$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft File: pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json) Hash identifier: q8ZfxKCEW/CSPhpNSx4Ssob4N7BiAb7HePC1cg8/SAw= Subject key identifier: 85:99:6C:39:1C:CF:8D:60:DE:44:2C:09:DF:53:72:E2:B7:FD:E5:28 Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft Manifest number: 0684 Signing time: Fri 22 Aug 2025 22:37:15 +0000 Manifest this update: Fri 22 Aug 2025 22:37:14 +0000 Manifest next update: Fri 29 Aug 2025 22:37:14 +0000 Files and hashes: 1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: wB4V6CCgJfBXxHdqbnaQcdCZzZvqLiq31D9GXLCr5j0=) 2: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (hash: ILkhxI5MS0Y08MvVskMnHwF1yNepea938q8G0D4OrHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Aug 22 22:37:14 2025 GMT Not After : Aug 29 22:37:14 2025 GMT Subject: CN=68a8f11b-d943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:72:cc:77:39:36:e5:a2:80:2e:7d:b1:a4: 86:d3:23:ba:e4:e6:af:94:c3:3b:51:85:40:f8:a4: 9f:8f:f2:08:7f:9b:8a:ef:1c:5f:0a:94:ad:f7:29: 32:80:da:9b:ca:ef:1b:b2:c1:f2:ce:4c:22:8b:e2: ef:b9:5d:5d:3f:ca:b7:a7:eb:0d:8f:0e:3d:fd:f4: 83:0a:e3:30:20:25:1d:ef:38:ea:56:1c:be:ea:16: 7c:53:65:ce:34:d6:0d:96:cc:06:01:ab:63:68:88: bc:52:9d:da:20:1d:d4:8a:ce:f2:cc:8d:22:95:8f: c0:7d:cc:0d:74:8b:13:a2:40:f4:a8:71:0b:3f:0e: 76:64:aa:cf:c1:c5:c0:08:b3:c4:aa:00:f1:3f:53: 06:de:88:c8:ef:57:e3:ec:1d:a4:70:5d:01:0e:2f: 02:db:d4:ec:ce:c5:c1:3c:91:da:8e:48:02:d5:0e: 9e:f6:4e:93:99:4e:4c:a7:44:cc:c7:68:04:25:35: d7:72:8a:fd:a2:f6:47:96:3d:fc:e3:4b:36:be:04: aa:e7:b5:a1:57:f2:83:80:fa:43:f8:18:33:34:c5: 93:d5:9b:43:82:a0:06:be:c9:25:5f:5e:e8:1b:bd: cf:31:bc:32:b6:3b:b9:52:9c:51:00:0c:92:b6:53: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:99:6C:39:1C:CF:8D:60:DE:44:2C:09:DF:53:72:E2:B7:FD:E5:28 X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:80:95:e1:06:c8:5e:63:03:42:00:32:e9:4c:9c:86:49:24: fc:82:13:a9:2b:36:d0:4c:84:fa:c9:d7:f8:e5:fd:d1:de:03: 58:c3:47:91:c2:13:04:4b:b9:7d:f3:0b:70:5a:f5:ca:c0:aa: 64:08:06:0f:0b:d9:8d:b3:1f:25:4e:7f:1f:97:a6:b6:51:1f: 26:95:de:08:3f:e6:3f:6f:b9:6a:20:33:72:54:5a:0a:64:57: af:e5:95:ee:06:aa:44:b3:aa:32:81:c1:d5:68:21:e6:2b:79: 84:38:6d:2a:40:d5:59:9d:c3:37:35:af:5b:7c:65:e5:c4:7e: 81:63:eb:f2:a8:98:81:80:00:d6:43:ed:9d:4b:64:bf:d0:6d: a1:ce:07:7e:a6:10:87:c7:05:8c:35:2d:e0:25:56:29:8b:0f: 1a:53:93:b3:04:c4:a3:0c:1c:7f:03:18:84:09:80:1f:93:97: 29:74:99:c8:7e:6b:37:60:80:b4:cc:14:7b:d7:14:b6:90:da: 5c:74:fe:99:9d:d0:7d:7e:41:94:8a:03:13:5f:29:9d:8c:70: 5b:d4:07:fc:a2:f8:9d:8d:17:68:f2:f1:fd:98:a2:c8:66:88: 26:76:d3:25:40:4d:44:5b:e6:ae:fc:34:86:42:db:db:bb:88: 86:8e:a2:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjUwODIyMjIzNzE0WhcNMjUwODI5MjIzNzE0WjAYMRYwFAYD VQQDEw02OGE4ZjExYi1kOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqilyzHc5NuWigC59saSG0yO65OavlMM7UYVA+KSfj/IIf5uK7xxfCpSt9yky gNqbyu8bssHyzkwii+LvuV1dP8q3p+sNjw49/fSDCuMwICUd7zjqVhy+6hZ8U2XO NNYNlswGAatjaIi8Up3aIB3Uis7yzI0ilY/AfcwNdIsTokD0qHELPw52ZKrPwcXA CLPEqgDxP1MG3ojI71fj7B2kcF0BDi8C29TszsXBPJHajkgC1Q6e9k6TmU5Mp0TM x2gEJTXXcor9ovZHlj3840s2vgSq57WhV/KDgPpD+BgzNMWT1ZtDgqAGvsklX17o G73PMbwytju5UpxRAAyStlOMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWZbDkc z41g3kQsCd9TcuK3/eUoMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzUzRC84NEI1OEY2NjhDRkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1 cXlRUk5nSGFnVk9oV1JKdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLgJXhBsheYwNCADLpTJyGSST8ghOpKzbQTIT6ydf45f3R3gNYw0eR whMES7l98wtwWvXKwKpkCAYPC9mNsx8lTn8fl6a2UR8mld4IP+Y/b7lqIDNyVFoK ZFev5ZXuBqpEs6oygcHVaCHmK3mEOG0qQNVZncM3Na9bfGXlxH6BY+vyqJiBgADW Q+2dS2S/0G2hzgd+phCHxwWMNS3gJVYpiw8aU5OzBMSjDBx/AxiECYAfk5cpdJnI fms3YIC0zBR71xS2kNpcdP6ZndB9fkGUigMTXymdjHBb1Af8ovidjRdo8vH9mKLI ZogmdtMlQE1EW+au/DSGQtvbu4iGjqL4 -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:06 2025 by rpki-client