$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft File: pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json) Hash identifier: W5yp7B/QOmgZFgdabPGEvjPVVhgQV+iGBOFsEjAKxy0= Subject key identifier: 46:44:52:25:BB:E6:4C:61:97:6D:B7:E0:0F:1F:7F:CF:76:2B:04:83 Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67 Certificate issuer: /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft Manifest number: BB Signing time: Thu 03 Jul 2025 06:05:31 +0000 Manifest this update: Thu 03 Jul 2025 06:05:31 +0000 Manifest next update: Thu 10 Jul 2025 06:05:31 +0000 Files and hashes: 1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: 6nkMGLIvEOb4OAc3Xah3YoLmxurJZXf+fYCCoyOzM0M=) 2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: UvG+rrdQc4qonfWzAVMV6XBgR9R1iSghae9lnt9yKqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867 Validity Not Before: Jul 3 06:05:31 2025 GMT Not After : Jul 10 06:05:31 2025 GMT Subject: CN=68661dab-599b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:4c:bc:27:ec:9d:0d:d4:bf:a0:35:e5:cd: 64:e2:56:e3:60:60:26:97:11:86:1d:7b:8f:4b:34: f5:cc:8d:89:63:0b:d4:08:0e:76:2e:6e:31:53:c0: b5:b6:b5:a3:ad:0f:6b:f4:44:4c:d6:d4:7c:5e:c8: 32:0c:7a:6d:29:3e:ec:97:1b:ab:ec:5f:f7:e1:fa: 91:07:b8:f4:b5:62:05:e3:30:60:52:6f:24:2e:c2: 98:e9:6d:33:a6:ad:36:91:f4:1d:b9:e1:47:ab:9c: 55:65:d8:51:6a:e6:6c:f3:d3:63:aa:16:16:07:af: 4f:a9:07:13:1d:6c:ed:ab:4a:a4:a1:d5:02:7f:d8: 17:0d:17:7e:a0:72:b6:f7:50:1d:4b:32:bd:fd:63: 51:75:40:b7:33:05:93:c0:ee:0c:0e:51:7c:7e:76: 64:04:4e:32:92:cc:0f:a0:1a:57:cc:2f:8b:4e:de: f6:6e:e3:2f:82:7c:92:08:c0:85:3b:7c:1c:09:43: 65:c1:3b:39:0e:e3:41:d3:3a:9e:5f:5f:74:56:ba: 05:12:5c:9c:28:7a:6e:8b:f3:2d:e9:40:09:33:ce: 21:cc:f2:b3:87:9f:8b:37:d1:f9:32:1e:e8:e9:cf: 42:e8:ee:2c:88:6e:94:cf:7b:14:82:34:5d:59:90: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:44:52:25:BB:E6:4C:61:97:6D:B7:E0:0F:1F:7F:CF:76:2B:04:83 X509v3 Authority Key Identifier: keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:bc:19:c0:1c:e5:c1:8b:f5:53:0b:38:7d:dd:d8:74:c2: 8e:1b:46:01:ed:88:41:96:1e:d3:59:fd:54:78:fc:e4:3e:d4: 3c:35:33:dc:b4:da:6a:db:8e:0b:fb:18:68:fe:f9:84:63:fb: 79:b3:82:ad:73:bf:f9:f6:ff:85:2f:be:16:34:1f:e0:77:35: b1:38:3d:cc:00:85:91:fd:1d:24:f5:c7:36:d0:09:98:13:26: 67:95:55:5e:94:40:f6:46:dd:f2:5c:e5:2b:d8:a2:bf:d9:29: 3c:0c:37:57:3e:6e:19:9f:83:8c:32:15:53:95:ff:fa:eb:45: a1:ca:1c:f8:7d:ae:a8:c0:ea:88:da:cc:2f:09:65:b2:91:8a: 81:05:fe:c2:c8:1a:b5:1a:79:c5:48:0b:46:57:ae:fd:3a:8d: 8e:41:02:76:f3:85:15:2a:b8:3b:6c:3b:44:be:f8:7c:6d:b5: bc:7e:20:0e:d5:79:2d:89:f8:2c:40:38:26:d2:51:36:aa:2b: 39:59:4d:85:c0:60:76:50:1a:55:c6:32:06:a0:1c:43:c7:9c: 2f:16:dc:b3:e4:7e:29:5d:8a:42:40:0e:85:90:ae:bc:12:1c: 46:93:5f:3a:43:78:0a:c5:b9:05:a1:a1:f4:5f:68:d3:8e:ae: 5e:2b:4a:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKEE1NTRERjNENDcwMjdGRkFGN0NCOEExNjZGM0UwQTEw RTMxNzc4NjcwHhcNMjUwNzAzMDYwNTMxWhcNMjUwNzEwMDYwNTMxWjAYMRYwFAYD VQQDEw02ODY2MWRhYi01OTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBtMvCfsnQ3Uv6A15c1k4lbjYGAmlxGGHXuPSzT1zI2JYwvUCA52Lm4xU8C1 trWjrQ9r9ERM1tR8XsgyDHptKT7slxur7F/34fqRB7j0tWIF4zBgUm8kLsKY6W0z pq02kfQdueFHq5xVZdhRauZs89NjqhYWB69PqQcTHWztq0qkodUCf9gXDRd+oHK2 91AdSzK9/WNRdUC3MwWTwO4MDlF8fnZkBE4ykswPoBpXzC+LTt72buMvgnySCMCF O3wcCUNlwTs5DuNB0zqeX190VroFElycKHpui/Mt6UAJM84hzPKzh5+LN9H5Mh7o 6c9C6O4siG6Uz3sUgjRdWZCvzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZEUiW7 5kxhl2234A8ff892KwSDMB8GA1UdIwQYMBaAFKVU3z1HAn/698uKFm8+ChDjF3hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS9GQzUwMzg0ODNB ODkxMUVGOTgxN0IyNkFDNEY5QUUwMi9wVlRmUFVjQ2ZfcjN5NG9XYno0S0VPTVhl R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BWVGZQVWNDZl9yM3k0b1diejRLRU9NWGVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS9GQzUwMzg0ODNBODkxMUVGOTgxN0IyNkFDNEY5QUUwMi9wVlRmUFVjQ2Zf cjN5NG9XYno0S0VPTVhlR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPsbwZwBzlwYv1Uws4fd3YdMKOG0YB7YhBlh7TWf1UePzkPtQ8NTPc tNpq244L+xho/vmEY/t5s4Ktc7/59v+FL74WNB/gdzWxOD3MAIWR/R0k9cc20AmY EyZnlVVelED2Rt3yXOUr2KK/2Sk8DDdXPm4Zn4OMMhVTlf/660Whyhz4fa6owOqI 2swvCWWykYqBBf7CyBq1GnnFSAtGV679Oo2OQQJ284UVKrg7bDtEvvh8bbW8fiAO 1XktifgsQDgm0lE2qis5WU2FwGB2UBpVxjIGoBxDx5wvFtyz5H4pXYpCQA6FkK68 EhxGk186Q3gKxbkFoaH0X2jTjq5eK0qk -----END CERTIFICATE-----Generated at Thu Jul 3 22:51:38 2025 by rpki-client