$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft File: pbtkBP5TtawGtBCz1s2gNKITHpA.mft (raw, json) Hash identifier: gSOQkwdruCBna2D7yGxzD2GM+zPVgJc6GyxFi4QywCk= Subject key identifier: 67:B8:BC:1F:90:1C:BF:33:80:2E:60:78:A5:9B:26:BB:7B:C8:CC:27 Authority key identifier: A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90 Certificate issuer: /CN=A915DE6C/serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft Manifest number: 29 Signing time: Sat 23 Aug 2025 07:59:25 +0000 Manifest this update: Sat 23 Aug 2025 07:59:24 +0000 Manifest next update: Sat 30 Aug 2025 07:59:24 +0000 Files and hashes: 1: pbtkBP5TtawGtBCz1s2gNKITHpA.crl (hash: PMiyjfr9Q22fcaZUOtw5hhSrIL9AIVP5dtwvTlnCTPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.crl rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90 Validity Not Before: Aug 23 07:59:24 2025 GMT Not After : Aug 30 07:59:24 2025 GMT Subject: CN=68a974dd-d07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:7b:be:53:7d:9c:b7:a7:ee:a8:30:e4:2c: 34:67:62:e6:d3:67:40:78:af:0e:b2:4c:e0:74:12: 46:57:6e:c4:f2:30:90:42:2c:56:32:99:31:71:6d: f8:e3:0d:73:1b:bc:87:0b:2a:7d:c8:98:20:79:1d: 34:0d:b8:68:22:09:42:2b:68:de:8f:06:51:e0:78: 14:d6:b5:f7:93:6b:a2:a8:6d:71:87:20:53:96:10: 13:07:58:19:c9:14:21:7d:3b:ec:db:11:1f:9e:54: a8:4a:15:0c:ce:c2:e0:df:1e:ef:75:9a:97:1a:59: 50:ec:e1:6f:05:3d:b4:54:af:3b:e3:b7:7c:d6:e5: 63:7c:06:8f:e6:3a:48:d1:8d:45:f3:4c:1e:21:31: a3:7e:11:1c:43:67:b9:8d:1d:62:09:05:c5:57:9d: 1c:7f:71:ee:0a:14:ca:4b:7c:12:ff:74:ab:8d:43: b2:09:ed:ac:51:7a:c8:2b:5e:d5:d4:52:ca:0e:ed: 27:34:c4:96:ae:c5:55:d1:c9:52:93:5e:7b:57:a6: 06:9b:a7:74:75:79:4d:61:a8:e2:fe:0b:f8:8a:28: 29:71:51:ab:8b:50:64:bd:50:65:4d:53:4c:03:8f: cf:5a:47:72:b2:89:11:73:a3:ae:94:c7:f9:e4:ce: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B8:BC:1F:90:1C:BF:33:80:2E:60:78:A5:9B:26:BB:7B:C8:CC:27 X509v3 Authority Key Identifier: keyid:A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c4:99:49:e3:b2:7b:32:81:55:e0:de:8a:5d:2c:b4:ff:cd: 06:82:65:9e:73:0f:d8:4f:fc:40:a2:08:79:fe:5b:e4:ce:87: 8f:6b:d5:0a:88:4d:3f:7d:ee:9e:ec:62:7d:c9:6a:a2:81:25: 43:af:fe:ac:8e:67:de:ac:f4:47:c0:2f:3a:1b:06:b4:b8:79: df:ce:1e:07:48:58:9c:db:9b:aa:28:92:2e:c8:47:fb:55:5a: 7f:c4:1c:2e:64:9b:9c:c5:49:a4:f0:9c:46:fc:b8:8f:44:9b: 8a:db:5c:b5:97:7f:f6:85:c1:7a:66:29:e7:6b:0e:05:7c:a1: 65:b4:c6:23:30:f3:2c:10:fc:6a:d1:e3:dc:01:d4:ba:00:c9: 3a:0b:cc:ae:2b:b8:85:42:bf:76:53:78:69:db:e9:f9:5c:0c: 7d:7e:80:30:22:39:c3:9c:ed:b6:70:c6:10:7f:f5:1b:27:6f: da:8b:fb:64:77:df:86:90:9b:80:0e:18:2e:17:a5:91:ad:33: 40:91:38:22:de:68:e7:3a:85:37:5f:23:e0:fa:66:07:f5:fb: 00:12:e7:04:27:1d:8a:d6:aa:86:c8:5c:c7:75:71:cd:32:45: 48:da:cf:bd:e2:54:68:e6:66:aa:36:c1:df:5a:5d:11:f8:8c: 98:40:97:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 REU2QzExMC8GA1UEBRMoQTVCQjY0MDRGRTUzQjVBQzA2QjQxMEIzRDZDREEwMzRB MjEzMUU5MDAeFw0yNTA4MjMwNzU5MjRaFw0yNTA4MzAwNzU5MjRaMBgxFjAUBgNV BAMTDTY4YTk3NGRkLWQwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5THu+U32ct6fuqDDkLDRnYubTZ0B4rw6yTOB0EkZXbsTyMJBCLFYymTFxbfjj DXMbvIcLKn3ImCB5HTQNuGgiCUIraN6PBlHgeBTWtfeTa6KobXGHIFOWEBMHWBnJ FCF9O+zbER+eVKhKFQzOwuDfHu91mpcaWVDs4W8FPbRUrzvjt3zW5WN8Bo/mOkjR jUXzTB4hMaN+ERxDZ7mNHWIJBcVXnRx/ce4KFMpLfBL/dKuNQ7IJ7axResgrXtXU UsoO7Sc0xJauxVXRyVKTXntXpgabp3R1eU1hqOL+C/iKKClxUauLUGS9UGVNU0wD j89aR3KyiRFzo66Ux/nkzvNjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ7i8H5Ac vzOALmB4pZsmu3vIzCcwHwYDVR0jBBgwFoAUpbtkBP5TtawGtBCz1s2gNKITHpAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzc0RkJCM0Q2NDNE NDExRjA5MEI0NzY2OEM0RjlBRTAyL3BidGtCUDVUdGF3R3RCQ3oxczJnTktJVEhw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGJ0a0JQNVR0YXdHdEJDejFzMmdOS0lUSHBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE RTZDLzc0RkJCM0Q2NDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL3BidGtCUDVUdGF3 R3RCQ3oxczJnTktJVEhwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7EmUnjsnsygVXg3opdLLT/zQaCZZ5zD9hP/ECiCHn+W+TOh49r1QqI TT997p7sYn3JaqKBJUOv/qyOZ96s9EfALzobBrS4ed/OHgdIWJzbm6ooki7IR/tV Wn/EHC5km5zFSaTwnEb8uI9Em4rbXLWXf/aFwXpmKedrDgV8oWW0xiMw8ywQ/GrR 49wB1LoAyToLzK4ruIVCv3ZTeGnb6flcDH1+gDAiOcOc7bZwxhB/9Rsnb9qL+2R3 34aQm4AOGC4XpZGtM0CROCLeaOc6hTdfI+D6Zgf1+wAS5wQnHYrWqobIXMd1cc0y RUjaz73iVGjmZqo2wd9aXRH4jJhAl9A= -----END CERTIFICATE-----Generated at Sat Aug 23 20:41:34 2025 by rpki-client