:50: 3e:53:44:3d:7a:fa:f6:6c:bb:4a:44:8d:e4:46:30:d2:56:bc: 8d:39:3e:2e:14:c8:40:cd:c0:44:c7:0a:ba:e1:1c:29:9b:6e: 4a:6d:dc:fa:5e:e6:8a:1e:d2:55:0b:43:ad:18:bd:53:2b:01: 86:04:bf:0d:4a:fd:3f:2b:1c:46:aa:9b:c0:fe:09:4d:4d:d4: 3b:38:8a:68:17:5e:80:aa:f7:33:d0:20:d5:cd:27:fb:92:ff: 86:e6:43:ba:16:d6:70:02:33:e2:a6:98:e4:21:9c:06:0f:88: 61:15:b9:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjUwNzAyMjE1NTAxWhcNMjUwNzA5MjE1NTAxWjAYMRYwFAYD VQQDEw02ODY1YWFiNS0xYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKXHGGarixBMekizhF5V5PbZZCU/ls1aoNLY7u3bYGbYmPSfulo5z3OPjwug AS/TH1VI/DJtTHph/KdO5426BufFtoSjC1X5s63pswpyFsa1pW3xCZrx95AjRc1F Tf2+SB24lcRjDgnjRMojauILPXOA1o3GDmoSINg1gnc8nHjB+OGxNTRALwlvyRip HsBvQq7NNaeuyNXEBYhCim3axfNjvBHwkUGba8HucAR8aMK2NMHcMfwQbeEFd8A1 YmYP6fVgnHzmo82cx2YyzDUphGmfIryzFEVTbQgTsqqmbFI6WgADe5CZBHbnUu8D WJkzt51DI8tY+nZDO4waq6pn/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATfJeIg MPrhGLKGhi3uW2nIG+meMB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYxMy81Mzg3MzJGRTI5NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1l bGx0YnhLTV96bkc1MDE1NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfLsJDR0kF6nLLfN9hcZy5ObhSNsdMrHh44GI9SfGlOtyc6EKMUk0H ugt+9aHVRIaeVrQswzkt8JKBSmPe13XeIHIRGHoS/kVFIxUB5OFLQLIQp5punID/ mIylceeMeBSnZrVjSiED282ci9gNx3HqhsStlftB+4SI9figihNKxINVjmbqBc25 /e/xKi4BrlA+U0Q9evr2bLtKRI3kRjDSVryNOT4uFMhAzcBExwq64Rwpm25Kbdz6 XuaKHtJVC0OtGL1TKwGGBL8NSv0/KxxGqpvA/glNTdQ7OIpoF16Aqvcz0CDVzSf7 kv+G5kO6FtZwAjPippjkIZwGD4hhFbny -----END CERTIFICATE-----Generated at Fri Jul 4 08:23:55 2025 by rpki-client