$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: r2GROUDk/xxK0kFtZt/l220MlMz6NwRMxrBTNWI0rZM= Subject key identifier: BE:72:D1:0D:2E:CB:03:C0:76:2C:10:F7:D6:F5:BE:D1:3E:5D:05:A1 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 02A1 Signing time: Sat 23 Aug 2025 01:46:43 +0000 Manifest this update: Sat 23 Aug 2025 01:46:43 +0000 Manifest next update: Sat 30 Aug 2025 01:46:43 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: 8oW78yDLbli8W8qKZn7gIy9YuSWaTVRGSLgSDV8ZO8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Aug 23 01:46:43 2025 GMT Not After : Aug 30 01:46:43 2025 GMT Subject: CN=68a91d83-f716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d9:73:28:26:c7:6c:2d:82:32:e7:63:34:c1: 1d:0c:4f:fd:da:57:c7:29:99:ef:8d:73:f8:89:60: 2d:c5:68:fe:47:da:fe:e0:72:eb:58:30:fb:cb:f1: 9e:e6:49:91:d3:43:3f:6c:cf:f2:3a:eb:65:b5:04: bc:df:fc:89:6a:cd:67:21:77:8b:dd:af:97:ab:d9: cc:01:4a:1b:72:3c:f6:ec:e8:2f:1c:9f:4a:ee:44: 93:b5:bb:b0:d9:91:f5:a0:5c:88:75:ba:f3:96:8d: da:21:e2:be:2f:79:03:96:0f:d2:b4:72:af:67:d2: db:6f:c4:c4:4b:29:5e:33:0a:70:0c:b9:49:47:16: 22:a1:bd:d9:71:ba:65:32:a4:d8:bc:84:ba:a0:1b: 39:63:5b:af:8a:83:dc:92:ae:53:25:f8:d6:b3:68: 03:86:51:82:c8:67:bf:34:19:e8:ed:b2:dc:f2:ab: 09:1b:51:2c:a4:b8:d5:78:52:b2:4d:3b:5e:78:a5: 32:5b:9e:d2:24:01:46:82:bb:ed:b4:22:18:3b:aa: 32:4d:79:dc:f4:63:3b:88:9b:96:4e:61:3e:87:8c: a2:94:3a:8e:79:b4:32:d7:77:4c:9c:58:21:11:8b: 55:15:60:d2:ac:30:6b:9e:c5:6a:48:04:86:ec:af: 0a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:D1:0D:2E:CB:03:C0:76:2C:10:F7:D6:F5:BE:D1:3E:5D:05:A1 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:90:ac:17:c6:89:dd:a5:c8:2b:ac:41:dd:ef:cc:3f:54:54: ff:ef:c7:b8:a5:17:86:9f:46:d3:2a:ac:e5:89:ed:00:ee:7e: 8d:3c:16:2b:6a:a9:5d:7a:70:6d:d2:5a:cf:48:51:97:b2:97: f8:1d:8d:29:ab:5b:46:d9:b5:0a:09:25:63:05:5c:20:aa:fc: e8:5d:5e:93:1a:e3:83:22:db:e7:ff:4a:39:39:37:f5:95:38: 4c:d0:c1:d7:8f:b3:42:0d:ec:d6:06:5a:88:b6:1d:a6:2d:d7: 42:5d:92:d0:22:00:f8:88:a8:22:cc:d4:f7:9f:2b:04:46:e9: 57:81:aa:f0:0f:e8:ff:7c:59:22:99:c2:1c:03:0b:c7:c3:84: 9e:8c:5d:d8:76:ac:7f:d8:25:4e:c4:93:35:e0:be:82:b9:22: 65:6f:6d:a7:fb:53:4e:ad:b1:73:fb:1d:bb:83:c9:db:2a:cf: 33:59:b3:1a:6f:01:60:e6:e4:8e:56:5a:81:fa:d0:d1:9c:54: 40:c7:be:95:7e:ad:25:76:18:1e:69:b2:37:0d:48:ee:b1:ed: 5f:6f:8d:c6:78:7c:9a:d7:fc:5a:17:ad:51:71:a6:e2:6f:4c: e9:fd:3c:76:35:45:3b:26:dd:45:77:ea:7c:5a:dc:6d:c1:f7: 4e:a5:bc:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwODIzMDE0NjQzWhcNMjUwODMwMDE0NjQzWjAYMRYwFAYD VQQDEw02OGE5MWQ4My1mNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA99lzKCbHbC2CMudjNMEdDE/92lfHKZnvjXP4iWAtxWj+R9r+4HLrWDD7y/Ge 5kmR00M/bM/yOutltQS83/yJas1nIXeL3a+Xq9nMAUobcjz27OgvHJ9K7kSTtbuw 2ZH1oFyIdbrzlo3aIeK+L3kDlg/StHKvZ9Lbb8TESyleMwpwDLlJRxYiob3Zcbpl MqTYvIS6oBs5Y1uvioPckq5TJfjWs2gDhlGCyGe/NBno7bLc8qsJG1EspLjVeFKy TTteeKUyW57SJAFGgrvttCIYO6oyTXnc9GM7iJuWTmE+h4yilDqOebQy13dMnFgh EYtVFWDSrDBrnsVqSASG7K8KAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5y0Q0u ywPAdiwQ99b1vtE+XQWhMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDkKwXxondpcgrrEHd78w/VFT/78e4pReGn0bTKqzlie0A7n6NPBYr aqldenBt0lrPSFGXspf4HY0pq1tG2bUKCSVjBVwgqvzoXV6TGuODItvn/0o5OTf1 lThM0MHXj7NCDezWBlqIth2mLddCXZLQIgD4iKgizNT3nysERulXgarwD+j/fFki mcIcAwvHw4SejF3Ydqx/2CVOxJM14L6CuSJlb22n+1NOrbFz+x27g8nbKs8zWbMa bwFg5uSOVlqB+tDRnFRAx76Vfq0ldhgeabI3DUjuse1fb43GeHya1/xaF61Rcabi b0zp/Tx2NUU7Jt1Fd+p8WtxtwfdOpbzt -----END CERTIFICATE-----Generated at Sat Aug 23 10:57:23 2025 by rpki-client