$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json) Hash identifier: oc+ok19w+3sIu8DwRw/NJpVqlf1oBXiVj/MaB2r2hA0= Subject key identifier: 37:90:6F:EE:96:A1:6E:96:28:4B:93:F7:88:A0:74:B4:BF:BE:0F:68 Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft Manifest number: 012A Signing time: Sat 23 Aug 2025 04:52:31 +0000 Manifest this update: Sat 23 Aug 2025 04:52:31 +0000 Manifest next update: Sat 30 Aug 2025 04:52:31 +0000 Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: NJHOQH/hTPDKbSNu3E2fUbBz5DaH/18BRh3mCZPgjII=) 2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: idAFhUmAkJaKGqP8j1ITDESnMkqFyJap6af21HGHAgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Validity Not Before: Aug 23 04:52:31 2025 GMT Not After : Aug 30 04:52:31 2025 GMT Subject: CN=68a9490f-e69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:de:6a:e1:80:89:15:60:1e:3e:bf:0d:a3: f6:92:1f:39:e2:8e:61:40:df:c5:dd:a1:49:ac:b8: 14:8f:95:cd:cc:f0:64:59:1a:7d:03:3d:7b:4f:a8: 0b:b1:bf:46:45:8b:12:68:5e:4d:a4:00:bc:a0:25: b6:c5:27:e0:e7:70:e5:f0:0c:59:42:c6:d5:14:f5: 2f:d2:eb:5c:d4:ef:ef:c8:14:22:59:72:86:9d:1d: c1:2d:4e:3b:51:35:7c:0a:5a:d2:29:d0:45:06:d0: 8e:8b:67:34:ca:cf:cd:c1:9e:58:07:9f:8e:0f:84: d6:b0:3e:1e:89:d9:78:7b:26:3d:6e:9f:c6:d2:45: 22:eb:b6:54:f4:49:56:86:2d:ea:fa:28:3c:4d:40: 5b:78:c9:42:e0:8e:ae:b4:2a:fd:7b:d9:e7:dd:7a: 54:54:64:87:b8:f0:1b:de:e5:b5:9b:84:74:8d:fe: 1b:d7:42:be:ff:a8:0e:a8:6a:ea:30:ba:2f:2f:ab: 37:2d:cd:25:32:1b:ad:a7:46:35:34:95:f8:69:71: 35:64:be:ce:1e:89:56:f0:a4:da:dc:66:df:1e:2c: 94:e8:4f:b1:af:ce:54:95:5a:ad:b9:53:9e:36:d1: 9b:cc:32:fe:3c:9c:fb:ee:68:55:02:f7:b7:50:bc: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:6F:EE:96:A1:6E:96:28:4B:93:F7:88:A0:74:B4:BF:BE:0F:68 X509v3 Authority Key Identifier: keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ea:ec:d2:72:f0:21:78:25:8f:7f:9b:bc:92:78:4f:57:1d: fb:b1:fe:71:a0:74:30:3e:f7:55:1e:80:0b:c4:0b:6d:fe:18: 29:a7:bd:46:74:d9:03:3a:3c:aa:f8:bd:c0:1f:b2:f4:55:0c: 84:c0:ae:b8:c1:3a:a8:71:dc:25:1f:ee:ae:2d:a2:6e:09:7a: 1c:43:2e:89:51:37:fd:e6:60:bc:e1:65:a5:dd:27:bd:27:9b: e8:c8:80:c2:52:a8:34:7d:bb:98:20:df:20:82:86:67:fc:58: d8:77:92:47:8b:5d:b0:5f:e9:89:05:90:64:84:91:01:53:5b: ab:f2:01:0c:ef:15:06:7d:b2:f5:a5:15:7c:46:c3:76:5a:6e: b3:ce:9c:f5:cc:81:b8:54:83:83:04:6a:81:d4:c4:cd:3e:29: 03:8a:e5:a6:d9:63:db:f7:ba:e0:57:4f:b6:bb:65:15:80:aa: ba:16:9a:59:e1:b9:6e:dc:a3:40:8b:dc:08:ef:43:4d:20:2a: 62:8d:cb:80:66:f1:42:a9:83:3b:e3:f0:a7:79:2f:2c:2b:2f: dc:97:64:0d:e8:1a:11:5f:20:c6:fc:f3:17:36:71:53:41:c0: df:53:cc:64:a9:51:00:9c:2c:38:4b:b1:a6:f1:a5:22:fa:41: 84:84:12:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTExMTAvBgNVBAUTKDNFQTQzNDdEMkQ5RkQ2RUI2QTAxQjQ0RTU1NzFGODhC MDhBQ0MyNUIwHhcNMjUwODIzMDQ1MjMxWhcNMjUwODMwMDQ1MjMxWjAYMRYwFAYD VQQDEw02OGE5NDkwZi1lNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0XeauGAiRVgHj6/DaP2kh854o5hQN/F3aFJrLgUj5XNzPBkWRp9Az17T6gL sb9GRYsSaF5NpAC8oCW2xSfg53Dl8AxZQsbVFPUv0utc1O/vyBQiWXKGnR3BLU47 UTV8ClrSKdBFBtCOi2c0ys/NwZ5YB5+OD4TWsD4eidl4eyY9bp/G0kUi67ZU9ElW hi3q+ig8TUBbeMlC4I6utCr9e9nn3XpUVGSHuPAb3uW1m4R0jf4b10K+/6gOqGrq MLovL6s3Lc0lMhutp0Y1NJX4aXE1ZL7OHolW8KTa3GbfHiyU6E+xr85UlVqtuVOe NtGbzDL+PJz77mhVAve3ULyUAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeQb+6W oW6WKEuT94igdLS/vg9oMB8GA1UdIwQYMBaAFD6kNH0tn9bragG0TlVx+IsIrMJb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1MS8yNUFDRjVDMEM0 QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1dHFBYlJPVlhINGl3aXN3 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxUTBmUzJmMXV0cUFiUk9WWEg0aXdpc3dscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1MS8yNUFDRjVDMEM0QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1 dHFBYlJPVlhINGl3aXN3bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp6uzScvAheCWPf5u8knhPVx37sf5xoHQwPvdVHoALxAtt/hgpp71G dNkDOjyq+L3AH7L0VQyEwK64wTqocdwlH+6uLaJuCXocQy6JUTf95mC84WWl3Se9 J5voyIDCUqg0fbuYIN8ggoZn/FjYd5JHi12wX+mJBZBkhJEBU1ur8gEM7xUGfbL1 pRV8RsN2Wm6zzpz1zIG4VIODBGqB1MTNPikDiuWm2WPb97rgV0+2u2UVgKq6FppZ 4blu3KNAi9wI70NNICpijcuAZvFCqYM74/CneS8sKy/cl2QN6BoRXyDG/PMXNnFT QcDfU8xkqVEAnCw4S7Gm8aUi+kGEhBIb -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:50 2025 by rpki-client