$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: NhBHMG62PHnXcMNn2qpGJWrxgDxHlfEvKALv/pTkE9A= Subject key identifier: 03:E6:63:08:5C:04:8F:23:FF:00:5F:B4:92:EC:5E:19:61:98:02:EC Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 35 Signing time: Sat 09 Aug 2025 08:08:17 +0000 Manifest this update: Sat 09 Aug 2025 08:08:16 +0000 Manifest next update: Sat 16 Aug 2025 08:08:16 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 0N++1YhyRaMSL490WwVXkApwWHy/gqn8FaNbVdaOJl0=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: YdheOlkOrvYc+0WcsN5XG/W9vQjumV6X4tfqEURTyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Aug 9 08:08:16 2025 GMT Not After : Aug 16 08:08:16 2025 GMT Subject: CN=689701f0-5ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:8c:37:79:ef:6b:86:65:d1:92:18:45:ed: 3a:c9:de:2b:91:1d:94:18:0b:fd:d9:ff:42:b6:63: 22:64:1b:c7:7e:f2:86:78:27:97:58:01:4f:13:c2: 28:8f:14:a7:ed:62:4f:9b:1a:39:43:20:dc:51:d7: 50:e4:cc:29:34:f3:0f:7a:8c:b8:5f:07:ec:c8:a6: 8f:97:58:d4:2e:35:97:9b:a3:ca:fb:48:b7:63:9f: c1:1a:b3:04:7e:bc:04:8e:92:c5:2e:ff:20:af:3b: 3f:02:d1:ea:bc:8c:e0:09:5b:5f:08:44:f1:55:41: c0:2c:fb:5b:48:61:33:b3:ba:fe:b2:d8:65:8b:ae: 6f:e6:39:29:5a:33:79:e8:60:f6:d4:c2:75:50:3a: a8:94:25:19:6a:30:d8:89:25:03:83:87:d3:ce:7f: bd:7f:b3:b2:07:1a:fd:4d:fe:3b:d9:6c:d4:b5:b5: ff:60:42:57:25:46:2a:a8:a0:cb:98:fc:74:6c:21: 77:f8:b0:fd:8b:1a:63:4b:4f:83:11:74:5d:a6:aa: e9:b3:b4:00:ae:e2:b2:b0:e2:cf:f4:fa:da:5e:aa: cc:6b:1f:38:fa:7f:48:bb:9e:17:96:46:34:51:69: d3:48:58:42:0b:ca:3c:ac:41:2e:51:ef:ac:2c:8a: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E6:63:08:5C:04:8F:23:FF:00:5F:B4:92:EC:5E:19:61:98:02:EC X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f3:ee:c6:58:7b:d4:45:2d:13:05:b7:86:c2:ae:43:28:22: 2e:2f:5b:ce:6a:ca:0a:93:6f:fc:eb:74:d2:9b:18:5c:a1:2b: bf:25:7f:50:77:01:dd:19:d8:80:74:65:25:d8:96:97:6e:31: 25:03:35:a8:4a:dd:6c:cf:d1:9f:c0:17:9e:dc:eb:e4:c5:88: 1f:8b:a0:3d:26:d0:03:21:15:fa:61:25:61:2a:8c:37:32:8c: 09:91:1d:a0:c1:81:9f:9d:64:59:f2:11:50:80:7c:9f:0c:4c: a7:e1:4b:96:c4:e5:e9:2c:1a:24:7e:f8:6a:a2:f5:40:e0:30: 0e:2c:7f:59:6b:7d:85:4c:55:c7:dd:fb:f4:89:b7:0b:cc:61: 69:21:ac:22:24:61:05:9c:2d:dc:b0:96:ed:e4:b2:d1:85:e5: f5:25:46:e6:c1:21:cd:b8:74:79:d8:c4:d4:8d:cd:d1:c5:dc: bf:a8:d2:94:b8:4a:bf:b4:04:bc:c0:53:43:2a:87:d8:b4:a9: 75:33:9d:e4:4b:ef:d6:51:61:84:79:0d:d8:76:91:33:d1:40: c4:15:f1:0e:37:e9:34:ac:01:aa:be:15:4d:7d:fd:f3:27:a1: 67:49:c2:b8:57:94:7c:d6:40:2f:8a:bf:88:75:fa:f9:b5:8b: 10:3a:17:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTA4MDkwODA4MTZaFw0yNTA4MTYwODA4MTZaMBgxFjAUBgNV BAMTDTY4OTcwMWYwLTVhZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDENYw3ee9rhmXRkhhF7TrJ3iuRHZQYC/3Z/0K2YyJkG8d+8oZ4J5dYAU8TwiiP FKftYk+bGjlDINxR11DkzCk08w96jLhfB+zIpo+XWNQuNZebo8r7SLdjn8EaswR+ vASOksUu/yCvOz8C0eq8jOAJW18IRPFVQcAs+1tIYTOzuv6y2GWLrm/mOSlaM3no YPbUwnVQOqiUJRlqMNiJJQODh9POf71/s7IHGv1N/jvZbNS1tf9gQlclRiqooMuY /HRsIXf4sP2LGmNLT4MRdF2mqumztACu4rKw4s/0+tpeqsxrHzj6f0i7nheWRjRR adNIWEILyjysQS5R76wsirc1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA+ZjCFwE jyP/AF+0kuxeGWGYAuwwHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7z7sZYe9RFLRMFt4bCrkMoIi4vW85qygqTb/zrdNKbGFyhK78lf1B3 Ad0Z2IB0ZSXYlpduMSUDNahK3WzP0Z/AF57c6+TFiB+LoD0m0AMhFfphJWEqjDcy jAmRHaDBgZ+dZFnyEVCAfJ8MTKfhS5bE5eksGiR++Gqi9UDgMA4sf1lrfYVMVcfd +/SJtwvMYWkhrCIkYQWcLdywlu3kstGF5fUlRubBIc24dHnYxNSNzdHF3L+o0pS4 Sr+0BLzAU0Mqh9i0qXUzneRL79ZRYYR5Ddh2kTPRQMQV8Q436TSsAaq+FU19/fMn oWdJwrhXlHzWQC+Kv4h1+vm1ixA6F3g= -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:25 2025 by rpki-client