$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: KCTY1BmZ/1UhwNjKA/HqLZzcLsrFxHh6hW/2opVf5r0= Subject key identifier: 9B:09:26:29:13:12:F7:D8:34:17:85:36:0B:BE:AE:03:26:14:77:A1 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 011E Signing time: Sat 09 Aug 2025 05:10:22 +0000 Manifest this update: Sat 09 Aug 2025 05:10:21 +0000 Manifest next update: Sat 16 Aug 2025 05:10:21 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: 1d/rcHBlCm/BQdZIOBAq8TXatvPgUXJ5Q8XLowctwE0=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Aug 9 05:10:21 2025 GMT Not After : Aug 16 05:10:21 2025 GMT Subject: CN=6896d83d-f531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:c1:47:c1:b8:2c:1e:8f:68:9f:6c:28:9a: 11:21:4b:62:eb:35:7d:9f:9a:03:cd:d5:76:67:1e: 00:a6:23:8e:89:07:7b:de:a1:c2:74:0e:26:c8:14: cc:33:7c:c5:52:7b:fb:f9:d2:b3:b1:b3:5c:ab:53: 27:94:30:4b:95:58:2e:ec:c5:e4:85:96:45:67:35: 46:77:2c:db:85:7c:55:37:9b:9a:4f:85:0f:c5:c9: 6c:80:21:9c:c3:7f:a3:16:8b:6d:54:83:c8:90:33: 5d:75:1b:b0:14:45:ae:ed:43:56:db:af:5d:51:86: 76:79:9f:8d:1d:06:f1:8c:33:26:59:86:e1:00:c7: ab:98:3f:d6:54:e4:42:62:4e:48:c6:ac:34:47:c1: 16:c8:31:b1:b0:04:93:a1:e5:48:44:b4:9b:26:73: 73:a9:f6:45:04:f2:c8:ae:c9:60:3e:49:df:9c:4f: 2d:c1:62:fd:f2:59:b7:17:0a:38:58:0d:1c:b4:91: b5:af:16:11:66:c6:33:a7:98:c8:68:7e:34:13:87: 79:b8:23:77:76:1d:79:45:80:d5:b2:17:01:3f:e0: 21:a1:5b:c5:60:a3:f2:ed:98:da:5e:5b:89:79:8c: 35:b6:41:52:1f:f0:8d:66:e8:77:f4:50:0a:57:b3: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:09:26:29:13:12:F7:D8:34:17:85:36:0B:BE:AE:03:26:14:77:A1 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:43:2c:b6:a0:66:97:70:80:b5:ba:48:a8:a7:d7:aa:0d: e9:bf:14:04:04:0e:67:1e:2a:da:12:eb:73:d8:b5:2e:19:a9: d6:6f:5c:44:c5:07:d5:4c:c7:f9:91:af:67:6d:f7:61:c5:2a: c7:e2:aa:0f:95:36:3d:c4:a9:17:8e:6d:6e:cf:d8:ed:15:8c: a4:0f:9d:82:13:dc:d3:5d:78:cf:7b:c7:59:eb:24:4b:24:b8: 80:35:d2:8a:db:fc:76:a6:81:46:3a:1e:e6:2f:f7:65:22:1a: 40:89:ae:4f:96:cf:02:55:6e:a3:45:0f:98:f3:1f:d2:9e:c5: b4:49:c0:4d:6e:a1:40:5f:a8:7e:75:3a:fc:fd:a3:0a:01:c3: e5:26:a0:87:e8:c4:ef:56:20:9e:39:aa:d1:c2:ab:09:51:f3: 37:8e:2c:3e:7a:db:48:e6:3d:e0:e7:4a:c9:b7:fa:76:38:9f: d9:2d:91:c1:5b:5b:97:a5:83:90:f5:33:f0:30:6a:9e:57:ac: 61:53:48:3a:86:84:39:fd:fa:2b:5d:1e:6d:49:ba:2a:6f:3e: dd:21:ff:79:bf:71:3c:96:8a:ea:68:ff:05:38:ba:6f:23:6d: 7c:60:48:08:6f:e0:db:63:77:06:ce:e6:d5:ad:b5:50:aa:c8: ac:93:4d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwODA5MDUxMDIxWhcNMjUwODE2MDUxMDIxWjAYMRYwFAYD VQQDEw02ODk2ZDgzZC1mNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJfBR8G4LB6PaJ9sKJoRIUti6zV9n5oDzdV2Zx4ApiOOiQd73qHCdA4myBTM M3zFUnv7+dKzsbNcq1MnlDBLlVgu7MXkhZZFZzVGdyzbhXxVN5uaT4UPxclsgCGc w3+jFottVIPIkDNddRuwFEWu7UNW269dUYZ2eZ+NHQbxjDMmWYbhAMermD/WVORC Yk5Ixqw0R8EWyDGxsASToeVIRLSbJnNzqfZFBPLIrslgPknfnE8twWL98lm3Fwo4 WA0ctJG1rxYRZsYzp5jIaH40E4d5uCN3dh15RYDVshcBP+AhoVvFYKPy7ZjaXluJ eYw1tkFSH/CNZuh39FAKV7NELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsJJikT EvfYNBeFNgu+rgMmFHehMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3JkMstqBml3CAtbpIqKfXqg3pvxQEBA5nHiraEutz2LUuGanWb1xE xQfVTMf5ka9nbfdhxSrH4qoPlTY9xKkXjm1uz9jtFYykD52CE9zTXXjPe8dZ6yRL JLiANdKK2/x2poFGOh7mL/dlIhpAia5Pls8CVW6jRQ+Y8x/SnsW0ScBNbqFAX6h+ dTr8/aMKAcPlJqCH6MTvViCeOarRwqsJUfM3jiw+ettI5j3g50rJt/p2OJ/ZLZHB W1uXpYOQ9TPwMGqeV6xhU0g6hoQ5/forXR5tSboqbz7dIf95v3E8lorqaP8FOLpv I218YEgIb+DbY3cGzubVrbVQqsisk00B -----END CERTIFICATE-----Generated at Sun Aug 10 18:32:20 2025 by rpki-client