$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: ENY0IZCdR73Bupc8jWbbinGn6bgvC/Bjc5ALpAOsL9M= Subject key identifier: 41:0F:89:5D:80:A3:EF:B9:58:25:13:E9:BC:A9:57:B1:14:56:D1:E6 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0B95 Signing time: Fri 22 Aug 2025 19:07:09 +0000 Manifest this update: Fri 22 Aug 2025 19:07:08 +0000 Manifest next update: Fri 29 Aug 2025 19:07:08 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: i2FJL9vQA+6MiiOGgf6YrgFcsr2mhglgqpBJr25TSHU=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Aug 22 19:07:08 2025 GMT Not After : Aug 29 19:07:08 2025 GMT Subject: CN=68a8bfdc-9b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:35:35:a1:ec:8c:94:3b:c7:c8:f6:86:13: e6:b8:9c:63:12:ed:16:59:c5:e6:f3:c1:0c:f1:92: dc:a8:c0:75:20:f3:4f:c6:e4:63:6c:98:50:ca:3c: 7d:ab:69:53:a4:36:60:25:a6:a7:54:e6:b0:3a:a9: 2c:e1:33:94:4b:60:82:0e:7c:94:59:44:7b:d5:7f: 8c:e7:c3:07:d2:b0:b8:df:1d:03:44:6f:fe:74:0e: 03:d9:29:8e:cb:6a:a0:d6:1c:1a:b6:de:82:98:f2: d8:e2:1c:5e:3a:67:37:72:51:ea:55:01:2e:76:68: 76:b6:d4:3d:30:79:3c:92:06:c8:7a:4f:9c:41:e9: ff:9a:f7:e6:cc:82:f8:bf:c0:f8:c1:87:52:ad:cc: 73:b0:f5:6f:6a:30:0f:7c:85:92:69:18:d4:fa:0f: 59:48:4b:f3:e7:a5:c8:b2:65:64:07:15:a5:67:dc: 6a:60:c6:e5:c6:56:bf:71:4b:63:29:95:69:85:1c: 81:58:18:ad:11:fa:a1:5b:8c:79:57:fc:a0:b7:52: 8d:20:80:cf:01:d5:27:41:81:e3:53:61:d3:ab:f2: 22:de:17:9f:04:7d:f6:eb:8c:7d:10:08:9b:31:0e: 86:29:5f:99:ba:cf:63:27:65:1a:78:b7:de:9c:6a: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:89:5D:80:A3:EF:B9:58:25:13:E9:BC:A9:57:B1:14:56:D1:E6 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3f:1c:19:4c:2c:68:32:8e:56:60:e5:fc:11:63:ee:9f:49: d1:05:38:4d:e9:e2:06:a8:1e:45:c6:f8:82:a4:c8:76:60:03: 00:9b:2f:ba:be:d1:41:a8:6d:c4:18:8a:73:4f:e9:71:f0:e6: 41:dd:e4:09:07:4b:32:7e:80:ce:ed:c7:03:6c:4b:40:49:88: 25:62:a3:be:c9:72:15:06:9e:b8:dd:98:bd:eb:15:17:d2:50: 40:f0:f1:ba:aa:c0:76:53:7a:1e:7f:0f:75:3a:34:08:37:d6: c1:a4:17:08:9e:8c:03:24:05:52:b8:c1:c5:9e:0f:87:79:5f: a9:48:e2:71:ea:ad:4c:05:b3:28:ce:5e:e9:87:37:cb:e7:e5: c1:c5:04:2e:90:6d:15:a9:aa:5f:9d:e3:47:03:a8:ee:01:7b: d3:7d:7e:12:bc:6c:98:69:91:63:34:91:d9:74:ce:6d:4a:01: fa:e6:b8:81:7a:77:83:45:b2:0d:9a:c1:7d:be:2b:56:73:7b: 9a:fb:59:4d:ec:a2:ea:d0:a4:db:92:6c:c5:90:3c:c4:a0:74: c8:6d:af:7f:4a:79:a4:e8:99:17:a9:d5:b9:19:96:ec:9f:a7: 73:f7:e4:51:b0:80:54:45:9a:8b:68:fd:c9:ac:21:33:d0:0b: 9f:7e:29:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwODIyMTkwNzA4WhcNMjUwODI5MTkwNzA4WjAYMRYwFAYD VQQDEw02OGE4YmZkYy05YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7Q1NaHsjJQ7x8j2hhPmuJxjEu0WWcXm88EM8ZLcqMB1IPNPxuRjbJhQyjx9 q2lTpDZgJaanVOawOqks4TOUS2CCDnyUWUR71X+M58MH0rC43x0DRG/+dA4D2SmO y2qg1hwatt6CmPLY4hxeOmc3clHqVQEudmh2ttQ9MHk8kgbIek+cQen/mvfmzIL4 v8D4wYdSrcxzsPVvajAPfIWSaRjU+g9ZSEvz56XIsmVkBxWlZ9xqYMblxla/cUtj KZVphRyBWBitEfqhW4x5V/ygt1KNIIDPAdUnQYHjU2HTq/Ii3hefBH3264x9EAib MQ6GKV+Zus9jJ2UaeLfenGqkHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEPiV2A o++5WCUT6bypV7EUVtHmMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+PxwZTCxoMo5WYOX8EWPun0nRBThN6eIGqB5FxviCpMh2YAMAmy+6 vtFBqG3EGIpzT+lx8OZB3eQJB0syfoDO7ccDbEtASYglYqO+yXIVBp643Zi96xUX 0lBA8PG6qsB2U3oefw91OjQIN9bBpBcInowDJAVSuMHFng+HeV+pSOJx6q1MBbMo zl7phzfL5+XBxQQukG0VqapfneNHA6juAXvTfX4SvGyYaZFjNJHZdM5tSgH65riB eneDRbINmsF9vitWc3ua+1lN7KLq0KTbkmzFkDzEoHTIba9/Snmk6JkXqdW5GZbs n6dz9+RRsIBURZqLaP3JrCEz0Auffimv -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:02 2025 by rpki-client