$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft File: Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json) Hash identifier: GC1dpMuMrLoRgoaHZoKF5pglTT6JIELu3aojNi40/l8= Subject key identifier: B6:FF:22:EF:BD:18:2F:2A:0F:30:A8:CC:95:38:1A:A0:7E:5F:65:F1 Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07 Certificate issuer: /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507 Certificate serial: 035D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft Manifest number: 0359 Signing time: Thu 04 Sep 2025 21:50:00 +0000 Manifest this update: Thu 04 Sep 2025 21:50:00 +0000 Manifest next update: Thu 11 Sep 2025 21:50:00 +0000 Files and hashes: 1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: dr7J4Lw9u+FgkexppkbXH8qgoFL/qnYUWaVdRnCKx0E=) 2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: N6uM6LPODGpuiPmHZixFqRNSQB/Ampu1xfizdkiLwDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507 Validity Not Before: Sep 4 21:50:00 2025 GMT Not After : Sep 11 21:50:00 2025 GMT Subject: CN=68ba0988-6616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:d2:cf:89:fe:d6:3d:c1:a2:04:a2:ad:d9: e0:32:0f:d3:9c:8c:a1:c9:61:1a:86:a9:6e:05:3b: ec:98:f3:a9:0d:4d:23:43:66:5c:37:22:61:a7:8c: e9:9d:4e:44:0d:8d:f8:ad:f6:f3:db:45:7c:b6:1e: 03:b5:77:30:06:3d:7e:bb:ca:3d:4f:b5:47:75:92: d7:30:0e:1a:e2:25:df:07:00:6d:4f:bd:01:b4:ce: c1:aa:43:62:6d:b7:e9:81:c1:ae:80:20:36:89:03: 23:7f:40:93:a3:c0:48:70:20:2c:15:9c:05:7e:51: f9:f4:2a:b8:c2:8c:69:33:52:d3:96:b3:89:2d:e6: 9b:5e:bb:38:5e:fe:5e:cb:14:19:03:1a:e5:06:95: 20:a2:fe:a1:a1:82:a2:9e:4a:fa:8f:3e:af:69:fd: 30:4a:b5:9d:c5:13:63:dc:00:7a:22:8f:be:7e:86: 05:e8:ad:94:68:6a:36:eb:3e:4c:60:53:35:9d:ab: 2d:f9:d5:f5:77:eb:0f:3b:97:68:45:ac:ac:85:b2: df:46:d0:1e:23:03:f0:bf:4b:08:b9:ea:cf:72:1c: 9a:56:60:eb:cd:7c:a8:21:ab:aa:af:7e:62:f0:69: 6a:9e:2f:b8:4e:bf:4d:5e:96:e3:bd:62:79:c4:13: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FF:22:EF:BD:18:2F:2A:0F:30:A8:CC:95:38:1A:A0:7E:5F:65:F1 X509v3 Authority Key Identifier: keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:10:7f:54:39:b5:4b:18:c2:6f:28:4d:9f:24:f7:c5:5f:b7: 37:7b:01:24:03:69:4d:a2:9d:7d:35:f2:5b:77:b6:a4:d0:5e: 2e:1c:6f:60:fc:24:ed:8a:a8:bc:c6:5f:24:a7:de:cd:b6:86: c8:60:03:ee:8d:c7:98:68:6c:76:98:2a:64:d1:1b:33:c5:73: c5:54:8b:e2:13:66:d5:80:ab:e0:b9:54:7f:d5:2f:c7:c2:65: 3a:7e:e0:33:2f:15:e4:db:2e:2b:57:c8:1f:18:60:c9:20:6e: 7a:27:c0:a3:61:89:04:91:bb:2c:0f:94:41:37:11:4b:04:e5: 27:17:a6:4f:46:73:0c:e9:63:9e:86:2a:10:5f:b1:f3:69:81: 97:83:b5:2c:65:5f:aa:c6:e9:bf:12:18:ea:b9:b4:cc:63:61: 29:03:7b:f9:60:25:75:74:57:8e:f5:a2:3a:e0:4e:eb:c1:35: 2c:fa:04:a4:00:1f:d1:9a:e2:df:4d:14:18:0f:d7:3a:67:13: 40:f2:95:0b:de:37:7a:8e:e8:dc:17:84:11:be:b1:2a:52:ee: 95:cb:59:7e:61:50:bc:6a:4d:87:38:ce:20:1c:db:2d:ab:9a: 9c:d0:93:f5:3c:77:d3:34:2c:9d:bc:6e:72:f4:ac:af:93:4f: e2:94:5c:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDNERUQzQjQxRTIwM0Y4ODQ3MDAyOTZDODcwMTAwREZD NEU3QjE1MDcwHhcNMjUwOTA0MjE1MDAwWhcNMjUwOTExMjE1MDAwWjAYMRYwFAYD VQQDEw02OGJhMDk4OC02NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe/Sz4n+1j3BogSirdngMg/TnIyhyWEahqluBTvsmPOpDU0jQ2ZcNyJhp4zp nU5EDY34rfbz20V8th4DtXcwBj1+u8o9T7VHdZLXMA4a4iXfBwBtT70BtM7BqkNi bbfpgcGugCA2iQMjf0CTo8BIcCAsFZwFflH59Cq4woxpM1LTlrOJLeabXrs4Xv5e yxQZAxrlBpUgov6hoYKinkr6jz6vaf0wSrWdxRNj3AB6Io++foYF6K2UaGo26z5M YFM1nast+dX1d+sPO5doRayshbLfRtAeIwPwv0sIuerPchyaVmDrzXyoIauqr35i 8Glqni+4Tr9NXpbjvWJ5xBOQ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb/Iu+9 GC8qDzCozJU4GqB+X2XxMB8GA1UdIwQYMBaAFD3tO0HiA/iEcAKWyHAQDfxOexUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC82NjU2QTJBNENC NDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1JUndBcGJJY0JBTl9FNTdG UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlMDdRZUlELUlSd0FwYkljQkFOX0U1N0ZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC82NjU2QTJBNENCNDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1J UndBcGJJY0JBTl9FNTdGUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAEH9UObVLGMJvKE2fJPfFX7c3ewEkA2lNop19NfJbd7ak0F4uHG9g /CTtiqi8xl8kp97NtobIYAPujceYaGx2mCpk0RszxXPFVIviE2bVgKvguVR/1S/H wmU6fuAzLxXk2y4rV8gfGGDJIG56J8CjYYkEkbssD5RBNxFLBOUnF6ZPRnMM6WOe hioQX7HzaYGXg7UsZV+qxum/EhjqubTMY2EpA3v5YCV1dFeO9aI64E7rwTUs+gSk AB/RmuLfTRQYD9c6ZxNA8pUL3jd6jujcF4QRvrEqUu6Vy1l+YVC8ak2HOM4gHNst q5qc0JP1PHfTNCydvG5y9Kyvk0/ilFyD -----END CERTIFICATE-----Generated at Sat Sep 6 20:59:09 2025 by rpki-client