$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: zn0zEeWnYsv/nQ4dzuETApwxMYLBSn/eaFWnr3ARBQs= Subject key identifier: FC:7B:3B:94:EB:65:E3:41:E7:20:8B:52:D8:8A:D4:73:8C:EF:73:72 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02C3 Signing time: Mon 21 Jul 2025 01:43:13 +0000 Manifest this update: Mon 21 Jul 2025 01:43:13 +0000 Manifest next update: Mon 28 Jul 2025 01:43:13 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: M7npuOrZXExrLt0ozClTbU1JerrKfuRzjh/1uQjXN7k=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Jul 21 01:43:13 2025 GMT Not After : Jul 28 01:43:13 2025 GMT Subject: CN=687d9b31-a957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:ff:e6:7f:15:3b:05:80:f2:00:10:ed:d8: f9:3e:ec:75:d0:0c:4a:4d:75:46:18:f2:b5:80:88: 04:2e:62:f5:55:38:2c:68:f6:b5:45:d8:c2:1f:ee: 66:bb:e3:79:9f:74:cf:41:e2:60:73:e5:9e:89:c8: 32:45:1d:5d:d2:05:ec:a9:49:37:b1:59:65:6c:e3: 40:17:f2:e1:de:18:40:ef:3e:39:94:b0:53:15:04: ab:76:97:63:10:58:03:e2:20:d6:de:34:f7:1a:d0: 5f:60:6f:70:25:8e:15:cd:5c:be:0d:b6:29:cd:9c: 9b:3e:eb:07:9d:7d:fb:99:63:0f:78:88:fc:cb:42: 7c:49:03:ee:f0:d6:ea:f1:37:56:a4:a8:0a:41:79: 00:45:c3:81:0d:f4:f4:17:33:79:e0:cd:40:d9:26: 3c:25:57:57:30:1a:4d:75:68:14:63:bb:bb:37:93: 26:44:63:04:4f:d7:b3:13:0e:54:20:a2:42:2a:95: 3f:9a:68:ee:e8:fb:c0:c9:19:69:2f:bd:94:d6:e5: 15:1b:75:e2:bc:7f:b7:a5:2a:a1:bc:46:14:05:ad: 7e:47:36:a0:ec:d6:7d:60:e5:15:cb:3c:68:7f:d7: 92:6b:dc:88:b8:ce:7d:27:62:00:32:fe:33:af:6e: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:3B:94:EB:65:E3:41:E7:20:8B:52:D8:8A:D4:73:8C:EF:73:72 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8b:ab:89:69:3c:2d:4e:0a:6c:24:32:99:46:d3:61:18:a8: ba:bf:01:b2:ed:54:31:0e:82:38:17:d2:43:02:b3:a9:99:04: e5:67:28:9e:f3:df:dc:d2:39:a0:fa:d5:09:49:5e:7a:ca:84: 8a:be:b4:fe:97:f0:70:ac:ad:54:c7:56:35:bf:f8:cb:28:0a: 08:70:91:7f:04:99:ba:44:06:a8:e5:a3:73:97:b3:28:73:1d: 5f:e1:db:4e:7c:cd:5e:14:9f:97:3a:bb:15:31:ed:67:b7:18: c2:5d:1c:8c:f7:26:f0:75:6a:6d:6a:22:36:e0:59:b5:ba:4b: 1b:d2:d9:50:01:b1:ae:9f:c2:33:ae:f3:46:88:cf:c6:c8:b4: fd:c8:28:8a:2e:89:9a:d3:1b:6c:59:50:db:27:fd:29:24:9d: 6c:96:73:ef:41:57:e9:a4:5a:24:05:fa:fd:64:46:38:a8:63: 7c:93:ea:be:b1:20:0c:28:72:ef:84:53:dd:25:b0:2e:92:26: 61:a3:06:31:3c:aa:35:06:a2:88:dc:ec:7c:37:2e:3d:69:da: c2:57:fd:bc:78:02:bc:d5:ea:ea:38:cf:97:22:20:54:4a:b3: 9c:ac:da:9d:28:9e:53:ec:e2:ec:f6:59:4b:10:e1:41:1c:2b: eb:cd:fa:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwNzIxMDE0MzEzWhcNMjUwNzI4MDE0MzEzWjAYMRYwFAYD VQQDEw02ODdkOWIzMS1hOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIb/5n8VOwWA8gAQ7dj5Pux10AxKTXVGGPK1gIgELmL1VTgsaPa1RdjCH+5m u+N5n3TPQeJgc+WeicgyRR1d0gXsqUk3sVllbONAF/Lh3hhA7z45lLBTFQSrdpdj EFgD4iDW3jT3GtBfYG9wJY4VzVy+DbYpzZybPusHnX37mWMPeIj8y0J8SQPu8Nbq 8TdWpKgKQXkARcOBDfT0FzN54M1A2SY8JVdXMBpNdWgUY7u7N5MmRGMET9ezEw5U IKJCKpU/mmju6PvAyRlpL72U1uUVG3XivH+3pSqhvEYUBa1+Rzag7NZ9YOUVyzxo f9eSa9yIuM59J2IAMv4zr265vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx7O5Tr ZeNB5yCLUtiK1HOM73NyMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7i6uJaTwtTgpsJDKZRtNhGKi6vwGy7VQxDoI4F9JDArOpmQTlZyie 89/c0jmg+tUJSV56yoSKvrT+l/BwrK1Ux1Y1v/jLKAoIcJF/BJm6RAao5aNzl7Mo cx1f4dtOfM1eFJ+XOrsVMe1ntxjCXRyM9ybwdWptaiI24Fm1uksb0tlQAbGun8Iz rvNGiM/GyLT9yCiKLoma0xtsWVDbJ/0pJJ1slnPvQVfppFokBfr9ZEY4qGN8k+q+ sSAMKHLvhFPdJbAukiZhowYxPKo1BqKI3Ox8Ny49adrCV/28eAK81erqOM+XIiBU SrOcrNqdKJ5T7OLs9llLEOFBHCvrzfpR -----END CERTIFICATE-----Generated at Mon Jul 21 07:04:23 2025 by rpki-client