$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: D0pnTugjflIiX3dee5/Ox3ISMIqnIVLUcA5LgUjJHao= Subject key identifier: 31:5F:75:4C:AD:11:2B:D7:9F:2B:B3:45:A0:DD:04:AB:AA:DC:00:0B Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: 0194 Signing time: Sun 29 Jun 2025 02:33:08 +0000 Manifest this update: Sun 29 Jun 2025 02:33:08 +0000 Manifest next update: Sun 06 Jul 2025 02:33:08 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: vfhNtlhrrg5k7gcva6mmcm5dwq7LRIQ0P/Hbd+NBGeU=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: LOMVrGcpqBkYXud2B+9+0rUhLbtH2Vrj6cMlX58bV+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: Jun 29 02:33:08 2025 GMT Not After : Jul 6 02:33:08 2025 GMT Subject: CN=6860a5e4-5229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:4f:16:25:6d:48:e1:ff:4e:bf:91:67:6b: 43:fa:21:37:f0:7b:66:0e:ce:0f:4c:47:c6:e5:51: 07:31:7d:7e:7d:d5:4d:32:2d:0a:44:30:18:28:d3: 3d:f7:4b:64:55:e6:6e:fc:87:56:7c:ad:48:86:0f: 10:8e:a8:ed:29:ce:7f:b8:a8:ba:67:26:bd:c5:b0: 42:c3:ff:1e:10:2f:c3:5a:fa:20:d5:ea:7b:c0:15: 87:0b:93:10:89:f3:ed:04:d9:fd:8a:33:41:e2:0c: e7:7e:cb:1a:b2:77:df:e9:ab:0b:98:31:5a:c4:42: 36:e9:23:45:3f:e5:45:d1:6e:54:fa:2c:d9:11:e8: cb:5d:bd:b0:36:13:87:38:73:76:35:96:a4:89:11: a5:d5:bf:b5:d3:7e:bb:2d:73:ea:68:a9:b3:f0:d5: 09:e7:ec:c8:e9:c5:2c:3c:02:b8:0b:4c:60:ae:67: 78:0a:d6:b7:3c:b4:a7:8f:56:6a:aa:89:d7:37:43: 78:95:2a:fe:2b:01:8a:93:7e:cb:33:c5:34:cb:64: 1b:2a:a9:cd:24:58:06:46:d3:e6:d6:6d:cc:a1:98: 76:cc:22:af:68:94:7b:50:87:6f:97:b9:ec:ec:25: c4:b1:e8:de:0b:85:4d:4c:27:c3:1b:79:7e:72:be: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:75:4C:AD:11:2B:D7:9F:2B:B3:45:A0:DD:04:AB:AA:DC:00:0B X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b2:e9:75:f5:3f:b4:b6:94:50:38:28:b6:c2:81:9f:70:c3: 0d:d9:31:0f:e6:16:f0:06:e7:13:0d:d3:db:ca:fe:40:7c:0c: 52:5b:81:98:84:b4:ce:3f:92:0c:fc:44:31:df:24:15:bc:61: 39:9b:47:54:c9:e8:ba:e4:ee:91:c5:14:a6:7f:22:b7:6b:89: 18:ff:76:f9:4c:4c:64:aa:8f:70:30:7f:f2:60:e8:72:29:cc: e5:9f:20:08:6d:fd:4b:2c:4a:36:88:09:e2:3c:9d:a2:b9:0d: 3a:a2:eb:3f:26:4d:41:b8:58:1c:97:6e:ef:6d:6b:ff:95:1c: 24:73:3b:98:6e:5e:20:d5:86:6f:3f:46:90:88:09:4a:2d:36: 28:b9:9a:7b:8b:7c:1f:7d:3f:88:8c:00:d8:11:eb:5f:f7:1c: a3:63:4c:bf:e0:36:eb:cd:1c:91:2e:43:74:e9:d1:15:a2:0e: 71:59:4d:dd:db:3f:fb:ef:fa:0b:40:f5:f1:2a:9c:14:c4:91: c5:f7:38:5f:e3:b4:d0:d2:0f:41:42:f6:22:94:2d:a4:3d:1c: b5:5c:ff:28:10:af:b3:1e:f9:fc:b2:56:34:ac:bb:2a:78:fc: 32:51:c6:86:5c:c1:e2:47:07:07:c3:c3:31:a9:7b:18:fb:d7: e7:06:99:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjUwNjI5MDIzMzA4WhcNMjUwNzA2MDIzMzA4WjAYMRYwFAYD VQQDEw02ODYwYTVlNC01MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxJPFiVtSOH/Tr+RZ2tD+iE38HtmDs4PTEfG5VEHMX1+fdVNMi0KRDAYKNM9 90tkVeZu/IdWfK1Ihg8QjqjtKc5/uKi6Zya9xbBCw/8eEC/DWvog1ep7wBWHC5MQ ifPtBNn9ijNB4gznfssasnff6asLmDFaxEI26SNFP+VF0W5U+izZEejLXb2wNhOH OHN2NZakiRGl1b+10367LXPqaKmz8NUJ5+zI6cUsPAK4C0xgrmd4Cta3PLSnj1Zq qonXN0N4lSr+KwGKk37LM8U0y2QbKqnNJFgGRtPm1m3MoZh2zCKvaJR7UIdvl7ns 7CXEsejeC4VNTCfDG3l+cr4hYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFfdUyt ESvXnyuzRaDdBKuq3AALMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrsul19T+0tpRQOCi2woGfcMMN2TEP5hbwBucTDdPbyv5AfAxSW4GY hLTOP5IM/EQx3yQVvGE5m0dUyei65O6RxRSmfyK3a4kY/3b5TExkqo9wMH/yYOhy KczlnyAIbf1LLEo2iAniPJ2iuQ06ous/Jk1BuFgcl27vbWv/lRwkczuYbl4g1YZv P0aQiAlKLTYouZp7i3wffT+IjADYEetf9xyjY0y/4DbrzRyRLkN06dEVog5xWU3d 2z/77/oLQPXxKpwUxJHF9zhf47TQ0g9BQvYilC2kPRy1XP8oEK+zHvn8slY0rLsq ePwyUcaGXMHiRwcHw8MxqXsY+9fnBpl9 -----END CERTIFICATE-----Generated at Sun Jun 29 22:16:04 2025 by rpki-client