$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json) Hash identifier: MFJ/0okYLYjVDi1xFLHgo03b/nikxXEoVxCIsFCRA4w= Subject key identifier: E1:07:28:34:8C:DB:B5:62:3C:9E:B6:27:CA:D6:DD:53:81:D5:97:8B Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft Manifest number: 8C Signing time: Sat 19 Jul 2025 06:45:12 +0000 Manifest this update: Sat 19 Jul 2025 06:45:12 +0000 Manifest next update: Sat 26 Jul 2025 06:45:12 +0000 Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: OE3ZKGdDcf8Km6EK+ym77XHsL5l7qw2RS+LCGuyjMyI=) 2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Validity Not Before: Jul 19 06:45:12 2025 GMT Not After : Jul 26 06:45:12 2025 GMT Subject: CN=687b3ef8-f6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:47:f9:48:17:3a:9d:40:58:4c:da:15:12: 07:bb:dd:9f:a0:a1:e0:1e:0f:2c:54:2b:8c:af:93: 78:8c:77:23:a2:1b:33:8b:49:bb:d5:4d:4a:85:59: b6:ce:01:e0:44:b2:4f:c0:61:93:7b:2d:ad:bd:42: aa:f4:1f:ca:85:aa:89:96:27:05:fc:fb:d8:07:b3: 45:6a:fc:e7:3c:e5:e5:f1:dd:f0:f8:50:db:1d:09: e1:97:c4:67:d1:94:49:e4:df:5c:12:94:31:0c:f6: da:36:3d:ee:3d:4c:ad:bf:ac:73:44:61:19:32:16: af:5d:01:02:f4:d3:36:f1:3f:7c:9d:9c:ab:95:9b: 07:b5:2a:2b:e6:2b:e1:f3:c6:a4:a5:3c:77:a3:ce: 72:d3:51:58:f1:81:4b:b5:04:67:1f:51:ca:2d:aa: 97:13:d6:db:4c:4a:a5:c4:d6:97:b4:19:68:15:c6: 88:eb:30:b2:e9:d2:ad:6d:b5:1b:94:7a:2b:70:a4: d3:f7:c3:89:99:5e:4d:03:30:66:af:27:e9:41:19: 61:05:94:17:1a:c3:1c:e8:4d:cf:ab:4c:80:c6:79: 9f:a5:8f:7d:fa:65:cb:b6:83:5f:ec:4a:12:af:1f: 7b:37:ca:89:ef:62:b4:ba:42:31:ab:6a:d5:c2:ad: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:07:28:34:8C:DB:B5:62:3C:9E:B6:27:CA:D6:DD:53:81:D5:97:8B X509v3 Authority Key Identifier: keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b9:b8:b1:0d:ca:9b:a8:0c:aa:a6:60:6a:67:4c:a8:0e:0d: c9:a7:d1:c2:57:7d:ce:55:4a:60:cb:0f:7d:ab:0c:2b:41:7f: 05:4b:ed:18:8c:8f:5f:57:ea:80:3e:23:91:34:e9:c6:fb:27: d0:0a:24:9d:f6:88:19:61:b2:9a:13:1c:16:9e:0a:38:f5:67: 51:dd:d7:52:ff:b2:df:5f:1f:82:08:c3:74:6d:d7:84:72:04: 33:e4:6b:df:be:b4:e4:f7:ad:c9:93:94:c5:cc:2a:15:d8:cc: 47:1e:b1:be:c5:75:a6:14:c0:46:4d:e5:a4:94:f0:bd:6d:10: f5:0e:b3:20:77:9d:81:c7:31:b4:83:a5:09:df:11:27:27:81: f4:f2:3b:7f:17:61:34:6e:75:c5:26:9a:d8:16:7e:49:e1:c1: 52:d8:e8:4c:5b:53:fe:72:2b:d3:05:bc:4d:f8:fe:45:04:8b: 9d:00:0c:ea:6f:77:f0:3b:57:60:11:3f:ef:21:31:37:58:72: 45:4f:7b:9e:ef:9b:08:c3:ec:16:57:49:cc:61:c4:7b:b3:65: f8:b5:67:c9:a1:72:b2:ba:bf:19:00:1f:22:a1:f8:4b:d9:b9: e3:b5:d0:6d:ac:90:9f:c5:90:e6:b0:08:08:7b:b0:a2:ef:ec: 03:14:8e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKEE1MUNGQjhBMjgzOERDMjNGMjg3NjQ0QTQ3MzVFRkMx M0Q4QzMxMTMwHhcNMjUwNzE5MDY0NTEyWhcNMjUwNzI2MDY0NTEyWjAYMRYwFAYD VQQDEw02ODdiM2VmOC1mNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI1H+UgXOp1AWEzaFRIHu92foKHgHg8sVCuMr5N4jHcjohszi0m71U1KhVm2 zgHgRLJPwGGTey2tvUKq9B/KhaqJlicF/PvYB7NFavznPOXl8d3w+FDbHQnhl8Rn 0ZRJ5N9cEpQxDPbaNj3uPUytv6xzRGEZMhavXQEC9NM28T98nZyrlZsHtSor5ivh 88akpTx3o85y01FY8YFLtQRnH1HKLaqXE9bbTEqlxNaXtBloFcaI6zCy6dKtbbUb lHorcKTT98OJmV5NAzBmryfpQRlhBZQXGsMc6E3Pq0yAxnmfpY99+mXLtoNf7EoS rx97N8qJ72K0ukIxq2rVwq02zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEHKDSM 27ViPJ62J8rW3VOB1ZeLMB8GA1UdIwQYMBaAFKUc+4ooONwj8odkSkc178E9jDET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81NkM2NzA3Njkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDNDUHloMlJLUnpYdndUMk1N Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1STS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81NkM2NzA3NjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDND UHloMlJLUnpYdndUMk1NUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIubixDcqbqAyqpmBqZ0yoDg3Jp9HCV33OVUpgyw99qwwrQX8FS+0Y jI9fV+qAPiORNOnG+yfQCiSd9ogZYbKaExwWngo49WdR3ddS/7LfXx+CCMN0bdeE cgQz5GvfvrTk963Jk5TFzCoV2MxHHrG+xXWmFMBGTeWklPC9bRD1DrMgd52BxzG0 g6UJ3xEnJ4H08jt/F2E0bnXFJprYFn5J4cFS2OhMW1P+civTBbxN+P5FBIudAAzq b3fwO1dgET/vITE3WHJFT3ue75sIw+wWV0nMYcR7s2X4tWfJoXKyur8ZAB8iofhL 2bnjtdBtrJCfxZDmsAgIe7Ci7+wDFI4H -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:14 2025 by rpki-client