$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: grWaLGamY8+wMOWGvncZrxOj1HSFZWuOzwU+PKzt49E= Subject key identifier: 7C:78:FE:ED:C9:F7:FC:56:A6:AF:57:B8:EA:30:6D:8F:61:9C:C8:C8 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 046E Signing time: Sat 19 Jul 2025 00:30:46 +0000 Manifest this update: Sat 19 Jul 2025 00:30:45 +0000 Manifest next update: Sat 26 Jul 2025 00:30:45 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: UKEK8gR/h2SGk9GlOYdlsKuKBBbnBkzFYWa6EcaDpuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Jul 19 00:30:45 2025 GMT Not After : Jul 26 00:30:45 2025 GMT Subject: CN=687ae735-2df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a2:f2:5a:d8:0a:ff:6d:63:c3:07:4d:29:4d: ed:91:87:e4:42:78:6d:c7:02:fb:4c:e5:90:b7:94: 26:6b:f0:e7:5f:0d:73:11:f6:52:b3:26:9e:87:f9: 87:41:7a:95:04:1b:6d:37:6a:60:27:f3:3b:4b:c5: 66:d5:fd:4d:fe:8b:24:7b:63:12:d9:df:28:16:0c: 95:31:56:10:5c:2a:de:c9:04:14:7b:7b:a0:53:c4: ce:9a:dc:7f:89:77:3d:25:d2:09:3b:b4:21:5d:c7: 25:5f:e4:2a:05:c2:5c:5f:bd:12:6c:e2:e2:b0:14: 75:ea:dd:4b:c9:2a:c9:b7:3c:c5:70:90:4d:6a:00: 43:4b:1e:79:b8:c2:d3:62:7a:b6:e2:e1:6b:ee:1d: 38:74:e2:79:03:43:42:bd:f6:fd:f9:57:90:93:d8: 6d:de:e6:91:54:45:da:46:b5:a8:b0:c5:7a:e8:96: 60:ae:56:c5:75:28:69:05:fc:b1:5e:62:7f:2e:14: d1:c8:df:35:cd:44:1d:b0:b4:1d:9f:0d:3d:20:33: 4e:8f:24:ab:fc:12:1b:7e:11:dc:48:47:17:d8:ff: b7:3c:85:45:a0:03:e3:8c:11:ac:41:b4:65:72:12: 90:d7:b1:e0:50:ed:99:e0:56:72:68:52:cb:9c:17: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:FE:ED:C9:F7:FC:56:A6:AF:57:B8:EA:30:6D:8F:61:9C:C8:C8 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:dd:79:6b:4c:10:74:71:52:95:91:ec:fc:05:0a:53:b0:7f: 3b:62:9a:97:b8:1d:e8:f5:6f:03:49:95:2b:b1:f0:c9:b8:ea: 99:30:01:3e:e5:39:de:7d:4f:12:e3:d7:1d:a8:41:a4:bb:0a: 99:1f:51:a0:fe:79:e1:37:57:3a:0c:4e:dc:bc:dc:f4:4b:c6: 2e:de:de:ba:cc:44:b4:3c:62:1f:65:5a:2b:90:3e:81:98:a2: d2:73:69:3b:05:3c:e7:f6:0f:32:02:00:31:dd:98:96:2e:cc: 93:4d:48:47:06:39:78:3d:0a:4c:c6:9c:49:79:82:6a:67:92: 29:0c:73:a2:ad:9d:ee:cc:79:59:86:8d:d3:47:13:03:22:2c: c5:26:c2:46:1e:0c:aa:32:8d:b6:a9:6e:9a:1b:e9:c1:0a:37: 01:cf:f6:3f:89:10:3e:38:3a:80:50:b4:db:05:7c:26:de:3d: 6c:fd:c1:bf:ab:bb:53:3f:f3:d7:20:50:90:27:6c:31:f0:ea: 84:1f:ee:5e:3d:6d:4f:ac:c2:a3:80:0f:89:c0:3d:d9:b4:4c: af:78:9c:8e:4e:ff:0f:d0:a1:f8:54:64:7d:cc:49:56:ff:74: 58:d6:ba:80:e2:3b:e2:ce:de:58:8a:08:3b:25:7f:02:fd:5c: db:2d:05:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUwNzE5MDAzMDQ1WhcNMjUwNzI2MDAzMDQ1WjAYMRYwFAYD VQQDEw02ODdhZTczNS0yZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66LyWtgK/21jwwdNKU3tkYfkQnhtxwL7TOWQt5Qma/DnXw1zEfZSsyaeh/mH QXqVBBttN2pgJ/M7S8Vm1f1N/oske2MS2d8oFgyVMVYQXCreyQQUe3ugU8TOmtx/ iXc9JdIJO7QhXcclX+QqBcJcX70SbOLisBR16t1LySrJtzzFcJBNagBDSx55uMLT Ynq24uFr7h04dOJ5A0NCvfb9+VeQk9ht3uaRVEXaRrWosMV66JZgrlbFdShpBfyx XmJ/LhTRyN81zUQdsLQdnw09IDNOjySr/BIbfhHcSEcX2P+3PIVFoAPjjBGsQbRl chKQ17HgUO2Z4FZyaFLLnBcyLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx4/u3J 9/xWpq9XuOowbY9hnMjIMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV3XlrTBB0cVKVkez8BQpTsH87YpqXuB3o9W8DSZUrsfDJuOqZMAE+ 5TnefU8S49cdqEGkuwqZH1Gg/nnhN1c6DE7cvNz0S8Yu3t66zES0PGIfZVorkD6B mKLSc2k7BTzn9g8yAgAx3ZiWLsyTTUhHBjl4PQpMxpxJeYJqZ5IpDHOirZ3uzHlZ ho3TRxMDIizFJsJGHgyqMo22qW6aG+nBCjcBz/Y/iRA+ODqAULTbBXwm3j1s/cG/ q7tTP/PXIFCQJ2wx8OqEH+5ePW1PrMKjgA+JwD3ZtEyveJyOTv8P0KH4VGR9zElW /3RY1rqA4jvizt5Yigg7JX8C/VzbLQUm -----END CERTIFICATE-----Generated at Sun Jul 20 03:35:56 2025 by rpki-client