$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: jY4YoTo8x/ZYz/toRQiz/PBveH1oTDu2tXAnU0DMAWI= Subject key identifier: B2:3C:62:84:10:36:09:EF:4C:F9:FD:E4:47:19:54:90:E7:7F:26:6E Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 0496 Signing time: Sat 19 Jul 2025 00:22:01 +0000 Manifest this update: Sat 19 Jul 2025 00:22:01 +0000 Manifest next update: Sat 26 Jul 2025 00:22:01 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: AsfRYQ19FGxxs5Y6leF8y+6P2wWUjgyEK5zJpSJRV98=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Jul 19 00:22:01 2025 GMT Not After : Jul 26 00:22:01 2025 GMT Subject: CN=687ae529-60e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:6e:80:67:ca:ac:0f:76:c0:0d:02:8b:bc: c0:78:32:92:3b:2d:dc:54:e2:2f:28:64:92:56:d9: 4b:b7:90:97:58:c0:7d:a3:21:9c:de:6c:35:12:96: 4e:8b:a5:25:b4:d2:78:a1:68:ea:f1:7b:45:4e:1f: 14:8d:c8:84:eb:f3:02:b0:fc:29:a2:82:83:60:cb: 1c:ab:fc:0f:d6:10:4b:ee:9d:17:3b:1e:6d:23:83: aa:d4:51:cc:7b:98:4f:a0:ba:fc:a8:26:0d:d0:2b: db:77:77:44:0e:14:6d:58:ce:d5:5d:fb:5e:7b:7e: 3e:24:ef:9a:1b:5a:49:ed:3c:70:bb:12:7b:53:c8: d8:5b:38:8a:da:47:1d:7d:39:e8:2a:0c:9f:e4:7e: 8e:40:43:37:03:3e:23:b6:54:d2:45:1e:41:b9:71: 4d:0e:a5:34:bf:98:69:f3:93:b6:75:de:ad:97:0a: cf:7d:96:0c:82:8e:a4:44:2a:82:08:46:7f:fc:47: 87:23:bb:e7:85:c6:3a:92:91:af:48:e0:57:50:eb: e4:57:55:66:b4:ca:40:c3:09:0e:a7:71:40:b4:e5: 9c:b1:d2:eb:3a:c9:89:bb:e7:b7:a5:75:7e:92:e4: 40:74:23:e0:b8:35:88:ff:9a:cc:1b:5e:87:76:1c: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:62:84:10:36:09:EF:4C:F9:FD:E4:47:19:54:90:E7:7F:26:6E X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b0:88:45:06:47:bf:36:df:9a:02:9c:12:75:d0:04:92:69: cd:66:55:aa:bb:73:7a:28:78:85:28:4c:cb:37:62:17:a8:e6: 94:04:19:6e:70:6b:fe:45:2d:4a:97:9d:34:1b:b5:30:5c:31: 4a:26:e9:9b:91:28:a0:0f:60:90:8a:f8:d6:85:e8:a8:8f:95: 23:e4:61:d5:b4:26:f5:db:82:66:8d:8d:a6:05:ee:32:38:26: 00:e7:15:27:b9:19:39:77:41:2a:75:c0:fe:e2:16:75:42:46: 64:d8:ba:81:82:a5:c3:ba:c3:78:7d:ef:82:24:73:8c:2a:05: 66:72:5a:88:ad:d0:6a:d0:ae:d9:92:4f:a4:49:8e:d1:00:4b: 97:bf:c9:d9:98:ca:71:6a:1f:8b:90:22:c5:ff:a0:fb:de:43: 34:88:95:73:db:e4:ce:e4:ec:cb:e7:05:f1:4f:e9:20:4c:1d: 49:05:85:49:1d:d2:54:e4:17:ac:63:fa:b2:f7:cb:01:47:8f: 38:37:f9:ad:83:17:6c:2c:af:6c:a4:08:d6:d7:cb:2f:c0:34: 6b:0e:85:f5:53:a7:50:5b:48:2e:77:cc:8e:db:4a:70:73:dd: ac:cf:3e:14:52:9a:1c:3e:60:6b:cc:ac:33:ab:f8:cc:35:a7: 73:13:15:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUwNzE5MDAyMjAxWhcNMjUwNzI2MDAyMjAxWjAYMRYwFAYD VQQDEw02ODdhZTUyOS02MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy79ugGfKrA92wA0Ci7zAeDKSOy3cVOIvKGSSVtlLt5CXWMB9oyGc3mw1EpZO i6UltNJ4oWjq8XtFTh8UjciE6/MCsPwpooKDYMscq/wP1hBL7p0XOx5tI4Oq1FHM e5hPoLr8qCYN0Cvbd3dEDhRtWM7VXftee34+JO+aG1pJ7TxwuxJ7U8jYWziK2kcd fTnoKgyf5H6OQEM3Az4jtlTSRR5BuXFNDqU0v5hp85O2dd6tlwrPfZYMgo6kRCqC CEZ//EeHI7vnhcY6kpGvSOBXUOvkV1VmtMpAwwkOp3FAtOWcsdLrOsmJu+e3pXV+ kuRAdCPguDWI/5rMG16HdhyHgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI8YoQQ NgnvTPn95EcZVJDnfyZuMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3sIhFBke/Nt+aApwSddAEkmnNZlWqu3N6KHiFKEzLN2IXqOaUBBlu cGv+RS1Kl500G7UwXDFKJumbkSigD2CQivjWheioj5Uj5GHVtCb124JmjY2mBe4y OCYA5xUnuRk5d0EqdcD+4hZ1QkZk2LqBgqXDusN4fe+CJHOMKgVmclqIrdBq0K7Z kk+kSY7RAEuXv8nZmMpxah+LkCLF/6D73kM0iJVz2+TO5OzL5wXxT+kgTB1JBYVJ HdJU5BesY/qy98sBR484N/mtgxdsLK9spAjW18svwDRrDoX1U6dQW0gud8yO20pw c92szz4UUpocPmBrzKwzq/jMNadzExXd -----END CERTIFICATE-----Generated at Sun Jul 20 03:42:15 2025 by rpki-client