$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: TPFDy5VoQAw5R/CDymqulZaMhvQmiRvV24GpARg93tA= Subject key identifier: 12:77:8B:8E:F0:95:64:B8:0E:01:41:FF:E3:25:0D:8D:E1:2F:7C:98 Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 0322 Signing time: Sat 23 Aug 2025 01:24:05 +0000 Manifest this update: Sat 23 Aug 2025 01:24:04 +0000 Manifest next update: Sat 30 Aug 2025 01:24:04 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: 5Fy/uvxA+VbU+EcbMXe01F7RAK8C/S4B36/bSvGKZ4M=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: fHu5/MPKlLCuXm6cY4db7lpTtm9fZVRYzzIdcMcSwUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: Aug 23 01:24:04 2025 GMT Not After : Aug 30 01:24:04 2025 GMT Subject: CN=68a91834-aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:0c:5c:9a:64:5b:78:a4:cb:d6:e9:0a:34: 15:34:83:3f:4a:66:69:56:45:e3:3b:64:c1:04:a1: e5:1c:e0:bb:56:17:6c:db:53:66:91:d2:d4:d7:60: 4a:39:70:a1:bd:1f:f4:0f:83:24:cd:94:eb:bb:e9: 67:e1:66:7b:f7:a2:b6:ab:5e:2b:7e:26:e2:12:34: 3d:2a:75:3a:f2:03:92:d5:c1:4b:96:21:16:d4:4d: ca:c8:8d:94:51:a5:72:3e:88:98:1f:72:d3:da:60: e4:5f:2d:28:cc:c9:2e:56:e3:a8:a0:d8:fa:0a:d9: 6d:2d:fe:bb:fa:cd:0c:e7:f9:8f:6c:d8:a4:80:a3: 4f:a5:88:5d:7d:44:c7:b9:0f:8c:17:c2:55:a5:1e: 70:f8:22:9d:a8:2e:a9:35:41:94:e8:6c:f3:21:9f: b6:ef:65:97:d5:dd:3c:ee:4b:65:74:bc:e7:32:ce: 5d:82:bb:94:db:50:72:30:c9:8c:c0:a7:2a:5c:22: 18:d2:b8:9d:12:f6:ea:6c:45:79:33:55:62:0f:7c: f2:72:42:d1:58:08:40:e7:b4:40:0f:90:94:b2:d5: 8e:b4:92:05:8d:58:ef:86:46:3c:03:91:a2:a8:d0: 10:58:f8:0c:3d:e9:6d:b1:14:e0:78:f9:70:c5:a6: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:8B:8E:F0:95:64:B8:0E:01:41:FF:E3:25:0D:8D:E1:2F:7C:98 X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:36:a8:0c:c9:32:71:80:0a:1b:2b:c7:2a:7d:79:3c:ba:9b: 20:e5:e9:3a:7b:33:f6:26:48:e2:ab:45:c9:70:48:89:b7:89: c5:a2:75:2d:25:72:eb:d3:b7:b0:e7:cc:61:b8:a3:cf:a8:cc: aa:58:5c:3a:fe:eb:10:64:ef:2a:e8:07:ed:e8:43:e7:6c:54: dc:cf:38:68:8b:fb:7e:ee:5f:6a:c0:3f:38:4a:e7:27:ef:1f: 61:a8:e7:76:04:41:e7:49:ba:26:4e:e1:26:57:2a:57:1e:89: 97:fe:02:6f:49:3d:bb:ad:cc:53:ff:95:0f:f5:32:56:6a:f9: 85:95:26:45:c3:ad:e6:67:bf:b1:33:d1:98:0c:19:c1:c4:bd: 8e:ae:43:ee:de:30:9c:b7:65:d5:3f:fe:de:42:78:d3:ff:d9: 0f:19:0d:90:2b:f5:b3:8c:ce:b8:0b:ae:91:2c:68:b3:26:38: 2b:67:c0:7f:cd:04:6e:e1:84:5e:cc:98:3a:9a:46:97:3b:13: 60:e9:ea:4b:1a:c2:c0:67:99:42:2d:00:05:63:96:2c:92:51: 1a:22:cd:52:9a:88:f6:5e:d4:30:7e:59:f6:41:07:2e:c3:4a: 4b:18:53:66:8f:67:a0:d8:80:2f:9d:23:32:d6:17:64:d0:ce: bd:e1:e4:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjUwODIzMDEyNDA0WhcNMjUwODMwMDEyNDA0WjAYMRYwFAYD VQQDEw02OGE5MTgzNC1hYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEIMXJpkW3iky9bpCjQVNIM/SmZpVkXjO2TBBKHlHOC7Vhds21NmkdLU12BK OXChvR/0D4MkzZTru+ln4WZ796K2q14rfibiEjQ9KnU68gOS1cFLliEW1E3KyI2U UaVyPoiYH3LT2mDkXy0ozMkuVuOooNj6CtltLf67+s0M5/mPbNikgKNPpYhdfUTH uQ+MF8JVpR5w+CKdqC6pNUGU6GzzIZ+272WX1d087ktldLznMs5dgruU21ByMMmM wKcqXCIY0ridEvbqbEV5M1ViD3zyckLRWAhA57RAD5CUstWOtJIFjVjvhkY8A5Gi qNAQWPgMPeltsRTgePlwxaaxHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ3i47w lWS4DgFB/+MlDY3hL3yYMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUNqgMyTJxgAobK8cqfXk8upsg5ek6ezP2Jkjiq0XJcEiJt4nFonUt JXLr07ew58xhuKPPqMyqWFw6/usQZO8q6Aft6EPnbFTczzhoi/t+7l9qwD84Sucn 7x9hqOd2BEHnSbomTuEmVypXHomX/gJvST27rcxT/5UP9TJWavmFlSZFw63mZ7+x M9GYDBnBxL2OrkPu3jCct2XVP/7eQnjT/9kPGQ2QK/WzjM64C66RLGizJjgrZ8B/ zQRu4YRezJg6mkaXOxNg6epLGsLAZ5lCLQAFY5YsklEaIs1Smoj2XtQwfln2QQcu w0pLGFNmj2eg2IAvnSMy1hdk0M694eTQ -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:41 2025 by rpki-client