$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json) Hash identifier: n4w0/GtHoc0GOAS7dpOZ04/3F427FU9+CGtTtZhHIvs= Subject key identifier: 0B:AB:A8:5D:9F:C9:E1:FE:89:C4:8C:2E:98:C1:20:9D:3E:53:D2:D4 Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft Manifest number: 0782 Signing time: Sun 20 Jul 2025 21:36:56 +0000 Manifest this update: Sun 20 Jul 2025 21:36:55 +0000 Manifest next update: Sun 27 Jul 2025 21:36:55 +0000 Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: MblEc8+Cmy8V2uNwCh0R80smWr0XwQl+sjHnweT88nI=) 2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: QnFh/0YdNLZr/ZfMn+21+lOUTuFHow1/2U5v+xOLivo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Validity Not Before: Jul 20 21:36:55 2025 GMT Not After : Jul 27 21:36:55 2025 GMT Subject: CN=687d6177-d8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b8:f7:06:dd:c0:14:f8:db:44:9b:2a:76:5b: 73:05:46:32:28:7d:66:69:be:0b:d6:1a:74:bc:c2: 0b:de:86:de:2b:9d:ac:f8:9e:da:94:8e:21:bb:0f: c0:88:8b:75:bc:b1:2d:fd:e8:f7:c0:3a:7c:39:e4: 0a:67:23:48:ab:ed:46:48:4e:b6:ea:b9:12:a8:4e: 95:38:8b:cb:da:1c:33:4b:8b:38:2f:5c:8c:d1:4e: dd:99:f3:74:00:63:45:6b:fe:95:18:69:f7:90:72: 60:e8:e4:3f:38:a3:b1:77:cb:cc:13:a0:35:77:62: e7:42:c6:5b:9a:6e:06:92:20:b0:b7:aa:ad:df:2f: 45:ff:52:f0:37:72:ce:24:c7:a1:ee:48:08:37:05: 5b:16:1d:a1:fd:bd:8d:aa:4b:8d:74:6c:f1:bd:e0: e4:ac:b6:63:c2:4f:dd:8d:2d:5a:21:ad:64:01:2d: 67:8e:d8:ca:a8:cb:49:d3:42:38:71:5a:9c:b6:eb: d8:b7:70:12:7e:98:f3:61:4a:a9:f1:26:4e:38:27: 63:d3:14:3c:cc:05:eb:9a:a9:1e:d0:af:b2:67:f7: 8b:1b:dc:80:92:e3:d1:11:ba:da:bf:1a:68:c8:59: c1:8c:17:a9:6e:51:33:46:05:76:0f:d2:dd:f7:85: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:A8:5D:9F:C9:E1:FE:89:C4:8C:2E:98:C1:20:9D:3E:53:D2:D4 X509v3 Authority Key Identifier: keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d7:82:6f:89:cc:ec:59:c5:c5:07:b0:18:1c:b2:9e:46:45: ac:8a:c3:d0:c5:c3:5c:22:24:b4:68:0e:d0:ca:98:86:df:82: 16:84:5c:43:7f:3d:8b:13:64:8f:08:32:0e:4a:5e:3d:d4:1a: f1:c6:59:60:2b:db:3b:15:09:1b:9e:37:67:33:85:89:e4:5e: 3c:bb:df:2a:cd:ca:38:03:8e:7e:ce:04:c7:0e:c2:8a:64:1a: ab:98:9c:59:ba:bc:b6:a5:57:c5:87:53:a6:34:57:0c:a4:4f: 98:6b:01:a9:de:2b:74:ee:e2:75:52:ad:ad:ff:f9:fd:58:51: 72:b6:4e:89:b0:93:4d:da:11:3b:ef:ac:66:aa:f8:02:93:79: a4:fe:8a:6e:56:0d:8b:e2:70:21:e0:75:7c:76:b0:d0:ab:a6: 16:1f:54:08:19:4a:ed:43:0d:a2:5b:e1:ad:63:ee:79:41:9d: e6:50:c4:f1:d4:ce:f0:93:70:31:7c:17:50:0c:c3:96:ef:92: ac:76:37:fd:88:d6:48:30:63:41:e9:83:67:f4:6a:57:d0:ee: 92:1f:04:f1:43:99:df:29:0b:2d:1f:94:52:da:80:9c:db:05: 17:3f:fa:7a:0a:68:8c:94:c9:26:ed:39:23:f9:46:75:d9:83: 7e:01:5e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4 QjNDOTc5QUUwHhcNMjUwNzIwMjEzNjU1WhcNMjUwNzI3MjEzNjU1WjAYMRYwFAYD VQQDEw02ODdkNjE3Ny1kOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Lj3Bt3AFPjbRJsqdltzBUYyKH1mab4L1hp0vMIL3obeK52s+J7alI4huw/A iIt1vLEt/ej3wDp8OeQKZyNIq+1GSE626rkSqE6VOIvL2hwzS4s4L1yM0U7dmfN0 AGNFa/6VGGn3kHJg6OQ/OKOxd8vME6A1d2LnQsZbmm4GkiCwt6qt3y9F/1LwN3LO JMeh7kgINwVbFh2h/b2NqkuNdGzxveDkrLZjwk/djS1aIa1kAS1njtjKqMtJ00I4 cVqctuvYt3ASfpjzYUqp8SZOOCdj0xQ8zAXrmqke0K+yZ/eLG9yAkuPREbravxpo yFnBjBepblEzRgV2D9Ld94UDfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAurqF2f yeH+icSMLpjBIJ0+U9LUMB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUY4RS9EOTRBNzU5NDFDMTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQ cVNhM2RuYXBpLXlMUEplYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC14JviczsWcXFB7AYHLKeRkWsisPQxcNcIiS0aA7QypiG34IWhFxD fz2LE2SPCDIOSl491BrxxllgK9s7FQkbnjdnM4WJ5F48u98qzco4A45+zgTHDsKK ZBqrmJxZury2pVfFh1OmNFcMpE+YawGp3it07uJ1Uq2t//n9WFFytk6JsJNN2hE7 76xmqvgCk3mk/opuVg2L4nAh4HV8drDQq6YWH1QIGUrtQw2iW+GtY+55QZ3mUMTx 1M7wk3AxfBdQDMOW75Ksdjf9iNZIMGNB6YNn9GpX0O6SHwTxQ5nfKQstH5RS2oCc 2wUXP/p6CmiMlMkm7Tkj+UZ12YN+AV5P -----END CERTIFICATE-----Generated at Mon Jul 21 12:30:10 2025 by rpki-client