$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json) Hash identifier: vX5GuRqM09HShjO4U6B3VwL9E82vEW2WehIuf2TJr84= Subject key identifier: A3:84:30:EB:BB:67:16:40:E9:A6:EC:39:D3:B9:64:64:39:1C:2F:25 Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft Manifest number: 0147 Signing time: Wed 02 Jul 2025 19:30:37 +0000 Manifest this update: Wed 02 Jul 2025 19:30:36 +0000 Manifest next update: Wed 09 Jul 2025 19:30:36 +0000 Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: Br+Ft/XsiqQmewgNHq6NXrlKFiGIRnLRgySrQoCi3Uc=) 2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Validity Not Before: Jul 2 19:30:36 2025 GMT Not After : Jul 9 19:30:36 2025 GMT Subject: CN=686588dc-ccaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:fb:8d:b8:c0:d2:77:89:88:30:a9:19:08: 40:d4:70:7a:99:85:74:cb:0f:a5:4f:d2:4a:ae:18: e3:73:ac:15:c7:d1:61:9b:67:af:51:7f:1a:b3:04: 65:d9:86:72:c7:35:f4:d4:6b:8f:65:bf:62:f2:84: f1:96:2b:ea:66:72:3b:06:06:29:61:a9:b0:5d:be: a5:ae:b1:ce:88:30:1b:8b:f5:24:24:f8:7b:4f:7a: 2e:3b:03:d1:8c:ac:ab:68:7e:c8:9f:dd:93:3f:36: 6c:36:89:d4:92:61:47:f7:5a:bd:88:61:7d:a0:e1: cb:3c:74:2c:3b:d7:19:f2:be:0e:8b:37:1f:d5:0b: 95:06:8e:a0:f7:8e:e6:bd:e5:e1:f7:06:15:dd:2b: 01:31:5d:13:11:9c:17:a0:b6:99:9c:9f:45:85:fb: c4:9f:b6:3f:34:de:5a:e7:8a:09:5e:89:d7:05:c2: 52:90:d8:d7:ed:46:52:08:b7:9c:e3:cc:d2:52:9c: c7:11:4c:3b:6d:21:1c:5f:51:70:ec:39:49:00:ac: 73:a6:35:ab:f2:ea:89:bd:91:45:2f:7a:93:e2:f2: 89:48:48:75:20:d2:83:33:de:f1:04:eb:48:7c:e4: 45:b4:bf:f1:1e:f0:d8:b8:6a:d7:a6:b5:bb:53:6a: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:30:EB:BB:67:16:40:E9:A6:EC:39:D3:B9:64:64:39:1C:2F:25 X509v3 Authority Key Identifier: keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a5:30:92:9c:fd:fe:b8:b6:be:1e:cf:05:bd:47:f0:08:84: 47:ce:e2:77:6f:f5:26:9f:99:9d:4f:d7:00:8a:a7:ca:28:75: 0b:9b:53:be:b7:20:c8:96:27:d4:7a:49:01:da:05:6b:60:ad: 5c:2a:81:69:a5:3f:b3:ea:d9:ab:a4:15:e1:f9:1b:e2:71:d2: 8f:88:99:0a:ec:31:d2:76:da:d5:f9:36:0b:06:c3:68:b0:c7: e8:8a:98:c6:b3:0f:95:32:f9:e9:e7:53:e0:d3:c5:0f:c2:de: 99:5c:8d:27:1e:91:c4:a4:05:cc:79:b1:3c:83:f1:2c:23:e8: ed:aa:d3:b6:c0:b8:83:6a:69:6a:98:72:51:68:dc:6b:82:fd: 28:9b:bb:91:95:9e:5d:c2:db:e5:36:d0:76:c6:20:a3:62:3a: 7a:c0:3e:c6:fd:0a:88:ef:06:84:b4:e8:4b:11:9a:f6:bb:8c: 9e:5d:70:a4:a8:a2:2a:cf:34:c8:ec:06:d2:b5:ca:29:38:6f: 73:88:e2:3e:6f:75:d8:45:87:a2:ca:dd:90:de:6d:5a:32:cb: 6a:69:25:8f:97:81:27:c1:29:d9:9b:74:34:ae:0d:7c:ac:ca: 7b:29:e3:94:0f:2e:50:08:6e:0d:e4:83:9f:a8:0c:3b:c7:e3: 30:5b:7c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKEE0REVFRDk1OTNFNTkxMzAzQTlCMDM5ODA2MUZFOEVG NTE4NjY1Q0EwHhcNMjUwNzAyMTkzMDM2WhcNMjUwNzA5MTkzMDM2WjAYMRYwFAYD VQQDEw02ODY1ODhkYy1jY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs37jbjA0neJiDCpGQhA1HB6mYV0yw+lT9JKrhjjc6wVx9Fhm2evUX8aswRl 2YZyxzX01GuPZb9i8oTxlivqZnI7BgYpYamwXb6lrrHOiDAbi/UkJPh7T3ouOwPR jKyraH7In92TPzZsNonUkmFH91q9iGF9oOHLPHQsO9cZ8r4Oizcf1QuVBo6g947m veXh9wYV3SsBMV0TEZwXoLaZnJ9FhfvEn7Y/NN5a54oJXonXBcJSkNjX7UZSCLec 48zSUpzHEUw7bSEcX1Fw7DlJAKxzpjWr8uqJvZFFL3qT4vKJSEh1INKDM97xBOtI fORFtL/xHvDYuGrXprW7U2oVfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOEMOu7 ZxZA6absOdO5ZGQ5HC8lMB8GA1UdIwQYMBaAFKTe7ZWT5ZEwOpsDmAYf6O9RhmXK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi8xODkxOTVBQzY4 MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtUQTZtd09ZQmhfbzcxR0da Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi8xODkxOTVBQzY4MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtU QTZtd09ZQmhfbzcxR0daY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSpTCSnP3+uLa+Hs8FvUfwCIRHzuJ3b/Umn5mdT9cAiqfKKHULm1O+ tyDIlifUekkB2gVrYK1cKoFppT+z6tmrpBXh+RvicdKPiJkK7DHSdtrV+TYLBsNo sMfoipjGsw+VMvnp51Pg08UPwt6ZXI0nHpHEpAXMebE8g/EsI+jtqtO2wLiDamlq mHJRaNxrgv0om7uRlZ5dwtvlNtB2xiCjYjp6wD7G/QqI7waEtOhLEZr2u4yeXXCk qKIqzzTI7AbStcopOG9ziOI+b3XYRYeiyt2Q3m1aMstqaSWPl4EnwSnZm3Q0rg18 rMp7KeOUDy5QCG4N5IOfqAw7x+MwW3zV -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:04 2025 by rpki-client