$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft File: pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json) Hash identifier: HddB5xAndC9zlBZ4tZgN/lfa1H1fjIBXvAE9NY0J95Y= Subject key identifier: 74:02:E0:61:7C:1F:2E:BC:2C:48:5A:42:F7:53:C8:14:AC:99:22:B1 Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34 Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634 Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft Manifest number: 0B14 Signing time: Wed 02 Jul 2025 19:31:38 +0000 Manifest this update: Wed 02 Jul 2025 19:31:37 +0000 Manifest next update: Wed 09 Jul 2025 19:31:37 +0000 Files and hashes: 1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: bfL8TEYk+dXzGpqm8hABlsZhYZY56QJGj/cFI5mr9bI=) 2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: 9D2VyaAKjVgoxkaamh4Z/Ffje6FAagohXWssSAvixLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634 Validity Not Before: Jul 2 19:31:37 2025 GMT Not After : Jul 9 19:31:37 2025 GMT Subject: CN=68658919-5d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:fe:4b:00:a7:4b:db:76:84:76:a6:6f:c9: 36:b0:e9:f0:30:e9:b3:c3:c0:9f:c1:37:db:32:d4: 33:63:ab:39:48:9f:8f:82:46:7f:51:ec:4b:ed:4b: cb:11:65:b3:40:23:6f:e6:dc:8f:72:11:67:0e:7b: 0f:e8:bb:70:99:d6:03:13:23:e3:40:7a:77:c0:a0: 6d:9a:e8:1f:13:8f:c0:3d:62:0c:68:71:5d:7f:65: db:0a:ae:d1:04:c5:ef:31:2d:79:f4:74:d6:27:3f: 49:c8:c5:1c:19:39:e6:37:b8:51:3a:16:93:8f:c9: 8f:8c:f4:e4:36:7a:18:04:92:ed:b7:c4:73:1d:12: 0b:8d:29:57:4f:66:ba:da:17:81:b8:60:85:86:98: 9a:b3:1f:10:da:38:b1:9f:25:e0:76:fe:7d:93:1a: f5:bc:91:bf:e1:4a:e4:c5:28:b2:68:78:7f:a3:9a: 45:aa:22:d6:cf:6a:0d:bd:74:e3:cc:52:c2:72:d8: 9c:77:c8:a2:45:9e:c4:d2:c1:9f:06:98:a3:52:b3: 8d:f3:6b:21:e7:b4:92:3c:02:4d:e9:48:70:89:5b: 84:bf:dd:ec:4f:4d:5a:18:d8:86:a0:41:a6:dc:68: 87:7e:b5:82:bf:e3:c7:cb:e2:b1:53:f1:f1:34:eb: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:02:E0:61:7C:1F:2E:BC:2C:48:5A:42:F7:53:C8:14:AC:99:22:B1 X509v3 Authority Key Identifier: keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:de:f1:9e:2b:2e:af:11:e3:97:c2:fe:7d:fe:cf:7a:a6:40: e3:86:ca:2c:1c:25:3f:5a:34:ab:22:ca:bc:9d:f3:d3:49:d1: 4a:65:ff:2f:7c:0a:ac:16:50:00:db:3b:a8:20:4b:09:0e:5f: 66:59:fe:e6:5c:af:e0:28:e2:55:36:48:09:d2:3e:38:b3:b1: ff:90:08:2b:45:26:dc:f0:94:16:c2:63:76:d2:48:7a:81:99: a7:48:2f:5c:1b:de:29:b4:83:ef:d1:d5:e2:d4:4c:e7:40:24: 91:24:19:8d:f5:46:d8:07:4a:42:07:ec:ae:24:06:73:04:40: 60:b8:0e:c7:d5:04:7f:04:f0:2c:55:d7:6b:09:fa:a2:1b:f4: 1b:93:66:88:e7:38:9a:b2:b0:c4:22:db:b8:a7:49:09:24:f5: 93:41:c1:90:62:df:94:61:e9:4c:90:88:e9:ad:9c:12:89:08: 10:92:f3:9e:e8:bf:18:f7:a9:a0:eb:3b:ee:8f:e6:24:76:9c: 2a:24:2b:26:03:1e:56:e1:6f:c3:c4:ee:d1:13:57:9f:7c:d3: cf:42:a6:b4:ff:a9:a4:51:bc:8f:72:28:17:74:48:6c:e1:09: 38:48:78:3c:de:96:eb:f3:70:7a:2d:de:c3:ea:e9:0e:fb:aa: 9d:58:2d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEOEYxMTAvBgNVBAUTKEE1MkY4Rjk4NTlDQUM0N0Q2ODU0MjcyMzREMjYxNkVC OUU1Mzk2MzQwHhcNMjUwNzAyMTkzMTM3WhcNMjUwNzA5MTkzMTM3WjAYMRYwFAYD VQQDEw02ODY1ODkxOS01ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xz+SwCnS9t2hHamb8k2sOnwMOmzw8CfwTfbMtQzY6s5SJ+PgkZ/UexL7UvL EWWzQCNv5tyPchFnDnsP6LtwmdYDEyPjQHp3wKBtmugfE4/APWIMaHFdf2XbCq7R BMXvMS159HTWJz9JyMUcGTnmN7hROhaTj8mPjPTkNnoYBJLtt8RzHRILjSlXT2a6 2heBuGCFhpiasx8Q2jixnyXgdv59kxr1vJG/4UrkxSiyaHh/o5pFqiLWz2oNvXTj zFLCcticd8iiRZ7E0sGfBpijUrON82sh57SSPAJN6UhwiVuEv93sT01aGNiGoEGm 3GiHfrWCv+PHy+KxU/HxNOvRzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQC4GF8 Hy68LEhaQvdTyBSsmSKxMB8GA1UdIwQYMBaAFKUvj5hZysR9aFQnI00mFuueU5Y0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQ4Ri9CODUyRkIzQzQz MjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hIMW9WQ2NqVFNZVzY1NVRs alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTLVBtRm5LeEgxb1ZDY2pUU1lXNjU1VGxqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQ4Ri9CODUyRkIzQzQzMjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hI MW9WQ2NqVFNZVzY1NVRsalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx3vGeKy6vEeOXwv59/s96pkDjhsosHCU/WjSrIsq8nfPTSdFKZf8v fAqsFlAA2zuoIEsJDl9mWf7mXK/gKOJVNkgJ0j44s7H/kAgrRSbc8JQWwmN20kh6 gZmnSC9cG94ptIPv0dXi1EznQCSRJBmN9UbYB0pCB+yuJAZzBEBguA7H1QR/BPAs VddrCfqiG/Qbk2aI5ziasrDEItu4p0kJJPWTQcGQYt+UYelMkIjprZwSiQgQkvOe 6L8Y96mg6zvuj+YkdpwqJCsmAx5W4W/DxO7RE1effNPPQqa0/6mkUbyPcigXdEhs 4Qk4SHg83pbr83B6Ld7D6ukO+6qdWC3U -----END CERTIFICATE-----Generated at Thu Jul 3 17:19:37 2025 by rpki-client