$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: 7xvAEnHXjeNX5yQlXvWvE5xJWjpI3hBMNEN9DZNBOBI= Subject key identifier: 3F:9C:BD:9C:01:70:FB:AD:79:89:2E:B6:F4:FF:6D:62:B0:E3:55:00 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 117E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 116A Signing time: Fri 22 Aug 2025 17:22:00 +0000 Manifest this update: Fri 22 Aug 2025 17:22:00 +0000 Manifest next update: Fri 29 Aug 2025 17:22:00 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: 8Vc/4l2azNOeN5ybAfZNdf0HkcB+phQGTcrYIhHHofQ=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4478 (0x117e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Aug 22 17:22:00 2025 GMT Not After : Aug 29 17:22:00 2025 GMT Subject: CN=68a8a738-8c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:72:0a:47:cc:e4:57:e4:9c:f6:58:92:ab: 66:ce:50:10:e8:19:88:35:e4:4c:59:55:cb:26:81: b0:f5:50:bc:8c:64:9f:83:02:d9:34:f8:ed:13:2b: 66:f2:8d:c4:82:9e:e4:50:24:ac:95:c3:83:52:c0: 2d:3b:a4:39:8d:5d:51:c2:0d:b5:c0:a4:7a:54:35: 6c:85:92:a1:7e:f2:68:6a:1c:fd:ef:44:c6:5a:18: 19:c6:97:24:ee:1b:20:3e:62:56:de:5f:20:62:67: 24:61:57:3b:f3:39:40:7e:d2:f5:05:29:11:c8:f0: 51:d6:14:d8:41:96:48:bf:1b:cd:e3:64:e0:fe:ab: ad:99:92:dd:84:61:ee:86:6b:33:28:97:43:ce:78: 49:0c:da:78:ef:d8:d2:9e:14:d3:e5:3c:00:00:b1: 39:d1:56:b0:08:6a:f7:a3:8e:39:db:83:67:67:c7: 71:21:f6:2e:f8:f5:98:d9:d1:f5:7f:17:0d:72:a3: 4b:38:70:9b:a5:08:33:cb:9d:4f:f9:cd:e7:ef:7e: 17:70:2d:97:71:d8:a4:70:51:92:ef:43:b2:7f:07: d8:f2:de:2a:b8:02:03:98:be:d1:60:e0:dc:f9:04: 84:76:9c:81:b8:1b:f4:2b:cc:f1:39:02:09:2e:18: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:BD:9C:01:70:FB:AD:79:89:2E:B6:F4:FF:6D:62:B0:E3:55:00 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8f:b6:8e:6b:f4:fe:12:8e:e2:c6:57:6f:b4:5c:7b:92:91: f0:3e:40:03:0a:09:8d:ef:dc:a4:a1:c0:7d:ce:4e:73:50:82: 77:4b:6b:ec:1d:73:79:99:60:6d:2b:2a:a8:5b:5b:27:81:27: c3:cb:a4:43:ed:2c:92:27:1d:85:81:ca:ba:fb:42:16:60:1c: 9a:c1:4d:a7:2a:df:e6:1b:74:d8:37:fd:59:53:de:34:b7:e8: d0:83:f8:1d:ce:c1:f1:e6:30:72:c6:93:1c:92:28:67:11:b9: 23:52:0c:60:25:0a:40:ae:ab:45:19:40:bf:5c:ee:ab:0c:8b: d9:0e:17:bd:cb:91:4c:54:f2:5c:b6:b8:08:4f:0e:8a:b1:23: f6:2e:a2:8f:93:02:c2:48:f4:8e:5b:7b:e7:df:c5:e0:05:49: 67:80:e2:d9:8b:f1:f6:0e:0f:af:75:bc:f8:ec:fc:15:07:31: 54:cc:bf:8b:e0:bf:07:a6:ad:5c:ca:f0:e2:9d:3a:d5:90:f6: 5c:33:95:9e:71:e2:18:5c:ad:85:6f:46:fc:3a:ba:be:e9:7a: 7b:ba:23:d0:a2:c4:5f:98:bb:b2:95:34:02:d6:28:4b:5a:a2: 8a:03:55:1e:01:ce:f2:f9:e1:c7:0a:7b:9e:dd:fd:43:63:b9: 54:11:4e:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUwODIyMTcyMjAwWhcNMjUwODI5MTcyMjAwWjAYMRYwFAYD VQQDEw02OGE4YTczOC04YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GJyCkfM5FfknPZYkqtmzlAQ6BmINeRMWVXLJoGw9VC8jGSfgwLZNPjtEytm 8o3Egp7kUCSslcODUsAtO6Q5jV1Rwg21wKR6VDVshZKhfvJoahz970TGWhgZxpck 7hsgPmJW3l8gYmckYVc78zlAftL1BSkRyPBR1hTYQZZIvxvN42Tg/qutmZLdhGHu hmszKJdDznhJDNp479jSnhTT5TwAALE50VawCGr3o44524NnZ8dxIfYu+PWY2dH1 fxcNcqNLOHCbpQgzy51P+c3n734XcC2XcdikcFGS70OyfwfY8t4quAIDmL7RYODc +QSEdpyBuBv0K8zxOQIJLhh10QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+cvZwB cPuteYkutvT/bWKw41UAMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyj7aOa/T+Eo7ixldvtFx7kpHwPkADCgmN79ykocB9zk5zUIJ3S2vs HXN5mWBtKyqoW1sngSfDy6RD7SySJx2Fgcq6+0IWYByawU2nKt/mG3TYN/1ZU940 t+jQg/gdzsHx5jByxpMckihnEbkjUgxgJQpArqtFGUC/XO6rDIvZDhe9y5FMVPJc trgITw6KsSP2LqKPkwLCSPSOW3vn38XgBUlngOLZi/H2Dg+vdbz47PwVBzFUzL+L 4L8Hpq1cyvDinTrVkPZcM5WeceIYXK2Fb0b8Orq+6Xp7uiPQosRfmLuylTQC1ihL WqKKA1UeAc7y+eHHCnue3f1DY7lUEU49 -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:58 2025 by rpki-client