$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json) Hash identifier: IbiKGjB6C+7UHYgMj7h9cXuXkc7m/VuXj6czUp37JIc= Subject key identifier: E7:30:B1:3F:CD:9B:B1:75:58:FE:27:4B:F5:5D:00:E0:B2:94:58:F2 Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft Manifest number: 0133 Signing time: Thu 03 Jul 2025 04:36:52 +0000 Manifest this update: Thu 03 Jul 2025 04:36:51 +0000 Manifest next update: Thu 10 Jul 2025 04:36:51 +0000 Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: MY4YFs+4zO+SRiL8LNS4O/8s53+yk3iELnKxPvRmhLE=) 2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: VY07hPoAnZ6HhFnmDGOrse/S2/32FKp0YWgAY+x8IqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: Jul 3 04:36:51 2025 GMT Not After : Jul 10 04:36:51 2025 GMT Subject: CN=686608e3-257b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:56:6c:f7:ba:be:0d:73:57:44:c7:61:1c: 87:c7:d6:99:df:88:9a:6f:ab:90:21:74:ed:0e:db: 4e:b7:c5:f3:57:46:04:95:3a:eb:6d:49:12:d0:e1: e4:48:05:ce:fa:58:04:ff:d4:8d:ff:56:79:3b:10: 30:2f:37:e7:2f:36:9d:e0:89:65:54:de:5b:ef:c5: 3d:57:cd:f4:52:5f:a7:e2:16:fc:8a:6a:02:bb:3f: 50:56:eb:24:df:6e:4b:9b:c7:75:30:70:ea:77:97: 3e:f7:03:bc:4a:aa:a4:02:b3:e0:40:a1:08:a6:1d: 61:6c:1d:d6:00:fe:c7:bd:14:62:44:35:a0:55:bc: 55:22:89:81:d3:38:b8:7b:f8:5f:8d:2d:b3:1d:23: 51:1e:df:da:69:8a:40:2e:7c:aa:94:5f:ac:0f:1e: 07:e1:c4:d2:f8:59:04:28:fa:f4:ad:de:36:bb:30: 5a:59:a0:ce:d0:87:4b:8e:d0:da:55:e3:de:f8:c7: 73:fd:a9:28:be:66:61:04:de:f3:5f:17:49:99:5d: dd:71:71:fe:86:44:e7:8d:f9:69:29:ea:c0:8c:c1: 81:40:97:95:45:83:c8:0b:71:9c:da:6c:08:ff:30: 09:1b:f3:96:05:14:08:6c:3b:0b:e9:a9:7e:4d:f7: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:30:B1:3F:CD:9B:B1:75:58:FE:27:4B:F5:5D:00:E0:B2:94:58:F2 X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e6:7b:4e:8d:10:a2:82:cc:4b:19:c0:4f:ac:1f:cc:8a:7a: 82:69:7d:4b:9b:ec:d1:83:4e:54:1c:d5:c4:11:a4:f5:25:a2: 35:d6:a3:0a:a2:e6:c3:e5:f4:d0:4a:4a:e1:d4:5e:87:eb:1a: ac:ff:01:c8:e3:e9:bd:62:f9:3f:a0:4f:e8:bb:99:7b:8c:7c: 25:88:96:76:91:3c:1d:82:fd:fe:4d:2f:31:af:46:a9:c2:25: 18:0c:14:73:0f:fe:09:f6:09:78:02:46:6c:56:cb:5c:bf:67: 33:a5:4f:11:f8:38:2a:7d:60:d4:5a:dd:69:af:27:ec:5d:bc: d7:7a:50:70:ac:54:aa:1d:a0:a7:52:fa:e5:f4:b1:40:16:bf: ef:18:cb:89:23:58:45:81:45:37:d6:47:49:ac:5c:11:cf:29: 37:c2:54:3e:5d:a7:03:72:91:cc:50:75:17:d4:c2:7b:b0:5e: 56:10:62:79:90:ad:d5:20:5f:3a:f7:7b:75:b3:2d:7c:7e:e9: b9:71:52:7a:d0:d4:ff:c9:8b:5f:ea:96:87:67:2e:dd:bf:a3: 44:cd:2c:f1:81:24:38:20:f0:c4:98:79:f6:df:52:0f:db:b2: 65:90:74:84:94:88:8f:0e:9d:f7:d8:54:0a:f6:16:82:da:86: 4c:5b:75:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjUwNzAzMDQzNjUxWhcNMjUwNzEwMDQzNjUxWjAYMRYwFAYD VQQDEw02ODY2MDhlMy0yNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhlWbPe6vg1zV0THYRyHx9aZ34iab6uQIXTtDttOt8XzV0YElTrrbUkS0OHk SAXO+lgE/9SN/1Z5OxAwLzfnLzad4IllVN5b78U9V830Ul+n4hb8imoCuz9QVusk 325Lm8d1MHDqd5c+9wO8SqqkArPgQKEIph1hbB3WAP7HvRRiRDWgVbxVIomB0zi4 e/hfjS2zHSNRHt/aaYpALnyqlF+sDx4H4cTS+FkEKPr0rd42uzBaWaDO0IdLjtDa VePe+Mdz/akovmZhBN7zXxdJmV3dcXH+hkTnjflpKerAjMGBQJeVRYPIC3Gc2mwI /zAJG/OWBRQIbDsL6al+TfedBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcwsT/N m7F1WP4nS/VdAOCylFjyMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFU ajVwazRCWU83d1lKWUdVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB05ntOjRCigsxLGcBPrB/MinqCaX1Lm+zRg05UHNXEEaT1JaI11qMK oubD5fTQSkrh1F6H6xqs/wHI4+m9Yvk/oE/ou5l7jHwliJZ2kTwdgv3+TS8xr0ap wiUYDBRzD/4J9gl4AkZsVstcv2czpU8R+DgqfWDUWt1pryfsXbzXelBwrFSqHaCn Uvrl9LFAFr/vGMuJI1hFgUU31kdJrFwRzyk3wlQ+XacDcpHMUHUX1MJ7sF5WEGJ5 kK3VIF8693t1sy18fum5cVJ60NT/yYtf6paHZy7dv6NEzSzxgSQ4IPDEmHn231IP 27JlkHSElIiPDp332FQK9haC2oZMW3XZ -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:08 2025 by rpki-client