$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft File: pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json) Hash identifier: 2y2BcmsgfaFPxcu5FY8MJoW/OPOEqmWHLbmcfJZb00I= Subject key identifier: EA:8D:7F:14:4E:C5:F6:FD:E1:59:8D:53:8A:66:7F:6B:18:6B:F0:56 Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67 Certificate issuer: /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft Manifest number: CE Signing time: Tue 05 Aug 2025 06:12:43 +0000 Manifest this update: Tue 05 Aug 2025 06:12:43 +0000 Manifest next update: Tue 12 Aug 2025 06:12:42 +0000 Files and hashes: 1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: 8Lm16iLUsRfrhKsyx5I90HwdtW5IfFmTIIUfNV2g5yc=) 2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867 Validity Not Before: Aug 5 06:12:43 2025 GMT Not After : Aug 12 06:12:42 2025 GMT Subject: CN=6891a0db-129c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:65:a0:49:48:09:ab:92:29:81:2e:7c:97:ac: c0:c3:0a:80:94:c6:d1:54:28:42:56:4b:c8:37:5a: 2f:94:ac:23:c3:31:78:b8:7d:f8:03:ad:a5:ff:f4: c0:27:a5:0b:7e:1a:9e:e3:a5:42:f2:53:92:53:11: 67:32:f1:71:08:41:ca:dc:56:fc:a1:0f:fa:9f:55: ff:a6:c9:73:df:a5:14:e5:b1:91:62:dc:f6:6d:71: 60:d2:01:a8:77:3b:cf:89:b9:17:03:59:24:92:4c: f0:86:57:3b:36:b8:30:c4:5c:58:87:4d:9d:2a:ad: 24:d0:51:cc:22:c5:8a:05:36:90:e4:cf:d0:a0:67: f7:de:eb:7a:3f:17:42:a1:b5:14:79:a1:1c:66:6a: 9a:5f:6f:1a:40:4f:4f:c8:5e:90:2c:01:ed:5e:16: 30:80:40:6a:6a:b7:8c:bb:b3:c5:9f:42:f6:cd:b9: f7:a3:f2:c2:d7:4d:be:28:15:28:7d:ab:b0:d7:74: 21:88:ff:18:ef:ac:15:b7:b4:f3:67:3c:5f:0c:30: 72:5a:7e:91:90:0c:12:1a:db:bd:da:64:c6:e6:6d: a4:0e:0e:4d:04:e4:cc:15:37:13:b7:62:9c:01:78: 2c:ab:af:ee:f4:20:55:c0:63:c6:4a:71:0b:bb:da: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:7F:14:4E:C5:F6:FD:E1:59:8D:53:8A:66:7F:6B:18:6B:F0:56 X509v3 Authority Key Identifier: keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d7:c4:d0:d8:ff:97:ac:c6:5c:ed:14:fa:70:85:0a:6b:2e: 3a:ec:5c:2e:52:9d:30:92:93:ac:df:84:39:88:6e:1e:4e:13: 9a:46:f9:17:3b:6c:be:9d:c4:40:ed:5b:3a:d5:f8:55:c1:d3: 8f:db:ac:4c:20:e7:20:ab:de:bf:be:b4:a9:16:17:c4:a4:98: d9:1d:5c:33:b8:39:81:46:8b:1a:68:1a:ab:39:88:14:95:b2: 3a:aa:c8:86:73:0d:a0:28:5c:03:81:32:66:1d:f2:91:3d:41: f0:cb:c6:df:21:db:ce:0b:10:57:bd:22:71:33:a7:78:fd:60: 71:c4:d3:23:6a:2a:a9:a2:b5:e2:20:2f:8c:8b:c8:28:25:2a: dd:34:d6:57:80:94:c8:93:03:57:34:72:7b:13:63:d8:61:ba: ab:bb:62:d9:d9:29:51:70:16:ab:a6:0a:18:a2:43:03:b6:11: 19:0a:76:21:14:53:c4:b7:cb:57:a6:f2:14:16:ed:ed:8a:e3: 86:82:6b:01:fc:96:21:19:c9:2f:fc:65:8b:ee:0c:42:7a:6b: 40:13:9e:a2:fd:f1:0f:52:62:71:99:23:8f:b3:d1:58:00:32: ef:8e:6e:77:4a:26:bb:41:7c:80:d1:cd:41:a6:6e:41:00:bf: f3:9e:db:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKEE1NTRERjNENDcwMjdGRkFGN0NCOEExNjZGM0UwQTEw RTMxNzc4NjcwHhcNMjUwODA1MDYxMjQzWhcNMjUwODEyMDYxMjQyWjAYMRYwFAYD VQQDEw02ODkxYTBkYi0xMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWWgSUgJq5IpgS58l6zAwwqAlMbRVChCVkvIN1ovlKwjwzF4uH34A62l//TA J6ULfhqe46VC8lOSUxFnMvFxCEHK3Fb8oQ/6n1X/pslz36UU5bGRYtz2bXFg0gGo dzvPibkXA1kkkkzwhlc7NrgwxFxYh02dKq0k0FHMIsWKBTaQ5M/QoGf33ut6PxdC obUUeaEcZmqaX28aQE9PyF6QLAHtXhYwgEBqareMu7PFn0L2zbn3o/LC102+KBUo fauw13QhiP8Y76wVt7TzZzxfDDByWn6RkAwSGtu92mTG5m2kDg5NBOTMFTcTt2Kc AXgsq6/u9CBVwGPGSnELu9rIYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqNfxRO xfb94VmNU4pmf2sYa/BWMB8GA1UdIwQYMBaAFKVU3z1HAn/698uKFm8+ChDjF3hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS9GQzUwMzg0ODNB ODkxMUVGOTgxN0IyNkFDNEY5QUUwMi9wVlRmUFVjQ2ZfcjN5NG9XYno0S0VPTVhl R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BWVGZQVWNDZl9yM3k0b1diejRLRU9NWGVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS9GQzUwMzg0ODNBODkxMUVGOTgxN0IyNkFDNEY5QUUwMi9wVlRmUFVjQ2Zf cjN5NG9XYno0S0VPTVhlR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf18TQ2P+XrMZc7RT6cIUKay467FwuUp0wkpOs34Q5iG4eThOaRvkX O2y+ncRA7Vs61fhVwdOP26xMIOcgq96/vrSpFhfEpJjZHVwzuDmBRosaaBqrOYgU lbI6qsiGcw2gKFwDgTJmHfKRPUHwy8bfIdvOCxBXvSJxM6d4/WBxxNMjaiqporXi IC+Mi8goJSrdNNZXgJTIkwNXNHJ7E2PYYbqru2LZ2SlRcBarpgoYokMDthEZCnYh FFPEt8tXpvIUFu3tiuOGgmsB/JYhGckv/GWL7gxCemtAE56i/fEPUmJxmSOPs9FY ADLvjm53Sia7QXyA0c1Bpm5BAL/zntuq -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:38 2025 by rpki-client