$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: 4E+aJ3xm5PsOZHiqXsa8LwbHw616YKhMMAiI/reddzk= Subject key identifier: FD:09:B1:4D:2D:B1:FD:40:A2:91:DC:BD:D4:E1:75:42:E7:4E:87:35 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02CD Signing time: Sat 09 Aug 2025 01:55:46 +0000 Manifest this update: Sat 09 Aug 2025 01:55:45 +0000 Manifest next update: Sat 16 Aug 2025 01:55:45 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: EM7wJO6hv9reGeCh4QJ1f70l0rbN+fAP7a1r2jDQ/kE=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Aug 9 01:55:45 2025 GMT Not After : Aug 16 01:55:45 2025 GMT Subject: CN=6896aaa2-8389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:dc:00:f0:23:68:ff:d0:42:46:37:5e:49: 54:bf:97:38:18:e8:8b:ef:82:53:c1:34:ad:e1:37: 65:c9:d3:dd:43:f5:4a:74:ac:24:4e:04:53:bc:34: 66:3b:e5:58:95:95:04:3e:99:55:24:20:7d:f7:a3: 53:0e:2b:b9:92:22:29:49:f7:03:17:e3:66:33:ff: 9a:f9:9e:ba:61:18:5f:de:a8:27:08:ba:93:88:06: d7:ee:b0:f0:81:9e:ec:53:fa:91:bb:45:54:c3:96: ae:f0:3a:df:ad:76:f3:54:db:45:2b:61:f8:2c:3e: b8:3f:0e:e9:9d:35:d6:f1:d2:71:9d:b0:71:8d:01: 51:b5:e1:62:ef:03:39:02:f4:8e:4e:49:17:ac:45: 82:24:f2:4b:d4:ad:9e:32:8a:77:b0:7c:2e:a6:35: 38:15:1e:f5:13:0c:5a:b3:56:54:c8:ab:81:b0:77: 4b:e8:f4:70:aa:24:be:2c:87:63:58:85:a9:90:3f: f3:47:f7:76:50:5c:fd:4a:6e:69:5a:91:30:1a:62: 01:da:ca:bb:2e:f2:49:ce:cb:17:be:2f:da:93:cc: 3d:b6:fd:31:31:62:b3:72:ae:01:40:a7:3e:24:66: 85:af:66:7b:46:80:76:dd:b7:bc:06:9f:37:21:6c: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:09:B1:4D:2D:B1:FD:40:A2:91:DC:BD:D4:E1:75:42:E7:4E:87:35 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:bd:a2:46:85:a8:49:a0:52:09:7e:5a:70:c4:ff:fc:1c:be: 31:24:7d:c1:d8:f4:25:6f:a2:3f:0b:c3:be:17:f1:1e:59:c1: 8a:f9:a8:c4:26:46:26:e3:c7:60:3b:27:d2:1d:5a:03:88:ad: fc:d8:19:83:40:b5:9f:e1:7d:cc:cd:73:bc:78:26:ac:76:ff: 81:b2:6d:0f:60:ed:5f:c9:3d:ab:90:31:5d:94:6f:aa:29:27: 4d:0d:c1:05:f1:78:2f:2b:f2:65:62:42:1e:e1:01:f8:17:6f: 0e:23:a0:6d:84:c3:b0:14:32:bb:62:3c:63:54:7a:a6:47:24: 1e:60:d5:a2:23:34:f2:d7:90:41:42:80:ae:98:9e:d3:d0:47: aa:fd:58:0c:96:4b:37:b8:ae:60:23:7d:f3:33:bf:61:9c:77: 6c:93:79:f1:18:4e:cb:a5:d2:25:35:43:40:8b:cb:46:d7:fa: 18:6d:df:0a:db:79:99:66:dc:12:73:eb:94:b3:80:8c:83:48: 20:59:fc:ef:b2:28:2a:0b:9c:a3:9c:6c:3c:01:c5:62:fc:51: fe:1b:1c:9f:cc:85:5b:38:73:b5:7c:db:0a:4f:e7:60:7f:18: 3b:d5:47:76:ba:cd:57:89:9c:a0:7a:10:d1:f6:ce:9b:c8:3f: d3:17:17:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwODA5MDE1NTQ1WhcNMjUwODE2MDE1NTQ1WjAYMRYwFAYD VQQDEw02ODk2YWFhMi04Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAzcAPAjaP/QQkY3XklUv5c4GOiL74JTwTSt4TdlydPdQ/VKdKwkTgRTvDRm O+VYlZUEPplVJCB996NTDiu5kiIpSfcDF+NmM/+a+Z66YRhf3qgnCLqTiAbX7rDw gZ7sU/qRu0VUw5au8DrfrXbzVNtFK2H4LD64Pw7pnTXW8dJxnbBxjQFRteFi7wM5 AvSOTkkXrEWCJPJL1K2eMop3sHwupjU4FR71Ewxas1ZUyKuBsHdL6PRwqiS+LIdj WIWpkD/zR/d2UFz9Sm5pWpEwGmIB2sq7LvJJzssXvi/ak8w9tv0xMWKzcq4BQKc+ JGaFr2Z7RoB23be8Bp83IWyxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0JsU0t sf1AopHcvdThdULnToc1MB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBovaJGhahJoFIJflpwxP/8HL4xJH3B2PQlb6I/C8O+F/EeWcGK+ajE JkYm48dgOyfSHVoDiK382BmDQLWf4X3MzXO8eCasdv+Bsm0PYO1fyT2rkDFdlG+q KSdNDcEF8XgvK/JlYkIe4QH4F28OI6BthMOwFDK7YjxjVHqmRyQeYNWiIzTy15BB QoCumJ7T0Eeq/VgMlks3uK5gI33zM79hnHdsk3nxGE7LpdIlNUNAi8tG1/oYbd8K 23mZZtwSc+uUs4CMg0ggWfzvsigqC5yjnGw8AcVi/FH+GxyfzIVbOHO1fNsKT+dg fxg71Ud2us1XiZygehDR9s6byD/TFxc2 -----END CERTIFICATE-----Generated at Sun Aug 10 13:58:27 2025 by rpki-client