$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: P3oUasuhFrKpba8D+CSogPQXiFP/FuGNG5TFnfFb6a4= Subject key identifier: 8C:C5:28:19:9F:63:FE:D5:A3:30:6B:D8:44:DB:E9:FF:31:38:CB:84 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 0113 Signing time: Sat 19 Jul 2025 05:06:29 +0000 Manifest this update: Sat 19 Jul 2025 05:06:28 +0000 Manifest next update: Sat 26 Jul 2025 05:06:28 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: UEiIycPxCfFsrIneqrv+NBY4Sz8XG0+F0YZXFO4xdTk=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Jul 19 05:06:28 2025 GMT Not After : Jul 26 05:06:28 2025 GMT Subject: CN=687b27d4-8ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:16:07:e7:2c:a5:f6:af:ab:21:3b:fe:3a: a0:3f:0a:86:36:c0:64:e9:72:49:70:91:17:2d:05: 50:50:6a:c0:c9:cc:e0:d1:57:fc:04:06:6d:c9:87: ca:eb:e1:31:94:7b:c0:26:81:58:72:00:c7:77:eb: 2b:f7:72:a8:c3:14:9a:00:68:d8:7e:d7:15:ff:24: be:90:b4:a2:c4:5c:96:92:1a:98:5a:db:e6:c2:3d: 3b:5c:87:62:24:95:b0:78:6c:66:31:29:aa:d5:e4: c6:ce:84:32:3e:a7:90:01:51:a8:95:84:b7:e3:aa: 54:d8:b5:5a:66:0c:4b:80:fe:3f:6d:2a:7d:e0:db: c4:f2:1b:0d:57:e9:05:d8:f0:9b:18:76:c3:b4:18: 2c:1b:0b:0d:5a:22:f9:05:67:07:6a:6c:93:21:cd: 4a:4b:e7:2c:e3:ae:4c:c6:8b:bf:3e:2b:de:6c:15: 77:17:55:7b:04:81:99:f7:88:c1:b5:bb:e1:74:81: 42:19:f4:e7:86:b4:20:bc:3f:1d:cd:e8:bd:04:76: c4:dd:75:ad:bd:56:97:12:06:7d:ab:95:9d:7d:92: c6:71:ef:91:42:a1:74:01:6b:f8:4c:ce:63:c2:70: fd:f6:ed:04:61:0e:f3:1c:7a:c5:11:a3:11:32:80: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C5:28:19:9F:63:FE:D5:A3:30:6B:D8:44:DB:E9:FF:31:38:CB:84 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:59:3e:0e:fe:46:c1:dc:d3:cc:7b:e2:fa:13:2f:2b:d5:43: 53:22:19:a3:ec:f7:bb:f9:9c:0b:4b:a6:ef:a7:d5:64:ce:5c: 18:39:d2:54:6d:fa:68:36:63:a6:65:66:e7:36:05:6f:0b:de: 1b:5a:89:87:76:8b:0a:69:80:f1:9e:88:4d:30:dc:36:ef:c4: 5a:a9:04:a8:d3:cb:c1:cc:c2:3e:32:17:f2:5a:4e:4b:f7:c9: 93:d1:27:8f:eb:84:cb:a7:8d:bc:55:f6:f7:62:9a:c6:83:2f: 87:c2:32:56:15:05:79:c7:26:6e:4e:ba:da:e9:e5:3a:99:d0: 1e:c6:f3:ad:31:20:76:25:8a:a8:d9:5c:20:55:34:2c:cc:cd: 3f:1e:8c:f9:89:f5:a8:3e:4a:86:9f:b2:cd:9c:15:54:12:f0: 6a:e7:92:8b:26:a1:b0:50:52:04:07:90:a8:0d:4f:d1:af:8b: ee:ce:7f:67:26:59:de:20:a8:92:ca:29:ef:58:e9:83:50:60: b2:c5:4c:56:5e:1f:c2:5f:27:1c:11:5f:22:f1:51:db:7c:07: b4:e8:e2:ad:ec:cb:15:88:e9:bd:97:71:9e:dc:4e:97:26:36: 42:ec:96:2e:62:6e:54:fc:bf:03:0b:0f:c0:35:de:2c:3a:1f: 11:d8:d1:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwNzE5MDUwNjI4WhcNMjUwNzI2MDUwNjI4WjAYMRYwFAYD VQQDEw02ODdiMjdkNC04ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstQWB+cspfavqyE7/jqgPwqGNsBk6XJJcJEXLQVQUGrAyczg0Vf8BAZtyYfK 6+ExlHvAJoFYcgDHd+sr93KowxSaAGjYftcV/yS+kLSixFyWkhqYWtvmwj07XIdi JJWweGxmMSmq1eTGzoQyPqeQAVGolYS346pU2LVaZgxLgP4/bSp94NvE8hsNV+kF 2PCbGHbDtBgsGwsNWiL5BWcHamyTIc1KS+cs465Mxou/PivebBV3F1V7BIGZ94jB tbvhdIFCGfTnhrQgvD8dzei9BHbE3XWtvVaXEgZ9q5WdfZLGce+RQqF0AWv4TM5j wnD99u0EYQ7zHHrFEaMRMoAwRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzFKBmf Y/7VozBr2ETb6f8xOMuEMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+WT4O/kbB3NPMe+L6Ey8r1UNTIhmj7Pe7+ZwLS6bvp9VkzlwYOdJU bfpoNmOmZWbnNgVvC94bWomHdosKaYDxnohNMNw278RaqQSo08vBzMI+MhfyWk5L 98mT0SeP64TLp428Vfb3YprGgy+HwjJWFQV5xyZuTrra6eU6mdAexvOtMSB2JYqo 2VwgVTQszM0/Hoz5ifWoPkqGn7LNnBVUEvBq55KLJqGwUFIEB5CoDU/Rr4vuzn9n JlneIKiSyinvWOmDUGCyxUxWXh/CXyccEV8i8VHbfAe06OKt7MsViOm9l3Ge3E6X JjZC7JYuYm5U/L8DCw/ANd4sOh8R2NE1 -----END CERTIFICATE-----Generated at Sun Jul 20 18:58:11 2025 by rpki-client