$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: V5LjtYRxCB91/70zbxEu8tcJa/0pGDKTnjAxYPvIu0o= Subject key identifier: FB:CD:16:E6:19:55:41:AF:9F:AD:D9:6C:7B:38:88:C6:D5:6C:10:C7 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: 8B Signing time: Fri 22 Aug 2025 19:21:17 +0000 Manifest this update: Fri 22 Aug 2025 19:21:17 +0000 Manifest next update: Fri 29 Aug 2025 19:21:17 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: eemuM+jAOmnEOjMVmKv3aw7WUksGdzFQ9qVevlYXaFc=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pDBpwWzy3RFOzY6mOa1pibkze94QAdG3zJbynRenhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Aug 22 19:21:17 2025 GMT Not After : Aug 29 19:21:17 2025 GMT Subject: CN=68a8c32d-0947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:8e:91:00:f7:1a:94:21:91:32:85:5e:6c: 75:71:d3:29:60:72:1e:0a:b6:83:80:6a:3c:c8:67: 0e:14:7d:18:b5:f6:8b:e0:ea:94:06:c7:05:9a:25: 3f:1c:3b:1a:d1:df:92:eb:bb:8b:a4:e3:e8:76:b2: 47:c5:54:32:38:31:24:99:d3:39:b0:68:08:dd:10: d1:6f:2f:da:ea:44:59:3d:25:77:c8:c5:ca:af:f1: e8:ca:a8:6e:36:79:ee:09:93:8f:d1:53:78:7c:2d: 9a:60:e3:13:66:94:14:8e:cb:1a:11:91:a8:53:18: f5:65:b6:94:a7:a5:3f:ea:b8:89:75:e2:1c:e6:97: 17:2c:9a:47:c3:87:66:23:f5:23:ce:95:50:86:f5: 70:c2:f3:e7:f2:75:9c:84:33:04:15:15:8d:58:87: 9a:5b:f4:90:37:ff:f0:c8:5d:05:b6:62:fb:e8:5c: 50:92:bd:5c:a1:d0:fd:5b:68:ea:f1:a6:fa:98:9e: 9b:8b:33:a7:09:99:82:14:7f:91:55:41:60:e0:b0: 4a:d9:34:20:8c:b9:fe:05:5d:62:87:ae:24:9f:2c: 38:9f:dc:b6:92:fe:e2:fd:e9:22:d3:b0:45:0d:02: 33:55:7b:7a:1b:ac:2a:28:64:d8:49:85:d3:0c:ed: 6d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CD:16:E6:19:55:41:AF:9F:AD:D9:6C:7B:38:88:C6:D5:6C:10:C7 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d1:f0:0b:93:09:1f:aa:a0:fd:90:79:6c:25:52:17:0d:ff: 4c:63:b6:4d:76:f2:09:dd:e1:a0:62:96:61:fe:24:27:86:7b: 3d:d6:08:25:9c:54:41:5f:bf:f9:78:69:95:d0:c3:35:d6:4b: ab:e4:86:a4:91:61:98:b6:f2:bc:b4:1f:e7:a1:7b:29:2a:41: 60:97:52:c0:13:ed:cc:51:53:70:e3:e8:10:16:40:0c:8f:b4: 65:80:f9:31:17:6c:5c:43:6b:6e:e1:24:46:2e:b5:1f:ae:7a: f8:80:d4:53:0e:33:ba:19:71:df:64:d1:bf:80:7a:d8:dc:67: 74:52:a3:18:d1:a8:56:4a:41:ba:79:10:b0:d3:d6:2f:54:c7: 2e:ce:b1:e6:2a:d3:7f:30:ca:c1:bd:26:f8:c9:a9:59:24:fe: 92:0a:b1:93:38:fd:d6:8e:71:ce:16:53:3f:94:47:17:b4:dc: a8:79:8c:bc:c5:82:d7:63:e7:11:21:65:d7:9f:97:c7:82:2a: a2:18:43:d8:fe:12:fd:cb:9d:ff:6c:97:2a:c2:92:4d:c0:7e: b5:4a:ce:83:e0:be:28:71:3f:be:7d:b8:09:70:12:86:0c:a4: 2a:b6:05:e8:ac:5a:69:67:98:7d:29:7c:c7:d9:aa:31:dd:6b: 48:99:b1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5 OUQyQzcyN0MwHhcNMjUwODIyMTkyMTE3WhcNMjUwODI5MTkyMTE3WjAYMRYwFAYD VQQDEw02OGE4YzMyZC0wOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2aOkQD3GpQhkTKFXmx1cdMpYHIeCraDgGo8yGcOFH0YtfaL4OqUBscFmiU/ HDsa0d+S67uLpOPodrJHxVQyODEkmdM5sGgI3RDRby/a6kRZPSV3yMXKr/Hoyqhu NnnuCZOP0VN4fC2aYOMTZpQUjssaEZGoUxj1ZbaUp6U/6riJdeIc5pcXLJpHw4dm I/UjzpVQhvVwwvPn8nWchDMEFRWNWIeaW/SQN//wyF0FtmL76FxQkr1codD9W2jq 8ab6mJ6bizOnCZmCFH+RVUFg4LBK2TQgjLn+BV1ih64knyw4n9y2kv7i/eki07BF DQIzVXt6G6wqKGTYSYXTDO1tSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvNFuYZ VUGvn63ZbHs4iMbVbBDHMB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM MnVSSkd3LWd6WENaMHNjbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB70fALkwkfqqD9kHlsJVIXDf9MY7ZNdvIJ3eGgYpZh/iQnhns91ggl nFRBX7/5eGmV0MM11kur5IakkWGYtvK8tB/noXspKkFgl1LAE+3MUVNw4+gQFkAM j7RlgPkxF2xcQ2tu4SRGLrUfrnr4gNRTDjO6GXHfZNG/gHrY3Gd0UqMY0ahWSkG6 eRCw09YvVMcuzrHmKtN/MMrBvSb4yalZJP6SCrGTOP3WjnHOFlM/lEcXtNyoeYy8 xYLXY+cRIWXXn5fHgiqiGEPY/hL9y53/bJcqwpJNwH61Ss6D4L4ocT++fbgJcBKG DKQqtgXorFppZ5h9KXzH2aox3WtImbHk -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:20 2025 by rpki-client