$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: vLpeLaxySZPu7+0IQukjaJuC1/v1uZ5fsrmMReSH7n0= Subject key identifier: 19:FA:0D:67:E5:84:E1:FC:A6:D2:E2:6F:B0:70:99:2B:6E:6F:FA:B5 Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 11 Signing time: Sat 31 May 2025 07:37:33 +0000 Manifest this update: Sat 31 May 2025 07:37:33 +0000 Manifest next update: Sat 07 Jun 2025 07:37:32 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: tPUFExduwE3bmDinlmwjx71UhV9LEPj8dFJTCoqdcRw=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: YdheOlkOrvYc+0WcsN5XG/W9vQjumV6X4tfqEURTyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: May 31 07:37:33 2025 GMT Not After : Jun 7 07:37:32 2025 GMT Subject: CN=683ab1bd-69e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:34:df:ae:b9:99:46:ca:de:9d:b2:c9:79:bc: a6:98:14:96:d2:6e:49:63:e7:f8:7c:39:ef:24:1e: 36:12:36:3d:7b:06:f1:1c:de:90:16:51:04:61:e0: d5:bf:63:22:4e:81:44:67:ff:55:4a:1b:a5:d5:a6: 62:38:9b:85:62:e8:c9:23:a6:ad:2d:21:c1:fa:be: e1:8a:27:06:d2:1f:d9:b9:b8:66:7a:ae:4f:6e:a5: 3c:6e:14:2e:74:82:4a:f2:55:03:83:28:b2:f1:da: 07:13:5c:cc:5b:82:28:3f:52:7b:fc:83:a7:9f:53: cf:59:9f:99:3b:17:41:c0:ed:20:6e:f6:8b:72:a8: ee:fd:e5:21:1a:ce:7f:5b:e7:b2:62:00:95:f0:ad: 63:8b:22:94:fb:ea:12:94:74:8f:64:bb:73:f1:19: 5a:e1:a9:eb:dd:d1:d1:1e:dd:16:98:77:f3:c8:33: a1:32:15:04:17:9b:5c:e8:94:70:62:ec:6c:44:67: 7c:80:b1:0f:29:c2:9e:a1:2e:0c:ed:2d:e8:a4:49: 2b:be:00:98:e1:69:69:77:51:f6:34:67:80:f3:bf: a6:84:2b:23:ec:d5:34:1a:e8:30:21:ca:a3:d2:a1: 11:b3:0a:73:35:da:1e:b0:31:d5:8e:b3:76:94:ee: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FA:0D:67:E5:84:E1:FC:A6:D2:E2:6F:B0:70:99:2B:6E:6F:FA:B5 X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:39:fa:7c:8a:2a:53:17:4d:e2:38:a1:de:0f:37:8d:be:6f: 84:8a:1d:7c:a1:f4:75:4d:2d:6e:82:3d:a2:71:d8:b7:3f:62: d9:73:b9:50:d5:7e:f6:4f:f5:7f:1b:64:48:78:ef:a7:26:0e: de:d5:b5:60:4b:13:c1:8a:a8:91:18:c7:c9:27:56:58:23:6f: 97:74:4b:f3:05:da:7b:c5:c3:2c:2e:4c:00:37:28:6d:3d:8a: e8:fc:2b:8d:ca:2e:76:89:c6:03:f9:3e:cc:c8:49:ad:31:03: bd:1c:b0:b1:db:2e:72:b5:f8:cf:a6:69:50:08:72:ad:4d:26: e7:eb:09:57:42:9a:ba:a0:1f:9b:70:4f:4e:11:cf:35:7e:07: 77:19:d7:6c:aa:b8:b3:bb:61:4a:fb:f4:ca:2e:2e:5c:7e:6f: 1c:d8:df:e6:58:77:53:ba:43:0f:52:bd:29:fb:e2:24:24:a4: a4:fc:67:81:85:2f:3f:49:83:53:28:36:34:54:15:81:e9:ee: 01:d9:35:b1:48:bc:13:62:17:20:92:2d:b1:d8:a9:ae:5b:d8: ba:12:fc:e1:66:10:ac:79:a7:6a:a7:85:f4:bb:96:91:12:33: 03:1e:48:0c:8e:41:e0:8f:07:9a:a4:48:2e:3b:ee:8b:84:88: 94:0b:87:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTA1MzEwNzM3MzNaFw0yNTA2MDcwNzM3MzJaMBgxFjAUBgNV BAMTDTY4M2FiMWJkLTY5ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeNN+uuZlGyt6dssl5vKaYFJbSbklj5/h8Oe8kHjYSNj17BvEc3pAWUQRh4NW/ YyJOgURn/1VKG6XVpmI4m4Vi6Mkjpq0tIcH6vuGKJwbSH9m5uGZ6rk9upTxuFC50 gkryVQODKLLx2gcTXMxbgig/Unv8g6efU89Zn5k7F0HA7SBu9otyqO795SEazn9b 57JiAJXwrWOLIpT76hKUdI9ku3PxGVrhqevd0dEe3RaYd/PIM6EyFQQXm1zolHBi 7GxEZ3yAsQ8pwp6hLgztLeikSSu+AJjhaWl3UfY0Z4Dzv6aEKyPs1TQa6DAhyqPS oRGzCnM12h6wMdWOs3aU7mUjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGfoNZ+WE 4fym0uJvsHCZK25v+rUwHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKc5+nyKKlMXTeI4od4PN42+b4SKHXyh9HVNLW6CPaJx2Lc/YtlzuVDV fvZP9X8bZEh476cmDt7VtWBLE8GKqJEYx8knVlgjb5d0S/MF2nvFwywuTAA3KG09 iuj8K43KLnaJxgP5PszISa0xA70csLHbLnK1+M+maVAIcq1NJufrCVdCmrqgH5tw T04RzzV+B3cZ12yquLO7YUr79MouLlx+bxzY3+ZYd1O6Qw9SvSn74iQkpKT8Z4GF Lz9Jg1MoNjRUFYHp7gHZNbFIvBNiFyCSLbHYqa5b2LoS/OFmEKx5p2qnhfS7lpES MwMeSAyOQeCPB5qkSC477ouEiJQLhxw= -----END CERTIFICATE-----Generated at Sat May 31 17:07:45 2025 by rpki-client