$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: 14C/MjjjlpsVAPWFbKeW4I/oz/myvTYhYU8AYVvUnNU= Subject key identifier: 45:45:CB:18:DD:D1:35:A7:8D:14:77:6D:46:AD:E6:44:5B:79:74:F1 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 08B4 Signing time: Fri 22 Aug 2025 20:37:32 +0000 Manifest this update: Fri 22 Aug 2025 20:37:32 +0000 Manifest next update: Fri 29 Aug 2025 20:37:32 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 7XyTBAtNnc4zhh4VgCdr3uJV/ATZTI7Zz82klGK4lL8=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: Aug 22 20:37:32 2025 GMT Not After : Aug 29 20:37:32 2025 GMT Subject: CN=68a8d50c-dc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b5:7f:79:1a:53:31:1c:cc:2b:50:15:c9:ff: ca:dc:c1:37:08:e5:3f:c0:c8:50:1e:0b:92:f9:b2: 26:06:64:f2:6a:49:8f:01:80:cc:59:e6:3c:f2:04: ed:d1:f1:a9:89:5a:fa:21:27:32:15:da:19:0c:49: 48:34:65:09:65:40:60:5c:37:f9:dc:4a:6d:2f:c9: e2:31:69:66:0d:c2:95:bd:3f:2a:24:04:d9:9b:9e: 6d:0c:56:c9:55:c0:ca:37:a1:ea:77:4b:bf:d9:be: 02:f1:cd:a3:55:08:a8:0d:94:c0:0e:8f:e4:44:a2: c9:e2:cd:4e:55:5a:a9:87:d9:d9:cb:b6:ba:09:ba: 5c:a6:f0:c4:26:cd:8e:bc:1f:6c:b2:59:fe:70:d2: f7:39:cc:60:8a:38:bb:c5:50:9f:c0:f9:96:d7:ab: 35:9c:84:50:ee:6c:d4:1a:1f:b8:f8:d7:f9:30:7c: ec:f0:1d:72:6d:38:84:ed:11:39:1d:49:5e:f3:e6: 5d:90:c1:51:29:59:ec:ea:b1:83:70:01:6c:bc:b1: 9d:f8:c2:bb:9f:c9:67:68:9c:4f:73:8b:ca:e9:9a: bc:5a:ea:82:6f:03:c2:99:52:a6:8e:5c:d3:4f:99: 96:8b:e8:3f:9a:09:b7:46:ba:77:7d:f9:a3:ad:ea: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:45:CB:18:DD:D1:35:A7:8D:14:77:6D:46:AD:E6:44:5B:79:74:F1 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:22:00:9d:fc:80:70:47:55:49:e6:4d:e6:92:68:9f:24:42: 3a:40:95:4a:cf:1f:f5:ca:1d:0e:b8:3d:f5:0c:81:19:64:d2: b6:aa:aa:d8:66:1e:82:56:dc:af:e8:bd:8e:68:c9:ad:af:4b: 5a:3a:20:af:c2:7f:df:2f:17:83:01:d4:32:a5:05:8e:91:a7: 73:33:79:b6:52:82:16:95:df:4a:1b:25:b3:bd:9b:36:a9:d2: 7f:86:f2:99:91:6a:d8:91:e0:8e:46:9d:bd:2c:6a:68:a6:6c: b6:db:29:02:dc:f2:9d:39:a2:8e:6e:18:bc:ce:1a:73:0c:f6: 16:ef:ca:d0:07:44:fb:e3:2b:27:0b:61:9a:50:7f:75:96:23: f2:4d:91:d1:0e:5f:be:ee:7f:3b:30:13:5a:ec:b6:08:0f:5d: 60:05:29:93:5e:6d:6f:f8:d1:f0:18:d3:9c:13:67:b4:d3:e9: 5f:3c:68:08:03:c9:98:f5:2c:6e:79:a2:6b:bd:af:a3:11:49: 32:f8:3a:fe:45:27:cb:77:43:ba:52:59:17:de:84:7a:3a:92: 46:f6:58:bf:c7:74:25:d3:61:64:59:f7:a2:4b:c6:b5:45:ac: 1b:44:1b:7e:b7:0d:58:3c:46:00:bc:ea:24:18:61:24:a0:ba: c8:f6:7b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjUwODIyMjAzNzMyWhcNMjUwODI5MjAzNzMyWjAYMRYwFAYD VQQDEw02OGE4ZDUwYy1kYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LV/eRpTMRzMK1AVyf/K3ME3COU/wMhQHguS+bImBmTyakmPAYDMWeY88gTt 0fGpiVr6IScyFdoZDElINGUJZUBgXDf53EptL8niMWlmDcKVvT8qJATZm55tDFbJ VcDKN6Hqd0u/2b4C8c2jVQioDZTADo/kRKLJ4s1OVVqph9nZy7a6CbpcpvDEJs2O vB9ssln+cNL3Ocxgiji7xVCfwPmW16s1nIRQ7mzUGh+4+Nf5MHzs8B1ybTiE7RE5 HUle8+ZdkMFRKVns6rGDcAFsvLGd+MK7n8lnaJxPc4vK6Zq8WuqCbwPCmVKmjlzT T5mWi+g/mgm3Rrp3ffmjrerHUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVFyxjd 0TWnjRR3bUat5kRbeXTxMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8IgCd/IBwR1VJ5k3mkmifJEI6QJVKzx/1yh0OuD31DIEZZNK2qqrY Zh6CVtyv6L2OaMmtr0taOiCvwn/fLxeDAdQypQWOkadzM3m2UoIWld9KGyWzvZs2 qdJ/hvKZkWrYkeCORp29LGpopmy22ykC3PKdOaKObhi8zhpzDPYW78rQB0T74ysn C2GaUH91liPyTZHRDl++7n87MBNa7LYID11gBSmTXm1v+NHwGNOcE2e00+lfPGgI A8mY9SxueaJrva+jEUky+Dr+RSfLd0O6UlkX3oR6OpJG9li/x3Ql02FkWfeiS8a1 RawbRBt+tw1YPEYAvOokGGEkoLrI9nte -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:06 2025 by rpki-client