$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: OVPuXDQwkVo6iRWQhfqUP02sy3UXIxQA4dF72/ZskFQ= Subject key identifier: 2B:69:18:19:60:BC:CA:5B:2F:98:25:80:63:5B:B2:8D:9E:DF:6A:E7 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 07CA Signing time: Fri 18 Jul 2025 21:23:07 +0000 Manifest this update: Fri 18 Jul 2025 21:23:07 +0000 Manifest next update: Fri 25 Jul 2025 21:23:07 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: 9kqPBZtJmzrfZII4WSDysXj2nZcglsn+cYzRn/gK5AE=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: Jul 18 21:23:07 2025 GMT Not After : Jul 25 21:23:07 2025 GMT Subject: CN=687abb3b-5e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:50:b4:92:11:fe:3d:7d:94:4e:39:90:fb: 68:9f:2f:0f:28:5d:85:bf:65:92:0e:eb:71:b5:cb: cc:e3:d7:5a:18:0b:bf:a2:12:d1:f2:cd:50:3f:87: c1:98:f2:21:45:92:a7:98:96:59:50:bd:89:de:68: 9a:79:01:45:77:af:c2:c5:35:ce:3c:03:88:e5:c6: 5c:64:fd:71:22:82:0a:98:c7:59:db:80:86:e6:de: 35:03:15:11:a1:74:8c:e5:62:9d:ed:32:3d:a0:3b: 9a:30:a6:6a:da:f7:a8:5a:c2:63:22:b1:a0:0d:63: b9:87:11:78:49:14:0c:33:03:b9:e7:bc:fb:d9:de: 20:50:4e:34:ee:4a:23:d6:f6:cf:fb:42:be:19:b7: 06:14:ee:42:41:30:54:3d:fe:4b:05:23:30:20:9d: bd:1e:3f:81:a1:5c:65:7f:5c:da:d2:5e:1d:7a:df: 19:04:a2:6c:b1:9b:1f:8f:8c:3e:2a:95:a9:c6:0d: 77:18:69:28:dd:39:5a:0a:fc:bb:42:c5:4a:c5:b6: f0:96:c9:0b:0c:93:f6:50:f5:a4:f2:ac:34:c1:fd: 1b:86:b9:6b:7c:05:a0:3b:9b:88:1a:60:33:eb:36: 89:b9:5c:ad:ad:c2:18:26:79:3f:d2:6d:b7:2b:cf: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:18:19:60:BC:CA:5B:2F:98:25:80:63:5B:B2:8D:9E:DF:6A:E7 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:d5:62:26:dd:bc:d2:bb:46:9f:da:27:c0:fc:ff:e1:d2: 85:ad:e3:2f:20:9e:36:57:11:43:54:58:8c:74:20:72:c9:c5: a8:3c:66:b1:ab:0f:a2:78:ff:0f:8d:10:8a:40:a6:80:81:d8: 6c:65:1d:f2:a7:a7:47:15:c6:50:cb:57:e1:92:9a:76:c4:73: 5f:94:7f:1c:8b:96:9b:80:57:b7:da:72:ad:d9:f0:b8:62:e3: 7a:f1:6e:d0:66:9d:0c:32:1e:4a:ca:e4:65:8b:ec:a4:71:cf: c2:9e:f0:80:c3:21:f1:d0:51:df:df:74:87:11:54:c6:4e:ab: 09:2f:06:92:5b:9f:f2:ef:ba:1c:2d:4a:4f:60:ea:45:94:79: 52:fb:60:3f:4e:44:9e:fe:be:04:a2:71:98:c8:12:8c:5a:4c: 96:c2:f7:59:53:a1:ca:d4:bf:90:9f:52:f3:33:0f:b0:21:51: 7e:ad:f2:3f:39:14:33:db:9e:16:fd:dd:98:fa:3d:08:b4:ef: 22:cd:22:76:ca:36:13:89:39:b1:13:2e:8c:c4:2b:20:f2:6b: 18:fa:f0:d0:67:75:fe:dd:02:d3:20:5a:c2:7b:e2:21:72:f0: d0:fe:db:c6:2b:f1:bd:41:54:5b:6e:15:a2:18:f1:85:a8:3b: de:96:25:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjUwNzE4MjEyMzA3WhcNMjUwNzI1MjEyMzA3WjAYMRYwFAYD VQQDEw02ODdhYmIzYi01ZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ApQtJIR/j19lE45kPtony8PKF2Fv2WSDutxtcvM49daGAu/ohLR8s1QP4fB mPIhRZKnmJZZUL2J3miaeQFFd6/CxTXOPAOI5cZcZP1xIoIKmMdZ24CG5t41AxUR oXSM5WKd7TI9oDuaMKZq2veoWsJjIrGgDWO5hxF4SRQMMwO557z72d4gUE407koj 1vbP+0K+GbcGFO5CQTBUPf5LBSMwIJ29Hj+BoVxlf1za0l4det8ZBKJssZsfj4w+ KpWpxg13GGko3TlaCvy7QsVKxbbwlskLDJP2UPWk8qw0wf0bhrlrfAWgO5uIGmAz 6zaJuVytrcIYJnk/0m23K88vYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtpGBlg vMpbL5glgGNbso2e32rnMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3JtViJt280rtGn9onwPz/4dKFreMvIJ42VxFDVFiMdCByycWoPGax qw+ieP8PjRCKQKaAgdhsZR3yp6dHFcZQy1fhkpp2xHNflH8ci5abgFe32nKt2fC4 YuN68W7QZp0MMh5KyuRli+ykcc/CnvCAwyHx0FHf33SHEVTGTqsJLwaSW5/y77oc LUpPYOpFlHlS+2A/TkSe/r4EonGYyBKMWkyWwvdZU6HK1L+Qn1LzMw+wIVF+rfI/ ORQz254W/d2Y+j0ItO8izSJ2yjYTiTmxEy6MxCsg8msY+vDQZ3X+3QLTIFrCe+Ih cvDQ/tvGK/G9QVRbbhWiGPGFqDveliXm -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:16 2025 by rpki-client