$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: RemBTa5sq++rAxU+pbpPCoYwWYkgZ7IOHhxZc2LzNZ0= Subject key identifier: 34:42:FA:89:28:BB:ED:61:34:C1:A8:41:73:0A:44:F8:B1:57:EA:FA Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34BA Signing time: Fri 22 Aug 2025 14:41:55 +0000 Manifest this update: Fri 22 Aug 2025 14:41:54 +0000 Manifest next update: Fri 29 Aug 2025 14:41:54 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: ZOUiwhD5pWBhQeHH9yVl6y2XSA1+fKGT+3MWcBNMgdM=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Aug 22 14:41:54 2025 GMT Not After : Aug 29 14:41:54 2025 GMT Subject: CN=68a881b3-bce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:23:22:40:b4:4e:13:12:8a:f1:81:5f:7d: c4:6f:0a:c1:63:2b:ff:d3:89:c5:ac:31:1d:6c:77: 96:52:84:f0:d6:2d:82:d6:73:46:a7:78:50:ff:51: dd:43:69:49:5e:e3:5b:cd:42:82:ec:78:5d:bd:b0: f2:7b:c4:00:fc:9a:d6:89:25:35:c0:d2:bb:28:a8: 37:30:3b:f9:54:ca:62:c8:0d:b3:59:01:f3:61:52: ad:79:fc:33:29:16:e7:6a:2a:f8:e0:d3:49:63:07: 36:ee:89:bf:f9:1e:88:60:2f:fe:65:a1:2a:64:d6: ef:39:08:9b:a2:29:a5:40:6e:03:98:ac:d6:27:ff: 9a:c6:53:49:04:b9:45:06:23:de:a4:5e:c8:21:1e: 7f:ce:4e:7f:ff:84:69:7d:5a:bc:69:79:24:d6:57: 15:52:e1:15:a7:e9:54:fd:fd:44:57:bb:06:b6:89: 25:74:e2:9d:7f:6c:9e:6c:82:82:38:3d:e1:c0:5d: 97:d5:87:3d:7a:8b:00:15:46:1b:da:ca:e7:7d:ea: 7b:ab:17:38:4c:45:1e:04:b8:78:7c:f6:58:9d:36: 69:0e:d0:31:dd:80:b9:b6:25:fc:25:9c:10:89:5a: 96:12:cc:5a:3b:71:e0:bc:fa:32:01:7b:47:e0:89: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:42:FA:89:28:BB:ED:61:34:C1:A8:41:73:0A:44:F8:B1:57:EA:FA X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ba:47:07:72:7e:28:01:f3:bb:1e:19:07:c0:60:a3:3f:38: 02:18:06:7d:fd:8a:e3:a2:fb:b6:69:c1:c4:5a:56:ba:b7:c7: bc:a0:3a:2a:0d:58:6c:84:27:85:14:27:cb:ab:fa:3b:0a:e5: 4b:08:7b:7c:0e:f9:e5:b2:7f:64:ab:e2:32:97:14:25:32:ee: cc:93:3d:c4:8e:dc:5e:4e:af:0e:ce:98:e4:47:95:ad:cd:aa: 84:03:7d:12:9b:5c:30:36:6d:af:7e:a4:50:77:07:9b:17:e7: df:48:d3:50:98:98:f7:68:90:e7:bc:7b:0f:57:fe:bd:77:16: a2:ff:b2:7c:63:5b:0d:ad:0c:fc:f9:2b:5b:46:96:cf:8a:b7: a8:34:d0:e9:53:de:0b:9b:1f:db:f0:cf:e1:76:4a:a1:49:35: 93:ff:47:51:cb:a9:d6:49:2c:be:cc:fd:39:6e:15:8c:03:56: ad:a1:1f:28:12:68:6c:d4:12:a7:77:ea:ad:d7:90:dc:03:32: e1:ce:99:a8:16:c7:67:ba:88:00:b5:6f:b1:39:20:cb:ce:84: bb:60:4a:0b:48:fd:92:ae:0b:ed:dc:4a:46:72:27:c6:8f:5f: 95:4d:75:10:a8:56:a9:e4:3c:9a:20:3e:f4:b8:72:21:4c:df: 8d:c5:7c:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUwODIyMTQ0MTU0WhcNMjUwODI5MTQ0MTU0WjAYMRYwFAYD VQQDEw02OGE4ODFiMy1iY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+0jIkC0ThMSivGBX33EbwrBYyv/04nFrDEdbHeWUoTw1i2C1nNGp3hQ/1Hd Q2lJXuNbzUKC7HhdvbDye8QA/JrWiSU1wNK7KKg3MDv5VMpiyA2zWQHzYVKtefwz KRbnair44NNJYwc27om/+R6IYC/+ZaEqZNbvOQiboimlQG4DmKzWJ/+axlNJBLlF BiPepF7IIR5/zk5//4RpfVq8aXkk1lcVUuEVp+lU/f1EV7sGtokldOKdf2yebIKC OD3hwF2X1Yc9eosAFUYb2srnfep7qxc4TEUeBLh4fPZYnTZpDtAx3YC5tiX8JZwQ iVqWEsxaO3HgvPoyAXtH4IkD2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRC+oko u+1hNMGoQXMKRPixV+r6MB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ukcHcn4oAfO7HhkHwGCjPzgCGAZ9/Yrjovu2acHEWla6t8e8oDoq DVhshCeFFCfLq/o7CuVLCHt8Dvnlsn9kq+IylxQlMu7Mkz3EjtxeTq8OzpjkR5Wt zaqEA30Sm1wwNm2vfqRQdwebF+ffSNNQmJj3aJDnvHsPV/69dxai/7J8Y1sNrQz8 +StbRpbPireoNNDpU94Lmx/b8M/hdkqhSTWT/0dRy6nWSSy+zP05bhWMA1atoR8o Emhs1BKnd+qt15DcAzLhzpmoFsdnuogAtW+xOSDLzoS7YEoLSP2Srgvt3EpGcifG j1+VTXUQqFap5DyaID70uHIhTN+NxXyJ -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:57 2025 by rpki-client