$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: pVvtvqdaowtesOS+OcIyxN+o/EgjxkTdfsXxF7eo9NU= Subject key identifier: 8E:23:22:4F:55:F4:20:ED:32:12:09:16:A8:32:00:0F:58:7E:22:92 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 04A1 Signing time: Sat 09 Aug 2025 00:26:49 +0000 Manifest this update: Sat 09 Aug 2025 00:26:48 +0000 Manifest next update: Sat 16 Aug 2025 00:26:48 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: jNzqIC8ewgKhlFU6LfOHRBpKjSSTpfdwK7FXujqA7ao=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Aug 9 00:26:48 2025 GMT Not After : Aug 16 00:26:48 2025 GMT Subject: CN=689695c9-6ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:7d:aa:80:c0:f6:14:ab:24:a4:6a:60:a6: 89:4b:d8:e8:9e:af:a4:21:4c:e7:03:5e:ea:01:b4: c0:c0:3b:9b:d2:0b:03:32:8e:62:a5:6a:0d:21:95: 51:e8:e4:ea:03:93:59:d9:36:14:2d:79:fe:31:a0: 2f:63:44:6c:08:fa:fc:c6:f3:11:75:4a:e8:2c:29: d9:d7:97:55:6b:ba:cb:fc:d4:53:2a:9e:31:be:c7: e4:4e:67:4a:7f:03:b5:c4:ce:f2:d7:36:fd:06:7b: 76:1f:23:6a:a9:74:27:3b:8b:68:cc:7e:60:ca:ff: 03:5d:f7:82:1e:d7:4d:85:0c:73:36:2a:30:89:25: 02:24:06:f2:b4:12:d8:d5:2a:82:78:80:ca:df:f7: bc:c7:8c:af:3a:13:ce:bf:2d:ad:c7:6d:d1:f3:01: 1b:34:17:6d:79:1c:d1:a2:22:b3:79:d7:61:32:7a: 33:76:89:2c:1b:e4:5c:09:1e:d1:d3:a5:66:8e:f6: e6:2e:10:2a:df:9e:04:a2:85:7b:bc:01:d3:81:81: 33:c2:bc:65:72:15:3d:d7:5b:d5:ed:7d:a6:68:ea: 01:1f:e2:83:61:38:55:03:33:f8:1d:79:97:b7:06: 7f:22:54:e0:b4:47:db:85:9d:d7:c4:5a:14:f5:13: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:22:4F:55:F4:20:ED:32:12:09:16:A8:32:00:0F:58:7E:22:92 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:c3:f2:56:63:c8:f7:a6:2f:84:fa:96:e4:fa:1c:f5:46: 64:50:26:2d:8c:a1:19:59:42:c9:35:c3:4c:cc:42:2a:e8:37: 4d:65:1f:e9:44:94:1f:0a:90:6f:ed:48:d1:d3:ca:e3:41:ab: 45:05:25:cf:0a:60:1f:c1:d6:fa:8d:ef:f9:76:3d:47:0c:34: 9f:62:05:33:15:c3:1c:72:13:45:d3:18:25:c5:24:e8:6c:12: 5e:41:19:fd:70:4e:5c:8d:33:c2:1a:45:7c:8f:1c:b9:9b:d2: 08:5c:a9:bb:89:73:03:45:60:09:cf:c1:ee:1c:b6:26:c4:d8: ce:35:0b:f8:a0:d1:61:02:58:36:49:7b:3f:fc:9f:db:ef:11: 07:62:87:6e:ec:52:77:b4:6f:fd:62:8c:e1:e3:80:4a:5f:f8: 64:f7:60:2a:e8:b9:75:30:ec:be:48:b4:9f:0c:08:a9:95:9c: 33:e5:48:4e:ce:b0:95:63:0b:82:47:4a:d7:88:2b:d7:14:d1: 0a:b8:db:ab:fc:a2:10:c7:02:bd:17:bc:23:ea:4a:55:2f:57: 55:63:09:8f:39:b9:f1:5c:96:48:23:a3:3f:de:b1:87:83:71: 04:2e:c6:bc:01:59:8a:d0:18:d3:c0:d9:52:ad:97:8c:0a:52: 75:5c:0a:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUwODA5MDAyNjQ4WhcNMjUwODE2MDAyNjQ4WjAYMRYwFAYD VQQDEw02ODk2OTVjOS02YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIh9qoDA9hSrJKRqYKaJS9jonq+kIUznA17qAbTAwDub0gsDMo5ipWoNIZVR 6OTqA5NZ2TYULXn+MaAvY0RsCPr8xvMRdUroLCnZ15dVa7rL/NRTKp4xvsfkTmdK fwO1xM7y1zb9Bnt2HyNqqXQnO4tozH5gyv8DXfeCHtdNhQxzNiowiSUCJAbytBLY 1SqCeIDK3/e8x4yvOhPOvy2tx23R8wEbNBdteRzRoiKzeddhMnozdoksG+RcCR7R 06VmjvbmLhAq354EooV7vAHTgYEzwrxlchU911vV7X2maOoBH+KDYThVAzP4HXmX twZ/IlTgtEfbhZ3XxFoU9RODUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4jIk9V 9CDtMhIJFqgyAA9YfiKSMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3FcPyVmPI96YvhPqW5Poc9UZkUCYtjKEZWULJNcNMzEIq6DdNZR/p RJQfCpBv7UjR08rjQatFBSXPCmAfwdb6je/5dj1HDDSfYgUzFcMcchNF0xglxSTo bBJeQRn9cE5cjTPCGkV8jxy5m9IIXKm7iXMDRWAJz8HuHLYmxNjONQv4oNFhAlg2 SXs//J/b7xEHYodu7FJ3tG/9Yozh44BKX/hk92Aq6Ll1MOy+SLSfDAiplZwz5UhO zrCVYwuCR0rXiCvXFNEKuNur/KIQxwK9F7wj6kpVL1dVYwmPObnxXJZII6M/3rGH g3EELsa8AVmK0BjTwNlSrZeMClJ1XApi -----END CERTIFICATE-----Generated at Sun Aug 10 21:19:16 2025 by rpki-client