$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: WUVSiajH34JXgBrTAbw69ZvRw70EITeFgvvLkUhCEyE= Subject key identifier: BB:5D:4F:89:B1:EA:C8:39:8D:D0:8E:7D:FA:DC:D9:95:9C:EE:06:05 Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:41:19 +0000 Manifest this update: Fri 22 Aug 2025 14:41:19 +0000 Manifest next update: Fri 29 Aug 2025 14:41:19 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: U3r3O4m21ULDqiQoarJSmh3e3ZuvN5XZg9rUEJJRt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: Aug 22 14:41:19 2025 GMT Not After : Aug 29 14:41:19 2025 GMT Subject: CN=68a8818f-59b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:be:6e:10:c8:f2:91:07:84:45:2f:bb:0d: d8:23:92:fc:6b:b3:f9:78:1c:d6:03:e1:57:44:1c: d8:d6:99:00:bb:7c:b7:5a:8a:64:fa:39:3c:46:d8: 31:53:cb:1d:d4:df:a4:9e:c4:a8:b2:5b:f0:64:7f: 37:fa:f5:6e:a1:d6:90:c3:10:2a:98:7f:86:d8:4f: c6:ed:de:74:41:82:01:69:55:78:65:c7:5f:e0:3b: d8:c3:51:0e:b2:fc:6d:93:79:63:16:c7:3e:62:2e: 44:00:47:8e:ee:dc:4d:1e:c5:59:a3:90:a7:f4:fa: 89:1b:43:2e:c5:cc:21:25:e7:e2:3a:4e:06:d4:5b: bc:82:e1:d2:d9:19:b4:95:ff:97:88:fc:d0:73:93: e7:53:ee:fe:8b:a4:4a:02:bb:ec:0d:d0:05:da:3d: fc:84:78:80:b9:33:ae:99:1e:e1:0c:4e:a4:f9:e7: ed:16:de:6b:ea:5a:a8:95:3b:41:39:60:cb:4c:a7: f5:9a:74:bd:19:f4:95:7e:57:04:d3:c6:d1:9d:0f: e9:43:e2:b5:96:a2:92:f5:4f:e4:85:24:51:1c:33: 94:55:61:96:d6:df:69:bc:9d:85:47:b1:96:28:9e: 30:25:29:e5:4b:0e:86:00:02:07:4c:1f:09:27:8c: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5D:4F:89:B1:EA:C8:39:8D:D0:8E:7D:FA:DC:D9:95:9C:EE:06:05 X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:95:39:91:f6:6a:72:a8:0e:f2:c0:7d:94:32:78:e3:f2: 5c:88:98:11:44:be:4f:7a:18:09:35:57:47:89:0c:c9:f5:53: bf:ee:85:8b:c4:41:96:ef:3f:04:17:55:bc:5b:35:2b:f9:2e: 5a:2b:a1:b0:ea:2c:0d:d6:f8:72:b6:b9:81:b3:0f:cf:85:11: 8c:4b:39:77:6b:3a:a2:06:ae:fd:4b:62:0f:9c:3c:80:49:ac: 88:d1:c6:a1:a9:38:fd:3c:ee:05:8c:d9:0c:6a:6c:05:59:84: 89:2c:8d:bd:8d:6a:33:eb:6b:76:0d:fe:c8:85:b4:ec:e6:12: 80:0a:4b:27:d3:6b:2a:95:f4:25:fe:e5:8d:ae:d8:0d:58:3c: a9:ca:16:ad:d9:c0:d2:5d:03:28:4e:0f:9f:72:24:0a:f5:46: 90:c4:59:2c:86:4d:e1:32:49:0e:69:f7:a6:9b:23:3c:b6:ec: 00:2e:a2:3d:08:e8:e3:e4:9a:9f:62:1e:95:80:c0:e6:15:bf: 64:99:02:00:0c:6d:50:a7:3a:b7:d6:e0:b3:22:a8:fa:0d:02: de:17:8e:70:95:36:7d:93:fa:d3:49:01:86:a1:43:f9:e4:f9: db:08:e5:54:95:ea:a6:a4:2d:da:d8:a4:fc:fe:95:f8:d2:9d: 7a:3c:4f:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjUwODIyMTQ0MTE5WhcNMjUwODI5MTQ0MTE5WjAYMRYwFAYD VQQDEw02OGE4ODE4Zi01OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wC+bhDI8pEHhEUvuw3YI5L8a7P5eBzWA+FXRBzY1pkAu3y3Wopk+jk8Rtgx U8sd1N+knsSoslvwZH83+vVuodaQwxAqmH+G2E/G7d50QYIBaVV4Zcdf4DvYw1EO svxtk3ljFsc+Yi5EAEeO7txNHsVZo5Cn9PqJG0MuxcwhJefiOk4G1Fu8guHS2Rm0 lf+XiPzQc5PnU+7+i6RKArvsDdAF2j38hHiAuTOumR7hDE6k+eftFt5r6lqolTtB OWDLTKf1mnS9GfSVflcE08bRnQ/pQ+K1lqKS9U/khSRRHDOUVWGW1t9pvJ2FR7GW KJ4wJSnlSw6GAAIHTB8JJ4x9MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtdT4mx 6sg5jdCOffrc2ZWc7gYFMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtqJU5kfZqcqgO8sB9lDJ44/JciJgRRL5PehgJNVdHiQzJ9VO/7oWL xEGW7z8EF1W8WzUr+S5aK6Gw6iwN1vhytrmBsw/PhRGMSzl3azqiBq79S2IPnDyA SayI0cahqTj9PO4FjNkMamwFWYSJLI29jWoz62t2Df7IhbTs5hKACksn02sqlfQl /uWNrtgNWDypyhat2cDSXQMoTg+fciQK9UaQxFkshk3hMkkOafemmyM8tuwALqI9 COjj5JqfYh6VgMDmFb9kmQIADG1Qpzq31uCzIqj6DQLeF45wlTZ9k/rTSQGGoUP5 5PnbCOVUleqmpC3a2KT8/pX40p16PE9h -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:44 2025 by rpki-client