$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: 1cqCnhyhf4GnTMONVb+xdCQCCBCVCIl6XyC/5QfEqnE= Subject key identifier: DA:1B:10:E7:40:03:47:2C:71:2D:C9:56:72:0A:DE:83:B3:89:43:E3 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 0203 Signing time: Sat 19 Jul 2025 02:28:46 +0000 Manifest this update: Sat 19 Jul 2025 02:28:46 +0000 Manifest next update: Sat 26 Jul 2025 02:28:46 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 6ynmOPfB5yox0OiifQrQhnqsWcqN4vQ0vb/fPvwde7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Jul 19 02:28:46 2025 GMT Not After : Jul 26 02:28:46 2025 GMT Subject: CN=687b02de-68e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:5e:18:3c:03:c2:43:7d:5c:87:38:a4:67: ea:b5:3c:53:9f:cc:7e:34:d8:16:39:49:82:7b:06: 89:02:8e:d5:12:cd:83:44:c3:84:18:a5:7c:14:a4: c0:67:67:77:82:f4:d2:88:0f:5e:ce:46:eb:2c:e9: 01:26:3b:40:60:a8:3c:4e:08:f7:57:22:13:fb:51: e9:6c:47:70:0b:ed:9d:d0:1a:04:49:2f:83:88:e1: da:06:14:0b:94:92:b0:60:96:a6:a8:b7:7f:37:69: bc:ea:94:d3:de:38:01:8f:ba:a1:74:6a:f4:18:c0: 06:e4:03:d4:54:e3:5a:aa:45:04:95:50:02:b4:69: e3:7f:9e:0e:26:ca:12:bd:f4:7f:12:bf:db:46:98: 3b:7b:49:1d:95:8b:1c:59:62:cf:90:77:f8:3d:a8: 98:e4:94:54:8f:e5:56:10:ea:c7:aa:ea:84:a8:ab: b4:a7:81:3c:a0:ab:24:99:c9:04:28:c2:ef:42:fa: 8e:95:74:48:21:a6:22:35:8b:de:9e:59:06:33:a6: 85:0f:d2:d0:17:fa:d0:58:84:68:f8:1f:98:90:38: 59:c4:1d:0e:8c:e6:e0:70:7c:a8:fb:1e:03:a4:ea: 60:a9:9f:95:74:c7:a1:b7:08:67:03:e0:7a:25:74: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1B:10:E7:40:03:47:2C:71:2D:C9:56:72:0A:DE:83:B3:89:43:E3 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ca:a3:71:94:c3:dc:bc:77:ed:41:e3:e6:f9:53:89:be:91: 05:1a:13:31:c9:98:94:57:a8:47:a2:30:ed:08:04:4d:cf:40: c5:6e:fa:c6:47:c2:ac:7b:fa:11:4a:b8:6d:19:40:90:ff:32: 1e:11:4f:01:da:58:af:f3:ce:95:18:a9:d7:97:9c:c4:35:e4: 66:01:f5:90:28:05:80:9c:fc:6b:fb:03:e9:b8:59:67:91:08: b6:94:4f:c8:91:d4:e5:54:fd:01:dc:00:18:bb:e3:9c:d1:55: 1a:01:d3:ef:b2:01:59:44:58:87:83:3e:db:07:72:6e:d7:27: b6:9a:94:31:c8:03:53:88:f6:00:8a:f5:e3:b0:3e:3a:38:d4: 98:d2:22:15:e3:72:43:de:98:b1:42:8e:3e:36:b9:b5:e7:d3: b6:9c:7d:c9:ee:d2:02:6e:bc:11:d2:1a:0b:dd:f7:78:ab:33: 88:16:22:e5:ee:c6:3a:63:cc:aa:65:b4:6b:59:a5:25:ec:62: 0b:8e:6b:7b:75:3a:18:d1:4e:dd:c8:a2:b0:e2:70:d3:1d:2b: cd:b3:2a:96:64:8e:34:af:4c:bf:67:a6:7b:77:44:af:20:f1: af:43:18:4c:35:9f:80:2b:75:bd:2b:3a:ee:30:b9:94:6c:d6: fc:4f:0f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUwNzE5MDIyODQ2WhcNMjUwNzI2MDIyODQ2WjAYMRYwFAYD VQQDEw02ODdiMDJkZS02OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDheGDwDwkN9XIc4pGfqtTxTn8x+NNgWOUmCewaJAo7VEs2DRMOEGKV8FKTA Z2d3gvTSiA9ezkbrLOkBJjtAYKg8Tgj3VyIT+1HpbEdwC+2d0BoESS+DiOHaBhQL lJKwYJamqLd/N2m86pTT3jgBj7qhdGr0GMAG5APUVONaqkUElVACtGnjf54OJsoS vfR/Er/bRpg7e0kdlYscWWLPkHf4PaiY5JRUj+VWEOrHquqEqKu0p4E8oKskmckE KMLvQvqOlXRIIaYiNYvenlkGM6aFD9LQF/rQWIRo+B+YkDhZxB0OjObgcHyo+x4D pOpgqZ+VdMehtwhnA+B6JXSrVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNobEOdA A0cscS3JVnIK3oOziUPjMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsyqNxlMPcvHftQePm+VOJvpEFGhMxyZiUV6hHojDtCARNz0DFbvrG R8Kse/oRSrhtGUCQ/zIeEU8B2liv886VGKnXl5zENeRmAfWQKAWAnPxr+wPpuFln kQi2lE/IkdTlVP0B3AAYu+Oc0VUaAdPvsgFZRFiHgz7bB3Ju1ye2mpQxyANTiPYA ivXjsD46ONSY0iIV43JD3pixQo4+Nrm159O2nH3J7tICbrwR0hoL3fd4qzOIFiLl 7sY6Y8yqZbRrWaUl7GILjmt7dToY0U7dyKKw4nDTHSvNsyqWZI40r0y/Z6Z7d0Sv IPGvQxhMNZ+AK3W9KzruMLmUbNb8Tw8E -----END CERTIFICATE-----Generated at Sun Jul 20 06:28:33 2025 by rpki-client