$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: IKL2WOfizL6sthUYkbsMqw/D9od8xDCvRylh1IUfiog= Subject key identifier: 25:41:01:11:54:8C:70:E9:C3:58:63:F8:60:71:8C:7F:93:4E:E3:E0 Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: 8C Signing time: Sat 23 Aug 2025 06:48:35 +0000 Manifest this update: Sat 23 Aug 2025 06:48:35 +0000 Manifest next update: Sat 30 Aug 2025 06:48:35 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: RGk2F3tV3NJuy4W9LgrO1s1oGAInF7zehvj0ziAPFcA=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Validity Not Before: Aug 23 06:48:35 2025 GMT Not After : Aug 30 06:48:35 2025 GMT Subject: CN=68a96443-deb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:e8:f5:ee:a0:7f:3b:c1:11:a9:91:6b:26: f0:3d:95:19:da:63:05:ec:5c:8d:cb:e0:9e:61:2e: 69:82:f9:8d:ed:51:dc:26:eb:81:7e:db:87:01:7b: 68:b3:92:e1:6d:5f:4d:a4:a3:cd:cf:af:ad:42:f7: 92:7c:f8:5a:4c:48:15:3a:be:44:68:a5:58:8f:23: 9a:4d:fc:d9:f7:78:9b:bb:b8:3c:08:05:98:d4:2d: 79:9f:8a:33:f5:9b:8d:4b:bd:3e:34:be:61:a9:63: 6d:4e:74:10:bc:17:68:47:c1:df:e7:c6:3a:09:08: 43:a5:2a:ce:11:8d:1d:85:99:56:93:63:9c:08:a7: c9:a7:1b:fa:56:35:0f:f6:cd:f0:d9:22:ff:5f:f3: 5c:a4:9e:c8:88:db:65:51:78:e5:4a:31:b1:6d:74: 88:be:cb:3c:04:8d:3c:f9:d2:a1:4a:0b:a3:df:b1: 7c:e9:aa:ec:bb:cf:58:ae:5b:ed:cd:be:d2:79:c3: ea:1a:16:cb:d6:8d:8c:b2:20:85:4d:85:c3:a3:85: bf:d1:44:08:ce:f6:0b:b3:df:bd:e5:33:6a:ad:a7: ae:32:48:33:eb:29:2a:7d:85:78:8a:ee:5e:04:2b: a2:d0:5b:c8:80:1a:9e:64:51:7d:10:3f:11:8b:fa: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:01:11:54:8C:70:E9:C3:58:63:F8:60:71:8C:7F:93:4E:E3:E0 X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:70:3d:f3:89:55:70:d3:10:14:21:10:75:cc:9e:9d:de:c7: fa:aa:90:7b:e4:05:89:68:9e:70:72:96:d3:09:f9:d7:de:11: 36:e0:e0:6e:23:23:b3:6d:c3:a8:a3:de:e7:54:3a:8e:38:fc: 17:43:63:87:2a:b9:7a:ed:91:cd:60:24:bf:cd:1a:c5:a0:75: 89:49:a8:12:2f:79:ad:62:32:a1:62:10:3e:72:12:d7:29:17: ce:74:13:fe:8e:1a:a6:f4:a0:8f:8a:f5:a7:3c:6b:69:60:37: a4:32:ed:19:8a:1d:bc:68:98:6b:d4:b5:89:79:57:11:5e:d8: 74:70:48:47:93:58:0c:b2:96:78:a5:16:18:e1:cd:fc:f8:71: 7a:4c:4c:1e:b4:8a:59:a8:d3:92:7d:2f:5e:92:72:43:f2:1b: 55:17:13:81:12:fb:74:7d:8c:e1:32:47:ac:36:c5:94:a3:c9: 7a:c1:0c:54:67:1e:3a:50:e1:6a:8a:f0:90:0a:cf:4f:be:0d: 5a:38:2f:a8:2d:41:b5:02:ad:d4:71:1a:02:b7:b4:96:a9:75: 06:6f:38:d3:1a:1e:c4:83:8e:8c:af:14:e9:55:e5:61:36:3a: 84:07:a1:b2:77:71:7a:45:b3:3b:e6:58:6b:bc:71:f0:a5:4a: d9:e6:e5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5QzExMTAvBgNVBAUTKEE0MTUwNEU2NkUzMTQ0MzQ4NjI1MTkwNjk2RTBFODhG RkIxRjUyNzAwHhcNMjUwODIzMDY0ODM1WhcNMjUwODMwMDY0ODM1WjAYMRYwFAYD VQQDEw02OGE5NjQ0My1kZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/ro9e6gfzvBEamRaybwPZUZ2mMF7FyNy+CeYS5pgvmN7VHcJuuBftuHAXto s5LhbV9NpKPNz6+tQveSfPhaTEgVOr5EaKVYjyOaTfzZ93ibu7g8CAWY1C15n4oz 9ZuNS70+NL5hqWNtTnQQvBdoR8Hf58Y6CQhDpSrOEY0dhZlWk2OcCKfJpxv6VjUP 9s3w2SL/X/NcpJ7IiNtlUXjlSjGxbXSIvss8BI08+dKhSguj37F86arsu89Yrlvt zb7SecPqGhbL1o2MsiCFTYXDo4W/0UQIzvYLs9+95TNqraeuMkgz6ykqfYV4iu5e BCui0FvIgBqeZFF9ED8Ri/o4fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVBARFU jHDpw1hj+GBxjH+TTuPgMB8GA1UdIwQYMBaAFKQVBOZuMUQ0hiUZBpbg6I/7H1Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDlDMS8zMDgwNUNBQUFE NzIxMUVGQURGMjM0NUVDNEY5QUUwMi9wQlVFNW00eFJEU0dKUmtHbHVEb2pfc2ZV bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDlDMS8zMDgwNUNBQUFENzIxMUVGQURGMjM0NUVDNEY5QUUwMi9wQlVFNW00eFJE U0dKUmtHbHVEb2pfc2ZVbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbcD3ziVVw0xAUIRB1zJ6d3sf6qpB75AWJaJ5wcpbTCfnX3hE24OBu IyOzbcOoo97nVDqOOPwXQ2OHKrl67ZHNYCS/zRrFoHWJSagSL3mtYjKhYhA+chLX KRfOdBP+jhqm9KCPivWnPGtpYDekMu0Zih28aJhr1LWJeVcRXth0cEhHk1gMspZ4 pRYY4c38+HF6TEwetIpZqNOSfS9eknJD8htVFxOBEvt0fYzhMkesNsWUo8l6wQxU Zx46UOFqivCQCs9Pvg1aOC+oLUG1Aq3UcRoCt7SWqXUGbzjTGh7Eg46MrxTpVeVh NjqEB6Gyd3F6RbM75lhrvHHwpUrZ5uWM -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:04 2025 by rpki-client