$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft File: Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json) Hash identifier: lh+VmRliOch+rAxdzJ5MALx/u41QjVL242A3oH8wGnk= Subject key identifier: 25:D2:E4:D7:91:46:C0:01:71:3C:E9:EA:24:2A:F3:1D:E6:88:13:E9 Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07 Certificate issuer: /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507 Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft Manifest number: 0341 Signing time: Sun 20 Jul 2025 21:46:14 +0000 Manifest this update: Sun 20 Jul 2025 21:46:13 +0000 Manifest next update: Sun 27 Jul 2025 21:46:13 +0000 Files and hashes: 1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: 7R5fIb3YroMTbcWxZ5+AvbHkMwPoofSuFq77uTg1qMQ=) 2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: N6uM6LPODGpuiPmHZixFqRNSQB/Ampu1xfizdkiLwDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507 Validity Not Before: Jul 20 21:46:13 2025 GMT Not After : Jul 27 21:46:13 2025 GMT Subject: CN=687d63a5-2e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5b:58:9b:c2:5f:ee:a2:fd:8d:97:f8:bf:5f: 27:7e:7a:44:d7:23:63:54:ac:15:57:dd:50:f1:d2: ec:0f:39:eb:b3:8e:3c:31:b6:47:4d:8f:9f:de:a6: 43:36:36:58:7a:06:a6:29:12:e3:2e:5e:d7:12:3c: fd:a9:4c:5f:94:c8:f9:0d:ec:2e:94:1f:a0:ea:9a: 54:2e:72:85:8d:ba:10:9b:cf:2b:79:2c:fb:34:8e: 23:17:c6:c7:92:37:af:5d:52:d5:1f:23:2f:bd:3f: cb:f0:c4:b2:3f:8b:36:c7:6d:12:f9:86:a7:ab:3e: 39:58:26:bd:53:8d:26:f6:de:d2:ed:e2:92:01:4c: e3:f6:27:3a:31:41:0a:ae:2e:be:f8:67:4e:f1:d2: 09:c5:16:0a:2b:f2:6c:19:25:d8:3d:7a:b9:ed:17: 55:43:69:b6:3c:1f:7b:73:43:e0:3f:0e:22:65:07: 78:ba:eb:dc:62:04:8f:11:f9:c8:2a:61:22:bf:5d: a9:b9:1a:46:f5:6d:7f:20:ca:d0:39:45:a2:d0:1b: c7:91:fc:52:70:ae:24:9d:52:84:7c:15:2f:bf:f0: 27:79:ec:0e:4c:c3:77:16:48:2b:e6:44:50:e8:65: 79:32:d6:4d:3d:84:ab:bc:e0:2f:dc:6e:0e:79:e6: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:E4:D7:91:46:C0:01:71:3C:E9:EA:24:2A:F3:1D:E6:88:13:E9 X509v3 Authority Key Identifier: keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cc:12:7d:e4:4d:f0:28:ef:85:a9:5c:e2:22:07:fa:12:ae: 24:b8:f8:a9:41:ed:53:42:48:5b:5f:b3:3d:c3:12:da:01:92: 52:a1:17:96:08:0b:d2:70:b0:d8:2b:06:ec:1d:4f:e1:da:ce: 33:a6:52:64:f9:0e:df:57:2c:f2:a7:15:e2:09:e9:00:02:d4: 55:2f:c1:2a:95:78:e9:4c:32:3c:be:66:ae:41:05:b5:50:49: fd:57:98:e2:41:d3:1a:45:15:9f:03:c8:3e:d2:b2:f6:1b:f7: 81:7d:38:68:05:ec:df:7f:d6:90:d2:00:ee:dc:99:55:c0:47: d3:a8:9b:af:ec:22:dc:c4:c9:00:1d:0f:67:54:28:bb:15:bc: de:f8:15:98:71:75:f7:00:64:44:7b:33:b3:a4:17:a2:b8:93: fb:f5:42:ea:d1:22:b7:aa:ca:4f:77:3b:88:98:dc:05:5c:7c: 44:76:8e:2b:6e:e7:e4:2f:ec:05:e9:0b:77:7a:c9:1c:30:10: 17:91:2d:b8:55:09:80:b0:e4:2e:ce:4d:d1:f2:b0:dc:f6:18: 35:3e:de:e3:be:60:62:9c:6f:6e:6f:0d:fb:c6:6b:8d:2a:69: cd:f3:d4:17:c7:6d:67:86:09:1f:30:1a:8e:ff:32:1f:b9:c1: db:32:28:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDNERUQzQjQxRTIwM0Y4ODQ3MDAyOTZDODcwMTAwREZD NEU3QjE1MDcwHhcNMjUwNzIwMjE0NjEzWhcNMjUwNzI3MjE0NjEzWjAYMRYwFAYD VQQDEw02ODdkNjNhNS0yZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FtYm8Jf7qL9jZf4v18nfnpE1yNjVKwVV91Q8dLsDznrs448MbZHTY+f3qZD NjZYegamKRLjLl7XEjz9qUxflMj5DewulB+g6ppULnKFjboQm88reSz7NI4jF8bH kjevXVLVHyMvvT/L8MSyP4s2x20S+Yanqz45WCa9U40m9t7S7eKSAUzj9ic6MUEK ri6++GdO8dIJxRYKK/JsGSXYPXq57RdVQ2m2PB97c0PgPw4iZQd4uuvcYgSPEfnI KmEiv12puRpG9W1/IMrQOUWi0BvHkfxScK4knVKEfBUvv/AneewOTMN3Fkgr5kRQ 6GV5MtZNPYSrvOAv3G4OeeaWZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXS5NeR RsABcTzp6iQq8x3miBPpMB8GA1UdIwQYMBaAFD3tO0HiA/iEcAKWyHAQDfxOexUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC82NjU2QTJBNENC NDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1JUndBcGJJY0JBTl9FNTdG UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlMDdRZUlELUlSd0FwYkljQkFOX0U1N0ZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC82NjU2QTJBNENCNDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1J UndBcGJJY0JBTl9FNTdGUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7zBJ95E3wKO+FqVziIgf6Eq4kuPipQe1TQkhbX7M9wxLaAZJSoReW CAvScLDYKwbsHU/h2s4zplJk+Q7fVyzypxXiCekAAtRVL8EqlXjpTDI8vmauQQW1 UEn9V5jiQdMaRRWfA8g+0rL2G/eBfThoBezff9aQ0gDu3JlVwEfTqJuv7CLcxMkA HQ9nVCi7Fbze+BWYcXX3AGREezOzpBeiuJP79ULq0SK3qspPdzuImNwFXHxEdo4r bufkL+wF6Qt3eskcMBAXkS24VQmAsOQuzk3R8rDc9hg1Pt7jvmBinG9ubw37xmuN KmnN89QXx21nhgkfMBqO/zIfucHbMihF -----END CERTIFICATE-----Generated at Mon Jul 21 13:13:55 2025 by rpki-client