$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: R0BCPJs+W5HY+9/he9o/UEYXwFVIlEUCRPhaDp05lIg= Subject key identifier: 72:03:04:E1:37:DF:0E:EC:D0:1A:F9:EB:73:5E:28:8E:15:7B:A7:A2 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 012F Signing time: Sat 23 Aug 2025 04:42:00 +0000 Manifest this update: Sat 23 Aug 2025 04:41:59 +0000 Manifest next update: Sat 30 Aug 2025 04:41:59 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: SHkhnF/8eYiMOD4GxhpNUYixGz50kK3glgVNgzBFEMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: Aug 23 04:41:59 2025 GMT Not After : Aug 30 04:41:59 2025 GMT Subject: CN=68a94697-a3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:8c:2e:62:ff:ab:4a:f7:40:c2:63:32:9e: 65:5e:da:89:0f:f4:4d:c6:35:4f:90:0b:42:29:e0: 15:44:c9:4b:03:c1:ec:3e:42:67:b8:9e:6f:09:74: 63:98:d7:96:b2:8b:82:26:48:fd:b4:95:ed:3a:52: 46:46:57:c9:12:9a:02:4e:6c:9c:ac:3d:4d:56:66: 70:9b:22:b3:05:8b:85:87:50:60:f0:2a:d5:4f:57: d2:47:ee:c9:0a:ff:ae:f2:71:82:4b:e8:ed:35:f7: 6a:96:de:86:3d:07:d8:05:de:5d:e6:d9:b7:50:c9: 3b:a5:33:77:ed:c8:d4:78:cf:97:76:fe:c2:93:ab: 24:12:4f:87:de:17:a8:c2:29:ab:c7:56:da:3f:a0: c7:1a:e5:6b:4f:c9:53:03:a6:32:34:48:9f:e9:d9: c8:5b:07:05:ed:0e:7e:f8:51:81:ef:5b:35:41:41: 6e:e7:93:46:75:78:99:57:c1:53:47:d4:bc:67:77: 15:ab:56:5f:70:e7:3b:8c:18:0b:6a:01:ff:96:21: 9d:3d:20:40:e4:bb:f3:25:de:c4:f7:bc:b8:43:4c: b0:b5:71:6d:cf:ff:e1:7c:0a:59:ba:33:b8:f8:ee: cb:1a:62:24:5f:2c:30:7d:d3:26:11:f8:08:cd:90: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:04:E1:37:DF:0E:EC:D0:1A:F9:EB:73:5E:28:8E:15:7B:A7:A2 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:14:4c:20:30:b1:aa:ff:63:66:31:69:f7:9c:43:34:d3:59: d7:70:30:63:c0:15:7f:1c:ce:b9:89:00:82:11:fc:1d:b0:55: 43:34:25:e4:2e:51:64:6a:19:c3:83:a9:6d:a2:b5:df:3c:ca: d2:89:80:65:3a:5c:18:21:16:89:a7:b2:dd:3a:47:62:a1:85: d6:b0:a3:2b:68:90:4a:3c:22:46:47:c2:32:cf:94:06:bb:7b: a1:d4:f8:7c:13:83:10:8c:e5:2a:0e:47:f7:21:ef:f4:34:45: 3d:a0:68:ad:ae:29:df:2b:1a:7a:9b:d1:ee:c7:64:7a:2f:19: 76:3c:6e:fa:33:0a:65:99:ed:fb:4f:47:26:57:0d:3f:30:0c: a6:27:d4:c5:98:4a:bc:60:09:ad:0e:e9:4a:c3:d7:a4:64:56: 4a:50:e0:ca:98:f6:66:b5:35:2b:01:57:50:76:b6:db:91:c9: df:f3:23:64:5d:37:0d:d0:67:23:29:2d:ab:52:a9:6e:35:86: 34:b3:29:f4:96:35:4d:8f:a8:14:3b:7a:97:2c:cf:d7:6e:0e: 90:d9:1a:58:71:1b:29:98:7c:4a:6c:d5:93:e8:5b:c3:e9:85: 2c:b2:4f:88:dd:5d:4c:b8:fe:25:1f:68:50:d2:b8:f8:50:d0: 6d:7a:4b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUwODIzMDQ0MTU5WhcNMjUwODMwMDQ0MTU5WjAYMRYwFAYD VQQDEw02OGE5NDY5Ny1hM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI+MLmL/q0r3QMJjMp5lXtqJD/RNxjVPkAtCKeAVRMlLA8HsPkJnuJ5vCXRj mNeWsouCJkj9tJXtOlJGRlfJEpoCTmycrD1NVmZwmyKzBYuFh1Bg8CrVT1fSR+7J Cv+u8nGCS+jtNfdqlt6GPQfYBd5d5tm3UMk7pTN37cjUeM+Xdv7Ck6skEk+H3heo wimrx1baP6DHGuVrT8lTA6YyNEif6dnIWwcF7Q5++FGB71s1QUFu55NGdXiZV8FT R9S8Z3cVq1ZfcOc7jBgLagH/liGdPSBA5LvzJd7E97y4Q0ywtXFtz//hfApZujO4 +O7LGmIkXywwfdMmEfgIzZA2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIDBOE3 3w7s0Br563NeKI4Ve6eiMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnFEwgMLGq/2NmMWn3nEM001nXcDBjwBV/HM65iQCCEfwdsFVDNCXk LlFkahnDg6ltorXfPMrSiYBlOlwYIRaJp7LdOkdioYXWsKMraJBKPCJGR8Iyz5QG u3uh1Ph8E4MQjOUqDkf3Ie/0NEU9oGitrinfKxp6m9Hux2R6Lxl2PG76Mwplme37 T0cmVw0/MAymJ9TFmEq8YAmtDulKw9ekZFZKUODKmPZmtTUrAVdQdrbbkcnf8yNk XTcN0GcjKS2rUqluNYY0syn0ljVNj6gUO3qXLM/Xbg6Q2RpYcRspmHxKbNWT6FvD 6YUssk+I3V1MuP4lH2hQ0rj4UNBtektf -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:34 2025 by rpki-client