$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json) Hash identifier: gEjyZRyYE4l0+wBaEvEYuo02teTc68xx0DUbh1Hs0HI= Subject key identifier: E5:27:B2:72:2D:F1:07:E5:50:C0:0F:DA:92:5A:BE:4C:FB:8E:25:00 Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft Manifest number: 84 Signing time: Thu 03 Jul 2025 06:49:37 +0000 Manifest this update: Thu 03 Jul 2025 06:49:37 +0000 Manifest next update: Thu 10 Jul 2025 06:49:37 +0000 Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: +SvlDkPHFaSjyKbPQuaAdzRnIwVeoz5uvHzpXTzo5aw=) 2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Validity Not Before: Jul 3 06:49:37 2025 GMT Not After : Jul 10 06:49:37 2025 GMT Subject: CN=68662801-9262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7b:2d:63:0c:d1:32:8b:40:60:17:e6:df:29: 4b:3a:4f:e2:7e:54:61:6d:62:28:12:b3:67:c2:d3: 8c:dd:cc:f4:6f:a5:ef:6f:c9:63:e8:c6:b2:ff:44: d7:62:61:24:a7:85:fc:a6:a1:f9:ff:06:b6:3d:f2: ad:16:22:a9:90:0e:c5:e5:fb:67:90:26:0b:72:54: 38:0d:8c:88:45:6f:e0:43:58:65:14:d8:32:ef:76: 4b:e2:a2:62:af:51:ba:56:30:87:a7:06:07:96:a1: 9e:8c:ae:98:e5:fb:5d:3d:01:46:27:98:7f:dc:c3: e2:15:a0:f7:5c:80:11:ec:ea:58:51:f6:aa:34:7c: 6c:89:fb:84:8f:76:40:c1:e1:2e:b2:1b:83:bf:82: 4c:53:ea:7a:aa:54:08:f3:29:1a:89:50:03:10:36: b6:18:ef:2e:a0:b7:3e:4e:c3:9c:b7:b7:f6:15:d7: ef:41:b1:a3:09:7c:f2:9b:c9:f9:e0:1f:ac:77:42: a9:4e:fc:11:61:6b:89:76:e5:b9:8e:55:24:87:a8: a2:eb:30:fc:93:45:33:59:66:1e:70:1d:4a:c2:0b: 39:ec:bf:75:a4:bf:8f:80:ac:89:c2:14:d3:32:c5: 8d:13:0e:9f:80:77:ef:f4:56:da:f0:0b:21:23:85: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:27:B2:72:2D:F1:07:E5:50:C0:0F:DA:92:5A:BE:4C:FB:8E:25:00 X509v3 Authority Key Identifier: keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:43:9c:3d:21:0d:6b:12:f0:31:74:7f:38:dd:e5:8e:53:41: 7e:c8:86:37:fc:cd:b9:bc:c4:ed:c9:35:82:3e:bc:7a:de:a7: 80:24:45:f4:b9:48:16:b4:52:50:73:47:0b:13:9e:0f:61:17: 8f:01:60:27:77:9b:b2:db:6d:60:b9:58:55:89:14:e0:1a:0e: 8f:37:3e:e1:60:e9:51:7f:f9:2b:17:fe:bf:bf:2f:a2:36:67: e2:b7:d9:3a:e7:c7:11:28:76:ee:71:34:b9:b2:7f:81:c2:66: ed:75:77:e3:9b:ca:ee:4f:aa:55:fb:8e:f8:fb:eb:be:4b:bd: 0d:55:52:08:c5:67:8a:02:8e:0a:74:b7:6d:20:a1:dd:df:6b: fa:55:04:4c:2c:06:59:73:80:00:37:0c:02:73:20:a6:5f:18: e2:50:4f:d7:2d:8a:42:58:48:73:06:0d:a8:9e:34:65:2c:0e: cf:64:fe:90:8b:8a:09:4c:45:d2:d5:e8:35:23:58:64:4d:98: e8:3c:c3:37:00:63:6c:a5:71:9f:e2:b6:2b:a7:9f:44:d7:23: d7:de:13:26:34:98:5f:83:a9:ef:92:2c:d2:e1:9a:f7:9f:b2: 0f:12:ea:89:47:1f:8e:1b:55:81:2e:9f:63:6a:1d:12:33:dd: 86:2e:98:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKEE1MUNGQjhBMjgzOERDMjNGMjg3NjQ0QTQ3MzVFRkMx M0Q4QzMxMTMwHhcNMjUwNzAzMDY0OTM3WhcNMjUwNzEwMDY0OTM3WjAYMRYwFAYD VQQDEw02ODY2MjgwMS05MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83stYwzRMotAYBfm3ylLOk/iflRhbWIoErNnwtOM3cz0b6Xvb8lj6May/0TX YmEkp4X8pqH5/wa2PfKtFiKpkA7F5ftnkCYLclQ4DYyIRW/gQ1hlFNgy73ZL4qJi r1G6VjCHpwYHlqGejK6Y5ftdPQFGJ5h/3MPiFaD3XIAR7OpYUfaqNHxsifuEj3ZA weEushuDv4JMU+p6qlQI8ykaiVADEDa2GO8uoLc+TsOct7f2FdfvQbGjCXzym8n5 4B+sd0KpTvwRYWuJduW5jlUkh6ii6zD8k0UzWWYecB1Kwgs57L91pL+PgKyJwhTT MsWNEw6fgHfv9Fba8AshI4W+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUnsnIt 8QflUMAP2pJavkz7jiUAMB8GA1UdIwQYMBaAFKUc+4ooONwj8odkSkc178E9jDET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81NkM2NzA3Njkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDNDUHloMlJLUnpYdndUMk1N Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1STS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81NkM2NzA3NjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDND UHloMlJLUnpYdndUMk1NUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuQ5w9IQ1rEvAxdH843eWOU0F+yIY3/M25vMTtyTWCPrx63qeAJEX0 uUgWtFJQc0cLE54PYRePAWAnd5uy221guVhViRTgGg6PNz7hYOlRf/krF/6/vy+i Nmfit9k658cRKHbucTS5sn+BwmbtdXfjm8ruT6pV+474++u+S70NVVIIxWeKAo4K dLdtIKHd32v6VQRMLAZZc4AANwwCcyCmXxjiUE/XLYpCWEhzBg2onjRlLA7PZP6Q i4oJTEXS1eg1I1hkTZjoPMM3AGNspXGf4rYrp59E1yPX3hMmNJhfg6nvkizS4Zr3 n7IPEuqJRx+OG1WBLp9jah0SM92GLpgC -----END CERTIFICATE-----Generated at Fri Jul 4 15:06:38 2025 by rpki-client