$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: SSeVPWy6RhXUpseDy1q4cY13ZXjYCTaf7DtaOVzoyH4= Subject key identifier: 78:EF:BE:05:44:BD:76:F3:A6:AA:B9:EE:AB:48:1A:3C:23:54:B8:D9 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 34 Signing time: Mon 21 Jul 2025 07:50:01 +0000 Manifest this update: Mon 21 Jul 2025 07:50:01 +0000 Manifest next update: Mon 28 Jul 2025 07:50:01 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: cIyLciEnsx1ND8jANhcnAvXI6999Ev2zamS40ArjvqQ=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Jul 21 07:50:01 2025 GMT Not After : Jul 28 07:50:01 2025 GMT Subject: CN=687df129-3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:89:97:3a:a9:13:2c:7a:74:b4:97:f5:e4: 24:71:23:cf:ed:8d:70:7c:cb:c2:98:8b:bc:e7:40: b6:3d:af:ff:e7:d0:e9:24:d0:26:33:71:bd:f1:dc: 46:8f:73:cb:88:9b:b6:62:46:9c:83:4f:94:33:0c: 86:3d:8b:94:92:8d:fd:09:42:d7:6f:b1:f5:90:4e: 83:ae:92:25:aa:0d:8a:2a:06:2e:b4:c1:a3:4b:ff: 41:e4:6e:82:47:ee:f4:cb:55:d9:80:c8:5f:05:03: b1:e3:98:b6:c1:41:a9:c4:18:e4:da:cb:bd:c2:cf: 9d:ac:e2:23:89:26:6c:6f:9f:11:b1:6a:82:6c:33: dd:6c:92:f4:2d:33:8e:80:c6:dd:85:55:f5:13:82: 76:27:06:0a:cf:b8:c8:9e:a0:b2:60:a3:e0:15:ba: 3a:06:fd:3b:ef:9c:e4:82:8a:74:3c:13:c3:ae:60: 5b:9d:61:9c:44:55:2d:4c:65:39:a0:17:0b:7d:46: a5:d3:22:d5:35:f8:d4:19:61:c1:77:14:bb:48:6f: 35:48:9f:22:03:b9:f4:0f:58:39:c5:18:00:fe:ac: cb:60:2d:d7:66:e6:9f:c6:67:18:60:68:3d:a9:b6: 58:9b:01:e8:05:fc:39:f7:84:cc:8c:23:ac:1a:8f: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:BE:05:44:BD:76:F3:A6:AA:B9:EE:AB:48:1A:3C:23:54:B8:D9 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:33:77:9a:f2:06:5c:c4:33:31:00:74:cf:e2:47:e4:35:e8: 41:c7:c8:49:aa:1a:80:62:00:38:87:d4:33:4a:67:0b:f5:3a: ef:fd:7a:5a:37:73:0d:60:b7:40:53:32:06:90:32:af:c6:47: ac:d5:ae:58:a0:90:2a:7b:ff:3e:4e:35:9a:29:a4:02:af:98: 09:e4:61:48:03:74:a0:12:bf:96:22:1a:af:0b:83:ee:43:3a: 2c:72:f3:21:d3:2b:09:b4:4e:9d:ce:8f:a5:7f:5a:93:f1:3f: 1c:27:06:85:e7:8b:d1:1f:97:09:bc:8b:34:0d:07:5d:bf:5f: 6d:39:f6:8b:54:d5:20:50:d3:59:54:3d:42:82:67:75:5c:44: d4:91:01:a8:fe:0c:a4:db:07:37:45:be:ab:35:f6:94:be:a6: 9f:f3:45:6e:ce:56:97:16:c5:f8:0a:88:83:14:6a:02:af:4a: ed:2d:ee:85:ad:a8:f1:3a:ac:a3:13:d2:3d:22:0f:73:4c:f8: ad:2c:13:78:4f:9e:f9:f3:b4:40:0e:25:be:6a:0c:5b:c3:4e: fc:4a:71:8a:02:27:3c:65:6d:30:88:0a:02:61:62:fb:26:6d: fa:be:2c:ec:9e:56:bc:1e:5c:ec:47:75:28:bd:ef:f3:c2:1a: 0e:32:4f:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA3MjEwNzUwMDFaFw0yNTA3MjgwNzUwMDFaMBgxFjAUBgNV BAMTDTY4N2RmMTI5LTMyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5HomXOqkTLHp0tJf15CRxI8/tjXB8y8KYi7znQLY9r//n0Okk0CYzcb3x3EaP c8uIm7ZiRpyDT5QzDIY9i5SSjf0JQtdvsfWQToOukiWqDYoqBi60waNL/0HkboJH 7vTLVdmAyF8FA7HjmLbBQanEGOTay73Cz52s4iOJJmxvnxGxaoJsM91skvQtM46A xt2FVfUTgnYnBgrPuMieoLJgo+AVujoG/TvvnOSCinQ8E8OuYFudYZxEVS1MZTmg Fwt9RqXTItU1+NQZYcF3FLtIbzVInyIDufQPWDnFGAD+rMtgLddm5p/GZxhgaD2p tlibAegF/Dn3hMyMI6waj0V5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeO++BUS9 dvOmqrnuq0gaPCNUuNkwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK8zd5ryBlzEMzEAdM/iR+Q16EHHyEmqGoBiADiH1DNKZwv1Ou/9elo3 cw1gt0BTMgaQMq/GR6zVrligkCp7/z5ONZoppAKvmAnkYUgDdKASv5YiGq8Lg+5D Oixy8yHTKwm0Tp3Oj6V/WpPxPxwnBoXni9Eflwm8izQNB12/X2059otU1SBQ01lU PUKCZ3VcRNSRAaj+DKTbBzdFvqs19pS+pp/zRW7OVpcWxfgKiIMUagKvSu0t7oWt qPE6rKMT0j0iD3NM+K0sE3hPnvnztEAOJb5qDFvDTvxKcYoCJzxlbTCICgJhYvsm bfq+LOyeVrweXOxHdSi97/PCGg4yT5g= -----END CERTIFICATE-----Generated at Mon Jul 21 18:51:37 2025 by rpki-client