$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json) Hash identifier: LntFM512V2kfg2MweAIyH3RSeGK95sGEVPD22V5wCbI= Subject key identifier: 6A:FF:CB:B3:91:09:0E:FD:6E:C2:68:A7:84:97:B4:18:2B:92:2D:96 Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft Manifest number: 0209 Signing time: Sat 23 Aug 2025 02:20:00 +0000 Manifest this update: Sat 23 Aug 2025 02:19:59 +0000 Manifest next update: Sat 30 Aug 2025 02:19:59 +0000 Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: C/vfNXEzCPBLNa9K+ihXqK4davb+tLV55hTbaQI3fEA=) 2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: 1Kz/gacCnhM+fr3wXAjqYRKG+spIHUpJaLSQPwac8Js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A Validity Not Before: Aug 23 02:19:59 2025 GMT Not After : Aug 30 02:19:59 2025 GMT Subject: CN=68a92550-751b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:6b:01:6d:54:dc:91:24:09:0d:dc:c5:db: 21:d4:d4:93:d0:f8:6e:9e:06:2c:43:8a:23:a6:6d: 35:bf:6a:3c:6c:42:aa:76:b2:11:cc:b0:3d:8b:28: 16:ab:39:f6:f3:ab:57:1d:84:38:0c:49:27:f8:62: 1a:9b:1e:6d:b5:73:99:1f:db:31:8c:91:be:6e:63: a5:2a:7e:f0:8b:48:bc:d0:b9:82:1f:e9:14:7b:17: 5c:9d:f6:d6:d1:e9:14:ce:d2:46:ef:02:80:35:a4: aa:2c:2c:e5:82:89:15:c3:e7:ab:1f:ee:ca:13:b9: 96:41:b6:76:83:52:fd:93:3e:09:f5:6b:47:f5:4b: 04:96:2f:35:78:47:32:c9:4e:55:ec:f9:58:44:c9: 24:33:9b:44:cf:3e:b8:ce:32:53:63:3b:65:ad:8d: 21:07:21:b1:07:1b:1a:b6:35:52:d7:00:17:53:29: 89:b7:2e:39:14:44:3a:1d:6e:ba:f3:ec:fe:e2:cf: 1b:4d:cb:df:42:33:05:e6:3b:2d:84:5b:b0:3a:15: fd:21:91:c5:24:d9:a2:9b:49:a4:66:3e:12:c9:b7: 64:64:12:70:e1:32:4e:12:aa:f2:42:e0:d7:11:3d: 55:20:43:7b:df:0e:19:59:95:c4:30:67:62:c7:b0: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FF:CB:B3:91:09:0E:FD:6E:C2:68:A7:84:97:B4:18:2B:92:2D:96 X509v3 Authority Key Identifier: keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:eb:eb:88:9e:3c:e8:e0:92:30:8d:61:34:8d:c3:ee:d1:7b: 87:7b:be:55:ae:05:de:27:8a:00:f4:fd:27:92:cc:db:c5:f9: 02:92:d9:21:b2:57:61:78:f8:bb:1e:16:77:48:89:20:bb:fe: 14:54:48:1a:85:d4:ea:f7:9d:51:a7:73:22:44:5b:85:c7:ec: a3:1d:a7:03:d9:20:65:7b:0d:db:52:a3:b5:87:78:f6:08:2c: 45:9c:e9:ff:99:e3:8f:d2:25:8e:27:62:fe:cd:b5:89:e9:6f: 34:da:20:ad:5c:f7:f3:0d:e4:3a:96:8d:f8:a6:c6:1a:ad:4e: 53:28:a9:b6:ea:9e:3d:6d:65:b3:4b:2f:49:10:ec:f6:2e:a5: e5:d7:b3:a1:0a:c6:3c:09:b5:af:69:2e:d8:23:22:cf:3d:73: 1d:44:f2:cd:69:01:b0:ae:30:65:57:c3:c5:59:e7:bd:ae:46: d9:5b:92:da:fe:f3:ae:90:25:3d:35:11:b1:86:f5:e9:28:fc: d3:13:27:f5:4b:c4:f1:23:4c:e1:e6:7a:48:73:8a:08:93:d3: da:f0:86:b7:c4:d5:fa:95:16:13:66:41:d3:7e:eb:b4:d6:f0: 6d:aa:c2:22:4d:d7:75:45:3c:9d:5c:15:f3:4f:bc:e2:20:45: 13:09:3e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKEE1RTZGNUM3NEJCQ0VCNDAwOUM1NUVFQTY4OTcwMzQ5 OTcxRkY2M0EwHhcNMjUwODIzMDIxOTU5WhcNMjUwODMwMDIxOTU5WjAYMRYwFAYD VQQDEw02OGE5MjU1MC03NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNtrAW1U3JEkCQ3cxdsh1NST0PhungYsQ4ojpm01v2o8bEKqdrIRzLA9iygW qzn286tXHYQ4DEkn+GIamx5ttXOZH9sxjJG+bmOlKn7wi0i80LmCH+kUexdcnfbW 0ekUztJG7wKANaSqLCzlgokVw+erH+7KE7mWQbZ2g1L9kz4J9WtH9UsEli81eEcy yU5V7PlYRMkkM5tEzz64zjJTYztlrY0hByGxBxsatjVS1wAXUymJty45FEQ6HW66 8+z+4s8bTcvfQjMF5jsthFuwOhX9IZHFJNmim0mkZj4SybdkZBJw4TJOEqryQuDX ET1VIEN73w4ZWZXEMGdix7CdPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr/y7OR CQ79bsJop4SXtBgrki2WMB8GA1UdIwQYMBaAFKXm9cdLvOtACcVe6miXA0mXH/Y6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EMzE0MkRCODVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYwQUp4VjdxYUpjRFNaY2Y5 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BlYjF4MHU4NjBBSnhWN3FhSmNEU1pjZjlqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EMzE0MkRCODVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYw QUp4VjdxYUpjRFNaY2Y5am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj6+uInjzo4JIwjWE0jcPu0XuHe75VrgXeJ4oA9P0nkszbxfkCktkh sldhePi7HhZ3SIkgu/4UVEgahdTq951Rp3MiRFuFx+yjHacD2SBlew3bUqO1h3j2 CCxFnOn/meOP0iWOJ2L+zbWJ6W802iCtXPfzDeQ6lo34psYarU5TKKm26p49bWWz Sy9JEOz2LqXl17OhCsY8CbWvaS7YIyLPPXMdRPLNaQGwrjBlV8PFWee9rkbZW5La /vOukCU9NRGxhvXpKPzTEyf1S8TxI0zh5npIc4oIk9Pa8Ia3xNX6lRYTZkHTfuu0 1vBtqsIiTdd1RTydXBXzT7ziIEUTCT79 -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:57 2025 by rpki-client