$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json) Hash identifier: Vz9AZDrTvx4qIwPKZFO+Xy3MO4gFGXHSOvtSmoEEGw4= Subject key identifier: 24:E4:0F:68:A0:86:F9:B1:F5:45:B3:0E:A2:D5:EF:1E:9B:B8:93:63 Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft Manifest number: 07E9 Signing time: Fri 22 Aug 2025 21:14:25 +0000 Manifest this update: Fri 22 Aug 2025 21:14:25 +0000 Manifest next update: Fri 29 Aug 2025 21:14:25 +0000 Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: LMbdFizteSz/Y6aixA2795oVPDLXmpWWKfyZUSYeJEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Validity Not Before: Aug 22 21:14:25 2025 GMT Not After : Aug 29 21:14:25 2025 GMT Subject: CN=68a8ddb1-3493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:84:40:28:87:c2:e0:4d:19:33:d5:17:c5: 3e:d9:03:f7:9b:67:57:c9:24:45:90:f9:90:ea:d6: 2e:aa:a8:28:21:fb:40:09:a4:ab:b2:b6:72:b2:2a: dd:ec:56:0d:20:ba:83:51:b3:5f:ab:8b:36:97:85: 2c:97:d6:a1:49:fe:4f:3d:c8:b2:5e:21:02:3f:7c: a7:fd:d6:9f:b4:6e:7f:69:1c:dc:3c:01:d5:33:b6: d9:1c:35:1f:a6:db:64:df:6a:ee:6a:29:f2:b0:93: be:5d:2a:6e:8a:82:9b:e2:e1:d3:55:64:69:44:c1: 2e:fb:24:1d:ac:86:0f:ea:9c:84:88:63:3d:50:6b: 2b:c8:ad:6c:08:5a:eb:f9:1c:92:87:a5:18:bb:1a: 34:94:f3:2e:0c:bd:4f:8f:f4:fb:d0:fa:23:b6:ca: 70:8c:86:9a:23:06:b2:12:a7:27:a0:52:57:e5:f9: b6:8e:53:17:2c:2f:b5:36:f8:48:71:dc:db:1f:28: 95:f6:25:bd:dc:4d:84:6b:b0:81:e4:20:97:80:82: 5b:43:65:dc:21:20:13:fd:92:76:73:33:18:37:dc: e7:e7:8a:6e:e2:8a:b4:8c:da:e2:ab:b5:9a:2c:ba: d7:0e:4b:a9:29:6c:57:f3:7c:25:96:2b:62:8d:9e: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E4:0F:68:A0:86:F9:B1:F5:45:B3:0E:A2:D5:EF:1E:9B:B8:93:63 X509v3 Authority Key Identifier: keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:4a:51:ce:69:a2:fd:5a:30:3d:2c:b7:ae:34:a9:c5:93:dc: b0:47:6f:92:15:48:c0:23:f7:0b:ee:b7:d7:ea:23:44:f7:2f: 5d:ce:f7:4f:b5:f4:26:18:06:1a:c1:17:7f:08:47:13:b5:13: 37:a6:ad:f2:64:27:9e:9f:fc:80:65:bf:bd:79:6e:c0:30:12: 55:9e:cd:af:11:21:43:3f:ff:23:0b:33:8e:71:6c:6f:8a:f2: 33:ac:b7:3b:87:d3:7b:f7:b7:73:54:dc:03:c8:3a:7e:fb:ee: 5c:61:4a:2d:8c:d2:66:5d:2f:6f:a7:02:74:52:96:46:96:5f: c3:0f:58:a8:fa:1a:ef:26:2b:b3:f3:f4:c4:7a:76:ba:30:32: 8f:d6:5f:91:04:47:24:68:68:3c:f6:85:bd:7c:19:17:00:15: 42:e6:27:6c:8c:58:7e:bc:bc:33:9f:d4:29:45:d4:d7:fc:e4: 57:15:09:5c:99:c8:70:87:6c:30:65:b8:ad:f6:7f:3f:86:c3: 8b:43:49:7e:51:3f:2c:84:13:ef:bb:d2:1a:fa:c7:d1:d0:e7: e0:d3:ce:99:f9:44:fa:b6:d3:12:01:df:18:46:ab:a7:f8:b7: a6:33:d7:9c:df:87:22:37:6e:b3:59:6c:c9:27:f2:4a:45:62: 47:14:e0:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0UwM0ZEMTU5ODAwOTlCNUJGNTAyMUU5MEJFMUY0QTc3 RTAwQzc5QzAeFw0yNTA4MjIyMTE0MjVaFw0yNTA4MjkyMTE0MjVaMBgxFjAUBgNV BAMTDTY4YThkZGIxLTM0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc4oRAKIfC4E0ZM9UXxT7ZA/ebZ1fJJEWQ+ZDq1i6qqCgh+0AJpKuytnKyKt3s Vg0guoNRs1+rizaXhSyX1qFJ/k89yLJeIQI/fKf91p+0bn9pHNw8AdUzttkcNR+m 22Tfau5qKfKwk75dKm6Kgpvi4dNVZGlEwS77JB2shg/qnISIYz1QayvIrWwIWuv5 HJKHpRi7GjSU8y4MvU+P9PvQ+iO2ynCMhpojBrISpyegUlfl+baOUxcsL7U2+Ehx 3NsfKJX2Jb3cTYRrsIHkIJeAgltDZdwhIBP9knZzMxg33Ofnim7iirSM2uKrtZos utcOS6kpbFfzfCWWK2KNns09AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJOQPaKCG +bH1RbMOotXvHpu4k2MwHwYDVR0jBBgwFoAUPgP9FZgAmbW/UCHpC+H0p34Ax5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0JGNDA0QTVBMDI2 NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJXX1VDSHBDLUgwcDM0QXg1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdQOUZaZ0FtYldfVUNIcEMtSDBwMzRBeDV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0JGNDA0QTVBMDI2NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJX X1VDSHBDLUgwcDM0QXg1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN1KUc5pov1aMD0st640qcWT3LBHb5IVSMAj9wvut9fqI0T3L13O90+1 9CYYBhrBF38IRxO1EzemrfJkJ56f/IBlv715bsAwElWeza8RIUM//yMLM45xbG+K 8jOstzuH03v3t3NU3APIOn777lxhSi2M0mZdL2+nAnRSlkaWX8MPWKj6Gu8mK7Pz 9MR6drowMo/WX5EERyRoaDz2hb18GRcAFULmJ2yMWH68vDOf1ClF1Nf85FcVCVyZ yHCHbDBluK32fz+Gw4tDSX5RPyyEE++70hr6x9HQ5+DTzpn5RPq20xIB3xhGq6f4 t6Yz15zfhyI3brNZbMkn8kpFYkcU4PE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:13 2025 by rpki-client