$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft File: PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json) Hash identifier: sxxYNqJXsRvgqkHwLQY3Y5W7KANDhpZgEaezOdgylq0= Subject key identifier: CA:05:B6:A0:05:FB:FE:B9:7B:B1:9F:8B:D8:A2:B3:DF:1D:B9:14:5F Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft Manifest number: 0925 Signing time: Sun 20 Jul 2025 20:28:06 +0000 Manifest this update: Sun 20 Jul 2025 20:28:06 +0000 Manifest next update: Sun 27 Jul 2025 20:28:06 +0000 Files and hashes: 1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: eZXhIPZo2Q3R0fG6aDq6s09/9MaqMNYWhXTvGX+6Pa4=) 2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: WXRoqSuJ7ylbw7K72AAOsaJLTW5zfW38lPIwxiTLRCE=) 3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: DQp5W/vsl6Br/ogSstkorS/8VooztvuTJ4JXbRwCOMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: Jul 20 20:28:06 2025 GMT Not After : Jul 27 20:28:06 2025 GMT Subject: CN=687d5156-5e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:dd:b0:2a:e8:f8:a9:a7:2f:0c:6d:52:49: 87:dd:ee:89:f0:ad:93:80:be:58:fb:0a:d8:a0:ca: 72:c3:ba:58:c3:c6:4a:c0:6b:a7:93:71:5e:10:9b: c0:a2:94:71:a8:93:64:df:6c:72:3d:06:66:26:4a: ba:21:ad:5f:2f:e2:1f:91:97:95:92:5d:91:5f:a9: 9b:93:84:e5:2d:d7:b6:a9:d1:0e:aa:52:0c:a3:29: 90:0f:42:68:01:1e:ce:09:9f:a0:f9:96:8a:19:36: b5:46:39:a9:0e:0a:a8:eb:9a:77:99:20:6f:77:d8: 57:4c:32:1a:6e:e7:34:06:17:94:01:94:37:7a:23: 9a:59:f1:f2:79:f9:b7:bd:1d:fd:60:0b:eb:10:33: 4e:ee:04:6c:cf:32:6f:5c:d6:25:f3:19:b0:d7:3d: 8d:90:e9:3c:ca:d1:16:44:d9:52:65:9f:21:a6:4e: c3:86:6c:f0:13:09:cc:90:2b:01:86:f6:bd:9b:e9: f7:b2:6b:a2:9f:7b:9b:dc:fa:fa:cc:4d:3d:70:70: c1:31:29:23:cc:43:a6:a5:26:31:75:52:09:68:d7: 34:3e:f2:4c:05:8d:a5:34:b4:3c:9c:11:49:f6:5b: d8:b7:32:ae:f3:a8:98:0d:d8:87:e2:61:fd:1f:dc: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:05:B6:A0:05:FB:FE:B9:7B:B1:9F:8B:D8:A2:B3:DF:1D:B9:14:5F X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7e:8a:fd:58:10:2e:5b:24:86:d6:19:35:3d:f1:77:44:27: 51:6b:70:51:02:38:35:5f:23:e1:dd:9f:66:2d:9d:25:80:a5: a0:47:19:eb:0f:9d:c6:56:03:3c:41:9f:9a:94:73:ab:43:49: ff:88:8b:2f:58:d0:73:4c:c1:96:5b:fc:88:6f:5d:c2:6c:be: 6b:5d:c4:3f:c9:24:47:d7:ae:81:a8:9f:01:d1:34:cc:60:52: 75:b0:f1:32:6b:e7:d8:e4:1f:7c:50:70:be:79:44:2a:dd:59: 77:db:cc:31:59:b5:c9:83:c9:3f:3a:07:d7:76:b1:4e:39:10: 59:a7:1b:9b:76:75:14:6a:56:c7:18:f0:67:7b:6a:5c:3b:2c: 46:ce:31:35:be:b2:77:9e:f9:f1:61:0c:ef:3b:17:e0:8e:48: c6:75:b7:24:b9:bc:4b:d5:27:8e:e3:eb:de:90:fc:db:2c:42: f6:0f:36:74:3c:ee:96:64:45:91:fb:4d:56:ad:9c:fd:b5:00: c3:d9:ca:47:4e:40:2c:70:f6:5b:9c:ba:a3:e4:7e:7d:5d:da: d7:12:7d:b9:b6:9a:ff:59:45:60:83:df:de:92:07:3a:3d:60: df:b6:fc:76:12:08:39:1b:68:3a:c0:6a:f8:cd:ca:77:b9:91: d2:19:7c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjUwNzIwMjAyODA2WhcNMjUwNzI3MjAyODA2WjAYMRYwFAYD VQQDEw02ODdkNTE1Ni01ZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SbdsCro+KmnLwxtUkmH3e6J8K2TgL5Y+wrYoMpyw7pYw8ZKwGunk3FeEJvA opRxqJNk32xyPQZmJkq6Ia1fL+IfkZeVkl2RX6mbk4TlLde2qdEOqlIMoymQD0Jo AR7OCZ+g+ZaKGTa1RjmpDgqo65p3mSBvd9hXTDIabuc0BheUAZQ3eiOaWfHyefm3 vR39YAvrEDNO7gRszzJvXNYl8xmw1z2NkOk8ytEWRNlSZZ8hpk7DhmzwEwnMkCsB hva9m+n3smuin3ub3Pr6zE09cHDBMSkjzEOmpSYxdVIJaNc0PvJMBY2lNLQ8nBFJ 9lvYtzKu86iYDdiH4mH9H9z1QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoFtqAF +/65e7Gfi9iis98duRRfMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE5MC9DMzczMDBFOEFFMTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1 a2x1N3ZjWVRLeEtYWGJTbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBefor9WBAuWySG1hk1PfF3RCdRa3BRAjg1XyPh3Z9mLZ0lgKWgRxnr D53GVgM8QZ+alHOrQ0n/iIsvWNBzTMGWW/yIb13CbL5rXcQ/ySRH166BqJ8B0TTM YFJ1sPEya+fY5B98UHC+eUQq3Vl328wxWbXJg8k/OgfXdrFOORBZpxubdnUUalbH GPBne2pcOyxGzjE1vrJ3nvnxYQzvOxfgjkjGdbckubxL1SeO4+vekPzbLEL2DzZ0 PO6WZEWR+01WrZz9tQDD2cpHTkAscPZbnLqj5H59XdrXEn25tpr/WUVgg9/ekgc6 PWDftvx2Egg5G2g6wGr4zcp3uZHSGXzY -----END CERTIFICATE-----Generated at Tue Jul 22 00:01:18 2025 by rpki-client