$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: UvK+1skpgBVuXV0l8eAyMPZxjbQCda2Uo5UAKMoKOQo= Subject key identifier: 35:AE:9C:B7:ED:9D:AF:87:C5:1D:B1:1D:5B:E2:C6:9A:CB:BB:AF:2E Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 44 Signing time: Sun 07 Sep 2025 07:57:45 +0000 Manifest this update: Sun 07 Sep 2025 07:57:44 +0000 Manifest next update: Sun 14 Sep 2025 07:57:44 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 6DBEGn7IHkgiw+8Csh4XOmD6+u8xpWciBgk3lll6pn0=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: YdheOlkOrvYc+0WcsN5XG/W9vQjumV6X4tfqEURTyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Sep 7 07:57:44 2025 GMT Not After : Sep 14 07:57:44 2025 GMT Subject: CN=68bd3af9-2703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:c4:f8:06:96:08:f0:74:2e:d9:3a:0d:6c: db:96:19:ad:a9:36:f7:9d:b2:fc:a7:db:ae:5a:df: 97:90:e2:66:4d:6c:50:43:e6:d6:06:79:ee:a0:75: 93:a5:22:5e:00:92:b2:e8:9a:ea:e0:7d:d0:ce:81: 77:7c:8b:1d:bb:48:39:10:a2:6d:7b:f9:ac:2d:db: 0e:64:66:35:ec:23:8b:65:8b:30:6f:9f:62:29:7a: 48:2b:c4:30:74:7a:83:1a:59:72:66:7a:05:84:db: 2a:b9:cc:26:b8:87:57:ea:b7:40:d0:c0:de:4d:56: 57:ae:92:52:d7:e3:99:bf:70:d3:ab:43:be:a1:f6: 32:db:c2:f6:f7:c3:d9:df:3a:e3:c4:63:16:b6:c0: 8d:15:35:4b:fd:21:fc:c9:ad:0a:72:54:4d:70:f6: 6c:f8:13:7b:8e:6e:ce:02:a2:62:b2:53:a2:0d:22: 1e:2b:0d:c6:a4:35:48:4a:ef:14:0d:a0:38:99:65: 0d:c5:94:0c:a2:ce:81:d9:18:3e:dc:45:5a:38:27: b3:ec:8c:26:1a:94:2d:7f:84:9a:db:2f:19:5d:8d: 86:0e:a1:96:26:f5:98:eb:54:52:c5:f9:a6:be:90: 3c:88:e4:fd:e7:75:42:1f:0d:f2:e2:dd:5a:fe:e4: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AE:9C:B7:ED:9D:AF:87:C5:1D:B1:1D:5B:E2:C6:9A:CB:BB:AF:2E X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:19:46:c4:26:0f:93:55:f3:7e:dd:c2:ae:63:b5:12:62:e5: 69:32:a0:8b:72:bb:6c:c7:a3:9e:00:cf:b4:46:e0:ca:1e:8e: 1d:3a:13:05:aa:8b:a2:33:e8:47:07:bb:e3:19:04:a8:dd:e1: ca:8a:f3:cf:a5:29:02:a5:c4:a3:f8:6b:84:f6:01:4f:68:41: e2:b4:b8:4b:50:85:89:25:e9:92:1b:b4:25:ad:1e:83:e8:ad: ec:83:26:6f:cf:3f:e3:d7:59:0b:63:40:46:f2:7f:1a:5c:63: 86:09:33:cf:f2:08:b3:fd:34:d7:dd:4c:7b:de:2f:67:5c:da: 12:47:af:4c:de:2a:bb:5f:da:6a:70:90:f7:36:5f:a0:63:53: 59:83:db:92:43:ae:ac:4b:21:2a:46:4c:e3:1a:71:5b:32:c7: 53:37:ce:94:15:39:9b:2b:92:14:8b:18:44:3d:0e:d2:b5:32: eb:b7:4b:5e:49:f1:24:79:c0:6d:57:f9:8a:ae:bc:0d:ed:23: d3:44:3d:c7:1f:8d:f2:a0:e0:27:17:7f:aa:16:93:58:d5:96: b5:7d:f3:39:72:10:10:bb:b9:ff:21:fe:d7:be:8c:f8:20:f6: 36:94:3e:75:c3:98:f4:29:23:d9:02:59:9a:86:1b:7b:43:07: a0:49:0b:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTA5MDcwNzU3NDRaFw0yNTA5MTQwNzU3NDRaMBgxFjAUBgNV BAMTDTY4YmQzYWY5LTI3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGlsT4BpYI8HQu2ToNbNuWGa2pNvedsvyn265a35eQ4mZNbFBD5tYGee6gdZOl Il4AkrLomurgfdDOgXd8ix27SDkQom17+awt2w5kZjXsI4tlizBvn2IpekgrxDB0 eoMaWXJmegWE2yq5zCa4h1fqt0DQwN5NVleuklLX45m/cNOrQ76h9jLbwvb3w9nf OuPEYxa2wI0VNUv9IfzJrQpyVE1w9mz4E3uObs4ComKyU6INIh4rDcakNUhK7xQN oDiZZQ3FlAyizoHZGD7cRVo4J7PsjCYalC1/hJrbLxldjYYOoZYm9ZjrVFLF+aa+ kDyI5P3ndUIfDfLi3Vr+5PihAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNa6ct+2d r4fFHbEdW+LGmsu7ry4wHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwZRsQmD5NV837dwq5jtRJi5WkyoItyu2zHo54Az7RG4Moejh06EwWq i6Iz6EcHu+MZBKjd4cqK88+lKQKlxKP4a4T2AU9oQeK0uEtQhYkl6ZIbtCWtHoPo reyDJm/PP+PXWQtjQEbyfxpcY4YJM8/yCLP9NNfdTHveL2dc2hJHr0zeKrtf2mpw kPc2X6BjU1mD25JDrqxLISpGTOMacVsyx1M3zpQVOZsrkhSLGEQ9DtK1Muu3S15J 8SR5wG1X+YquvA3tI9NEPccfjfKg4CcXf6oWk1jVlrV98zlyEBC7uf8h/te+jPgg 9jaUPnXDmPQpI9kCWZqGG3tDB6BJC38= -----END CERTIFICATE-----Generated at Sun Sep 7 14:28:11 2025 by rpki-client