$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: M4fEZ+77wMpIOL/kgtcZA5yKACll0EfnxctOEd2F7Nk= Subject key identifier: 0A:A6:49:82:A3:1C:09:D9:BA:6F:C7:6E:08:4E:D4:3C:49:F9:8D:80 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 26ED Signing time: Fri 22 Aug 2025 15:42:48 +0000 Manifest this update: Fri 22 Aug 2025 15:42:47 +0000 Manifest next update: Fri 29 Aug 2025 15:42:47 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: bkHd4G/EdybLWuTAPTGRAyK0n4XXurb72+2bgolspDQ=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: rWS5j2TJ+tCGGvBtanx4musy7r04IRKphVI4Md/BpKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10001 (0x2711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C, serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Aug 22 15:42:47 2025 GMT Not After : Aug 29 15:42:47 2025 GMT Subject: CN=68a88ff8-e12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:34:45:d8:a0:76:c6:e3:6c:1a:07:93:63: 03:36:e5:88:ce:dc:30:6f:c7:9e:3d:f7:9c:6c:ec: a2:4e:1c:22:8b:ed:d6:19:4e:74:f4:a3:e9:5f:6e: 2e:54:76:15:42:ae:0e:17:1e:a8:fd:0b:7d:b1:be: 1f:f4:4c:57:86:4d:4f:0b:ae:99:5d:89:97:9d:68: 4b:0e:e3:5e:d2:b6:2c:2e:42:fb:b2:5a:32:c3:d1: df:60:fc:01:ff:65:37:21:29:37:f7:c8:99:aa:31: 0a:74:02:77:d6:12:6a:65:04:36:98:78:b0:c1:0f: 58:20:d4:3f:b4:b0:19:91:03:bc:86:9d:bd:e5:13: 5f:91:72:fe:9c:d7:bd:73:e8:8d:25:cb:55:0b:c0: 00:f6:b0:62:50:0b:98:17:0b:9d:bf:6f:34:21:30: 54:c3:49:4c:27:cd:ba:2f:9d:70:94:2b:a2:bb:82: 9c:0b:bc:90:b5:56:b0:29:f4:b6:ef:1b:62:49:e8: 02:28:07:74:00:cd:b3:13:9a:11:a4:1c:7b:9d:07: 23:84:13:91:49:b0:62:9e:1a:c3:61:e2:5c:19:47: ff:6c:44:03:d8:11:67:65:7d:ea:7d:4e:1b:01:9a: 79:92:d7:ff:77:23:b9:07:9c:fc:3d:a6:2d:73:79: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:49:82:A3:1C:09:D9:BA:6F:C7:6E:08:4E:D4:3C:49:F9:8D:80 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:43:59:98:72:16:cd:36:31:f4:eb:48:fd:9c:94:39:76:3a: 39:8d:de:c7:ea:24:96:11:52:43:67:cf:68:96:a6:63:43:33: 5b:8c:8e:27:c6:d6:c0:2d:ab:ea:ef:81:2f:ef:a1:a7:6f:a6: 52:ed:49:f9:a2:e7:94:84:4d:c2:fa:4d:11:18:31:1a:14:b2: d4:35:8d:28:8f:7a:90:55:bf:cb:8e:c9:e4:14:be:52:b3:5c: 9e:28:1b:90:ea:0f:ee:db:c8:87:d8:2d:72:27:28:66:09:a5: 24:26:35:44:b6:2f:85:9b:d6:52:35:b4:3e:38:1a:bc:38:85: 92:95:7c:b2:c2:ba:56:a0:58:0b:7a:3b:9d:b8:f5:4a:17:63: cf:c8:ad:af:61:ab:39:00:39:0b:f5:77:d2:59:06:93:57:8c: 8a:f1:1e:e6:5f:5c:9c:9a:c1:93:07:14:55:a7:cd:c8:6b:a4: b4:be:55:19:95:2f:2f:21:6e:7c:aa:e3:04:1b:a9:64:2d:b4: ae:78:46:ee:7e:eb:02:9d:e1:8e:e8:d2:e4:56:ab:03:56:a6: 2b:7e:2e:6f:7f:7a:11:4b:9b:f8:09:e9:d6:d7:a8:64:04:d9: c7:fc:18:ee:ba:11:c2:ac:e0:f5:38:d2:ca:2c:d1:0f:7f:6f: f0:ce:e2:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjUwODIyMTU0MjQ3WhcNMjUwODI5MTU0MjQ3WjAYMRYwFAYD VQQDEw02OGE4OGZmOC1lMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuc0RdigdsbjbBoHk2MDNuWIztwwb8eePfecbOyiThwii+3WGU509KPpX24u VHYVQq4OFx6o/Qt9sb4f9ExXhk1PC66ZXYmXnWhLDuNe0rYsLkL7sloyw9HfYPwB /2U3ISk398iZqjEKdAJ31hJqZQQ2mHiwwQ9YINQ/tLAZkQO8hp295RNfkXL+nNe9 c+iNJctVC8AA9rBiUAuYFwudv280ITBUw0lMJ826L51wlCuiu4KcC7yQtVawKfS2 7xtiSegCKAd0AM2zE5oRpBx7nQcjhBORSbBinhrDYeJcGUf/bEQD2BFnZX3qfU4b AZp5ktf/dyO5B5z8PaYtc3m7twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqmSYKj HAnZum/HbghO1DxJ+Y2AMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeQ1mYchbNNjH060j9nJQ5djo5jd7H6iSWEVJDZ89olqZjQzNbjI4n xtbALavq74Ev76Gnb6ZS7Un5oueUhE3C+k0RGDEaFLLUNY0oj3qQVb/LjsnkFL5S s1yeKBuQ6g/u28iH2C1yJyhmCaUkJjVEti+Fm9ZSNbQ+OBq8OIWSlXyywrpWoFgL ejuduPVKF2PPyK2vYas5ADkL9XfSWQaTV4yK8R7mX1ycmsGTBxRVp83Ia6S0vlUZ lS8vIW58quMEG6lkLbSueEbufusCneGO6NLkVqsDVqYrfi5vf3oRS5v4CenW16hk BNnH/BjuuhHCrOD1ONLKLNEPf2/wzuJj -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:51 2025 by rpki-client