$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: q5yUvrG0GADwO4fVOhIJxzk8YC3IzzeFl6AWncEM70U= Subject key identifier: 4D:B1:28:BE:F4:92:AF:84:CD:37:6D:9A:5D:D7:B2:84:90:49:86:02 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 028F Signing time: Sat 19 Jul 2025 02:01:20 +0000 Manifest this update: Sat 19 Jul 2025 02:01:19 +0000 Manifest next update: Sat 26 Jul 2025 02:01:19 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: vvsU6FDWFpUqFCm+bxF3HYenogTzTu23wK2LjUdA40M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Jul 19 02:01:19 2025 GMT Not After : Jul 26 02:01:19 2025 GMT Subject: CN=687afc6f-d8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:c6:f3:4c:2b:99:cf:46:dc:00:ce:c5:b9: 22:f5:cc:1e:32:87:3a:4f:ea:4c:8e:f4:4c:f0:a0: ec:ce:38:23:24:8c:9b:9a:27:ee:11:1c:e4:85:e4: 38:99:a7:e0:11:a5:84:89:fc:d2:cf:f8:c4:70:46: 44:9b:a4:39:5c:ed:b0:2c:80:c6:3d:75:cf:59:72: ff:ef:a1:91:78:67:f1:c4:0d:94:5e:b4:3d:a1:a1: c7:a9:75:d2:45:e8:b4:05:3a:02:40:4c:fa:bb:59: 08:ee:aa:9d:ab:92:27:3e:79:ac:39:15:bc:90:44: 8f:8e:8f:14:ce:0c:b1:6b:7d:61:43:05:a0:74:37: 53:07:41:17:07:94:a7:cb:fe:67:7d:25:b4:be:b7: 26:0c:f1:55:ac:b5:6f:ed:0b:58:8e:25:60:2a:1e: 1f:ef:41:10:62:e3:8f:96:ce:50:a2:71:ac:1a:44: 4e:21:9e:76:59:4a:b3:39:59:a0:31:7a:93:39:69: 3f:92:cd:18:58:4c:c4:c4:00:a8:bb:95:a7:0a:14: 29:1c:9a:15:ef:12:dc:de:5e:b3:87:63:11:82:bf: 19:4d:da:c4:81:28:7f:20:04:48:63:04:8b:33:a4: f3:f5:97:34:75:0f:08:c0:d7:dd:74:ca:73:1c:d2: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:28:BE:F4:92:AF:84:CD:37:6D:9A:5D:D7:B2:84:90:49:86:02 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4b:e3:d4:c1:54:77:60:39:d9:23:ad:e2:60:6f:56:73:10: a5:37:e0:8a:35:58:bc:9d:f1:0a:19:e2:f7:a0:66:13:06:7d: ca:65:01:f0:c3:22:3a:25:dd:a4:5d:3c:72:1c:8c:b7:36:fb: a1:f9:53:1f:d8:f1:d3:bd:94:27:fd:f1:78:49:d3:ec:69:15: a9:db:6f:42:5a:e9:7e:b6:cd:e4:a5:59:2c:36:4d:7a:f6:bb: c0:f2:21:61:1f:13:5f:64:85:89:ab:65:4b:f2:a3:7f:d2:96: 7f:6b:ca:44:cf:eb:da:d3:6e:4c:a9:d7:6b:d2:35:61:b5:f3: 15:89:19:36:8f:a5:52:62:9e:f6:51:1f:bd:97:29:da:0e:3f: ce:bc:27:ab:a4:a1:cd:70:ba:27:4e:a6:de:51:cc:bd:60:67: 0b:68:11:50:f2:c8:a3:f9:f5:bd:b7:e2:49:82:36:02:42:77: e6:1a:8c:9a:03:d5:1e:20:43:28:55:ae:fc:92:69:85:60:e5: 5c:fb:95:5f:57:73:85:81:de:c4:50:53:0f:57:29:a5:af:35: 32:38:60:58:2b:e2:4d:f6:bf:1e:03:48:dd:43:01:48:39:b7: ca:93:fa:42:8a:c4:b5:95:2d:2e:76:41:99:b9:45:97:83:d3: 4c:65:b2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwNzE5MDIwMTE5WhcNMjUwNzI2MDIwMTE5WjAYMRYwFAYD VQQDEw02ODdhZmM2Zi1kOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GvG80wrmc9G3ADOxbki9cweMoc6T+pMjvRM8KDszjgjJIybmifuERzkheQ4 mafgEaWEifzSz/jEcEZEm6Q5XO2wLIDGPXXPWXL/76GReGfxxA2UXrQ9oaHHqXXS Rei0BToCQEz6u1kI7qqdq5InPnmsORW8kESPjo8Uzgyxa31hQwWgdDdTB0EXB5Sn y/5nfSW0vrcmDPFVrLVv7QtYjiVgKh4f70EQYuOPls5QonGsGkROIZ52WUqzOVmg MXqTOWk/ks0YWEzExACou5WnChQpHJoV7xLc3l6zh2MRgr8ZTdrEgSh/IARIYwSL M6Tz9Zc0dQ8IwNfddMpzHNKuIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2xKL70 kq+EzTdtml3XsoSQSYYCMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmS+PUwVR3YDnZI63iYG9WcxClN+CKNVi8nfEKGeL3oGYTBn3KZQHw wyI6Jd2kXTxyHIy3Nvuh+VMf2PHTvZQn/fF4SdPsaRWp229CWul+ts3kpVksNk16 9rvA8iFhHxNfZIWJq2VL8qN/0pZ/a8pEz+va025Mqddr0jVhtfMViRk2j6VSYp72 UR+9lynaDj/OvCerpKHNcLonTqbeUcy9YGcLaBFQ8sij+fW9t+JJgjYCQnfmGoya A9UeIEMoVa78kmmFYOVc+5VfV3OFgd7EUFMPVymlrzUyOGBYK+JN9r8eA0jdQwFI ObfKk/pCisS1lS0udkGZuUWXg9NMZbIV -----END CERTIFICATE-----Generated at Sun Jul 20 11:41:56 2025 by rpki-client