$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: D1UFLs5IQwigaFJ2VXedzjyx6ge2EXA5qcVNqaA+s8A= Subject key identifier: 32:95:62:FC:71:CF:A2:3F:ED:28:16:F1:44:AA:FC:91:DB:66:0D:2A Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 2B Signing time: Thu 03 Jul 2025 08:00:59 +0000 Manifest this update: Thu 03 Jul 2025 08:00:59 +0000 Manifest next update: Thu 10 Jul 2025 08:00:58 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: HdRPXzJO7vbfqTyHN04T9vUbE/b5jVn31LrbJ9M6IEA=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Jul 3 08:00:59 2025 GMT Not After : Jul 10 08:00:58 2025 GMT Subject: CN=686638bb-4b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:3e:fd:8f:98:68:16:7b:a3:d9:6e:a7:ef: ed:04:8e:64:2a:c2:f8:8b:d5:31:d9:f0:0d:84:d9: de:14:50:93:5a:d9:45:d3:33:b0:64:d3:25:1e:b6: c2:fd:fb:80:9a:f1:ea:ca:e3:9e:e6:90:7c:3f:0a: 9b:32:84:6d:6b:d4:65:06:76:8a:9f:f7:0a:81:d3: 30:64:b8:93:91:fd:63:f3:b5:c4:10:47:78:10:a2: db:ad:32:29:65:78:24:31:c1:75:86:4a:83:18:92: d5:34:b2:31:3f:f2:fc:57:5e:f0:c4:f8:a3:a7:1e: 4a:0b:c4:ea:82:2b:95:bf:40:95:af:6a:7c:c8:05: 3e:7a:ff:75:df:df:f0:38:c1:f4:6d:ee:b8:4d:25: 64:c6:d4:21:7f:bb:47:01:bd:fd:a8:e8:b2:46:de: b2:3d:4c:29:a6:b7:c1:4a:17:61:79:f1:be:6f:89: b4:f4:79:48:30:bf:df:a3:83:2b:8e:c9:35:e2:8c: a9:6a:7c:db:08:9f:7f:12:12:9f:f4:05:56:da:e2: 82:85:00:1f:3e:af:62:3a:13:f8:d0:f4:60:92:e1: 71:e8:4d:d6:11:31:05:60:0d:db:90:3d:47:4b:c7: 52:7d:7b:ee:08:bb:fc:7d:57:41:43:c6:f4:26:0d: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:95:62:FC:71:CF:A2:3F:ED:28:16:F1:44:AA:FC:91:DB:66:0D:2A X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f0:f7:21:11:99:4f:da:42:be:be:1f:60:bc:05:0a:89:fe: 21:c5:a5:c1:8a:43:70:56:ed:0d:e5:63:76:9c:2e:83:8e:4b: 3f:53:9d:6f:42:d8:23:73:7b:a9:f0:26:5f:2c:67:6c:41:17: f2:3f:5c:4c:36:bd:67:1a:51:4f:9c:86:e8:81:a2:c0:fc:5f: 25:60:f4:99:38:77:0d:bc:e2:be:b6:26:72:06:d3:6b:d8:72: ab:b6:75:69:c8:27:ff:ca:a3:d2:71:c8:1f:55:73:61:8a:28: 77:e6:aa:02:69:9a:dc:4a:e3:81:63:32:4a:3f:7c:ad:8f:61: 7c:e3:70:2a:1e:de:d3:b8:75:a1:1c:ba:00:6d:3e:65:67:cb: 0b:f8:4f:f4:f6:4c:1e:27:34:99:bd:47:b1:64:e5:7e:57:23: 13:ad:d0:41:b9:49:15:51:a1:70:a9:6a:c4:1b:52:73:06:7b: 57:c1:a1:73:14:3b:9a:ad:b9:1e:a2:f7:58:e1:0d:21:60:79: 26:d7:da:5a:d5:f8:0b:0c:a4:0f:35:2b:f8:10:41:e2:a0:95: ea:3a:0b:e7:fd:f8:de:08:55:8d:0b:53:ad:8c:42:0b:cb:33: 3e:bf:c9:bc:14:f4:36:89:13:27:ee:77:b0:e8:0b:f9:b4:34: e1:84:1c:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA3MDMwODAwNTlaFw0yNTA3MTAwODAwNThaMBgxFjAUBgNV BAMTDTY4NjYzOGJiLTRiODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM+D79j5hoFnuj2W6n7+0EjmQqwviL1THZ8A2E2d4UUJNa2UXTM7Bk0yUetsL9 +4Ca8erK457mkHw/CpsyhG1r1GUGdoqf9wqB0zBkuJOR/WPztcQQR3gQotutMill eCQxwXWGSoMYktU0sjE/8vxXXvDE+KOnHkoLxOqCK5W/QJWvanzIBT56/3Xf3/A4 wfRt7rhNJWTG1CF/u0cBvf2o6LJG3rI9TCmmt8FKF2F58b5vibT0eUgwv9+jgyuO yTXijKlqfNsIn38SEp/0BVba4oKFAB8+r2I6E/jQ9GCS4XHoTdYRMQVgDduQPUdL x1J9e+4Iu/x9V0FDxvQmDTgpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMpVi/HHP oj/tKBbxRKr8kdtmDSowHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvw9yERmU/aQr6+H2C8BQqJ/iHFpcGKQ3BW7Q3lY3acLoOOSz9TnW9C 2CNze6nwJl8sZ2xBF/I/XEw2vWcaUU+chuiBosD8XyVg9Jk4dw284r62JnIG02vY cqu2dWnIJ//Ko9JxyB9Vc2GKKHfmqgJpmtxK44FjMko/fK2PYXzjcCoe3tO4daEc ugBtPmVnywv4T/T2TB4nNJm9R7Fk5X5XIxOt0EG5SRVRoXCpasQbUnMGe1fBoXMU O5qtuR6i91jhDSFgeSbX2lrV+AsMpA81K/gQQeKgleo6C+f9+N4IVY0LU62MQgvL Mz6/ybwU9DaJEyfud7DoC/m0NOGEHGY= -----END CERTIFICATE-----Generated at Fri Jul 4 01:28:11 2025 by rpki-client