$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json) Hash identifier: 16uieCjA4QPkwnScE3DJi2Ht7bbgKVD8ycSJZbvhHrI= Subject key identifier: 60:BF:39:1D:A9:7E:9E:DC:B9:A7:6D:D6:5D:13:6B:F1:CE:97:EB:80 Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft Manifest number: 08A5 Signing time: Fri 22 Aug 2025 20:41:17 +0000 Manifest this update: Fri 22 Aug 2025 20:41:17 +0000 Manifest next update: Fri 29 Aug 2025 20:41:17 +0000 Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: iRLc0VeUOjGiRBYn1gNddab7UDwUmHQMNTQY8WghyZY=) 2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: /a+ZA2ERE3wFJg9UM9vnT7hTqkW6cEzxlPnScilW2Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Aug 22 20:41:17 2025 GMT Not After : Aug 29 20:41:17 2025 GMT Subject: CN=68a8d5ed-3c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:32:85:69:2b:6d:04:e5:a4:d2:d6:f1:46: 78:6e:4f:89:2c:a9:07:03:6c:88:7e:e8:86:18:e5: 60:ca:86:e4:1e:61:25:a5:be:8e:43:72:4f:15:fe: 5d:31:ad:62:1a:74:dc:8a:cf:19:e8:79:6a:16:69: d5:37:ce:6b:31:77:3f:68:6a:1a:eb:92:b2:9e:a2: 0a:9b:38:36:81:c7:aa:1c:26:fb:5b:3d:86:04:f2: a8:1c:59:6f:08:bd:dd:cc:2f:60:df:b1:2d:06:cc: d0:f0:a7:94:a5:d0:8e:ea:11:92:a4:09:13:76:63: 9e:8a:23:72:4a:9f:91:d1:42:40:5f:d5:bd:66:d0: 67:8d:e8:65:d2:bc:75:d0:f8:cc:0f:b2:d1:ef:0f: f0:b0:53:7d:13:09:48:42:40:7a:b2:71:b1:9c:77: 63:2f:2b:07:98:28:b0:84:14:94:a8:7a:81:e4:2e: 0e:33:3a:52:ac:e4:de:e7:e1:1a:81:86:64:d2:0f: 41:da:75:39:4f:a0:53:f2:60:00:01:8f:42:d1:a4: 71:95:52:08:40:13:85:85:c9:07:30:02:1c:f0:c2: 13:b5:c7:6a:f9:d3:e1:1b:9f:9e:e4:0d:a4:2d:70: e6:66:a7:67:53:47:73:26:7f:5a:5c:89:25:44:64: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BF:39:1D:A9:7E:9E:DC:B9:A7:6D:D6:5D:13:6B:F1:CE:97:EB:80 X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:81:e5:06:b1:12:99:2a:15:32:48:8b:08:04:7b:4c:b6:f3: 97:88:91:71:4e:5c:55:4b:f4:1b:c8:1c:2e:d7:c4:04:45:2a: cc:e9:30:dd:80:ac:59:c5:20:e6:e8:a4:43:ed:90:3c:67:ac: 1f:a8:6b:8e:2c:31:0b:07:b8:70:52:f8:c3:a2:4b:74:90:78: 71:e7:2b:33:42:f5:e0:46:93:67:68:33:3e:c2:64:65:0a:8e: 5e:1d:d5:08:c6:68:7e:42:f6:f5:3b:10:51:d5:3d:a5:97:97: 32:e8:b3:1a:76:7d:4b:91:3c:95:fe:dd:4b:77:50:d0:87:34: 86:d7:e1:10:aa:9b:7b:e6:d4:7e:cb:57:6e:26:79:e4:ec:5f: ba:47:b0:87:bc:9a:cf:51:31:5c:63:ed:01:f1:28:05:66:cd: 8f:b5:04:23:bd:e3:38:42:24:61:b3:7d:fc:ee:81:5a:41:80: 1b:10:a5:1a:e4:2a:e4:b5:4f:e8:7d:b0:8f:46:01:0e:53:35: 33:f2:f8:ac:4f:50:1c:b2:47:d1:67:9a:9b:6a:c5:db:e7:f3: 72:f6:7d:8f:99:45:0a:db:53:72:95:0a:9c:7d:d3:2c:4b:ff: 8d:d7:d9:1a:19:c4:a7:b7:71:ad:23:e7:d7:3c:1e:f8:ba:7e: c4:8a:e7:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjUwODIyMjA0MTE3WhcNMjUwODI5MjA0MTE3WjAYMRYwFAYD VQQDEw02OGE4ZDVlZC0zYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmkyhWkrbQTlpNLW8UZ4bk+JLKkHA2yIfuiGGOVgyobkHmElpb6OQ3JPFf5d Ma1iGnTcis8Z6HlqFmnVN85rMXc/aGoa65KynqIKmzg2gceqHCb7Wz2GBPKoHFlv CL3dzC9g37EtBszQ8KeUpdCO6hGSpAkTdmOeiiNySp+R0UJAX9W9ZtBnjehl0rx1 0PjMD7LR7w/wsFN9EwlIQkB6snGxnHdjLysHmCiwhBSUqHqB5C4OMzpSrOTe5+Ea gYZk0g9B2nU5T6BT8mAAAY9C0aRxlVIIQBOFhckHMAIc8MITtcdq+dPhG5+e5A2k LXDmZqdnU0dzJn9aXIklRGS06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGC/OR2p fp7cuadt1l0Ta/HOl+uAMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlgeUGsRKZKhUySIsIBHtMtvOXiJFxTlxVS/QbyBwu18QERSrM6TDd gKxZxSDm6KRD7ZA8Z6wfqGuOLDELB7hwUvjDokt0kHhx5yszQvXgRpNnaDM+wmRl Co5eHdUIxmh+Qvb1OxBR1T2ll5cy6LMadn1LkTyV/t1Ld1DQhzSG1+EQqpt75tR+ y1duJnnk7F+6R7CHvJrPUTFcY+0B8SgFZs2PtQQjveM4QiRhs3387oFaQYAbEKUa 5CrktU/ofbCPRgEOUzUz8visT1AcskfRZ5qbasXb5/Ny9n2PmUUK21NylQqcfdMs S/+N19kaGcSnt3GtI+fXPB74un7EiucG -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:04 2025 by rpki-client