$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft File: Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json) Hash identifier: dCL+cxq7oQowluT0wXuIHZIjE6yl90dtGnaYFzZyeO0= Subject key identifier: 2D:C4:A9:9D:4E:5D:5A:0C:21:3A:D3:BC:C7:27:88:3B:79:83:4F:4D Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD Certificate serial: 2C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft Manifest number: 2C06 Signing time: Mon 04 Aug 2025 15:37:01 +0000 Manifest this update: Mon 04 Aug 2025 15:37:00 +0000 Manifest next update: Mon 11 Aug 2025 15:37:00 +0000 Files and hashes: 1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: ZAJjk5bxRcViN4UhMjgc1UM0wUNXS3WONwb5glYeFiM=) 2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: T0b8C7d4bWsc3EyPhNVtAAt07MQZYtmIX9CE+cnW0sk=) 3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: JeRljMwzQH3/92nSWVH5RymJInEM50zHuR37MlUO73U=) 4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: wKTcwQ/I5JRFgJ3BEd5QarAu/YHgWoWcx44Njrdtc4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11304 (0x2c28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD Validity Not Before: Aug 4 15:37:00 2025 GMT Not After : Aug 11 15:37:00 2025 GMT Subject: CN=6890d39d-c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:0b:03:f4:47:1d:45:5a:69:a3:0c:00:6b: a3:04:08:8c:97:71:fd:ad:98:79:c6:02:0c:e3:20: e8:b5:fa:f3:b5:e7:74:1a:ba:30:7a:af:44:6d:fe: 2d:23:71:f7:7c:3c:21:14:b0:07:ac:f5:e2:16:77: d2:d4:07:4e:0e:61:c1:fd:3d:77:8e:40:22:f2:20: 95:d9:fe:c5:b2:b1:7a:ee:2f:1e:ea:5d:c8:e1:75: 1c:53:3a:9b:40:af:d0:a9:cd:18:26:9a:f6:1d:41: 54:8e:80:dc:8c:15:f9:32:c3:d4:ff:f0:73:f3:f3: 54:fa:f8:33:b8:d6:6e:97:fe:5d:63:69:3f:e4:25: 06:5f:a3:1f:80:5f:3c:9f:86:bd:79:f6:c9:10:26: 95:7e:df:fa:66:f5:7a:d6:18:fd:a0:05:67:29:7d: d4:2a:2e:78:b8:b6:14:c4:61:13:d0:9b:7f:60:f4: 57:c6:81:dd:cc:58:ab:ac:cb:db:c4:02:f1:c8:3d: 90:a4:a1:80:c1:00:32:55:79:17:e0:e7:89:9d:8f: 42:6e:a5:ca:fa:a7:3a:c8:85:ab:26:93:fd:57:76: f7:d5:17:2d:39:36:7f:bd:a5:da:ad:37:4f:4e:34: 5e:42:69:b9:46:5b:b3:1a:c8:5a:b3:f9:9b:67:f1: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:A9:9D:4E:5D:5A:0C:21:3A:D3:BC:C7:27:88:3B:79:83:4F:4D X509v3 Authority Key Identifier: keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ef:83:aa:87:b3:56:18:99:ba:8a:10:b8:ac:c5:09:4e:29: ad:29:0a:9d:aa:20:83:b6:63:b8:e1:d8:ac:83:e7:56:16:43: 12:dd:b4:25:ae:c4:0b:a3:dc:40:42:ac:16:36:46:6f:15:2f: 89:fe:b2:5d:59:70:59:33:86:39:83:45:7c:e4:75:b2:f5:14: 17:e7:3d:98:1c:b6:a8:77:9d:85:e9:8b:05:ca:4c:37:58:3d: 53:a1:c8:d3:ca:3d:ab:92:d4:c3:01:91:63:89:fb:78:3f:5a: 41:5a:ed:ee:cc:8b:92:ac:a2:64:74:7e:7d:6b:97:7c:ea:01: 2a:86:85:3c:3c:d1:34:ff:8a:18:51:2f:92:81:f6:f1:9b:91: 2f:e5:e0:17:dd:e7:47:96:0a:c9:59:79:ca:ec:20:ef:72:e6: 3b:40:ab:81:17:7e:4c:3d:3d:ab:7f:67:a9:42:4f:ed:0f:88: 18:64:a2:89:9d:0d:7d:99:43:d5:85:50:ce:d9:81:31:2d:8a: a2:f9:c9:51:f3:a7:74:20:e4:52:ca:2d:b2:49:4c:de:42:a4: 3b:ac:50:73:2f:d1:78:ea:02:16:ac:73:f1:b0:74:0c:47:e4: 32:24:e3:d1:3d:3c:f1:1a:76:f5:e1:23:6a:31:29:62:66:72: 27:8c:33:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1OUUxMTAvBgNVBAUTKDNFM0RDNjJBRDM2OTQxMjcwNzlBOTg3MTc2QzIxOEMw OUIzRUM5RkQwHhcNMjUwODA0MTUzNzAwWhcNMjUwODExMTUzNzAwWjAYMRYwFAYD VQQDEw02ODkwZDM5ZC1jMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA8LA/RHHUVaaaMMAGujBAiMl3H9rZh5xgIM4yDotfrzted0Groweq9Ebf4t I3H3fDwhFLAHrPXiFnfS1AdODmHB/T13jkAi8iCV2f7FsrF67i8e6l3I4XUcUzqb QK/Qqc0YJpr2HUFUjoDcjBX5MsPU//Bz8/NU+vgzuNZul/5dY2k/5CUGX6MfgF88 n4a9efbJECaVft/6ZvV61hj9oAVnKX3UKi54uLYUxGET0Jt/YPRXxoHdzFirrMvb xALxyD2QpKGAwQAyVXkX4OeJnY9CbqXK+qc6yIWrJpP9V3b31RctOTZ/vaXarTdP TjReQmm5RluzGshas/mbZ/EJaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3EqZ1O XVoMITrTvMcniDt5g09NMB8GA1UdIwQYMBaAFD49xirTaUEnB5qYcXbCGMCbPsn9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU5RS9ENDdGRUZDRUQ0 MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3ROcFFTY0htcGh4ZHNJWXdKcy15 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BqM0dLdE5wUVNjSG1waHhkc0lZd0pzLXlmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU5RS9ENDdGRUZDRUQ0MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3ROcFFT Y0htcGh4ZHNJWXdKcy15ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ74Oqh7NWGJm6ihC4rMUJTimtKQqdqiCDtmO44disg+dWFkMS3bQl rsQLo9xAQqwWNkZvFS+J/rJdWXBZM4Y5g0V85HWy9RQX5z2YHLaod52F6YsFykw3 WD1TocjTyj2rktTDAZFjift4P1pBWu3uzIuSrKJkdH59a5d86gEqhoU8PNE0/4oY US+Sgfbxm5Ev5eAX3edHlgrJWXnK7CDvcuY7QKuBF35MPT2rf2epQk/tD4gYZKKJ nQ19mUPVhVDO2YExLYqi+clR86d0IORSyi2ySUzeQqQ7rFBzL9F46gIWrHPxsHQM R+QyJOPRPTzxGnb14SNqMSliZnInjDOs -----END CERTIFICATE-----Generated at Wed Aug 6 10:08:10 2025 by rpki-client