$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json) Hash identifier: i/P9zrxQ4etIL1aZYXrDaUJgl/G62vzUVpER41AvI4I= Subject key identifier: B8:CB:0C:43:49:F1:81:83:B3:86:48:38:70:C3:5F:80:A2:2F:3A:8A Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft Manifest number: 088A Signing time: Fri 04 Jul 2025 20:58:15 +0000 Manifest this update: Fri 04 Jul 2025 20:58:15 +0000 Manifest next update: Fri 11 Jul 2025 20:58:15 +0000 Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: XzvD3Vk9s/NIROhx09cUL1vUvqp6Znt33a6xVDdOJjI=) 2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: tsMkLvjKn0Jno43pXfv561BkhcMo5hMdRzf+ZccASKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Jul 4 20:58:15 2025 GMT Not After : Jul 11 20:58:15 2025 GMT Subject: CN=68684067-4c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:53:11:f1:9d:ab:ed:d3:b9:a3:93:ce:69: c7:68:1c:47:7a:93:1b:84:5f:d3:bc:55:55:82:7a: eb:9f:fe:9b:76:f4:f8:28:55:13:bb:ee:99:4b:6f: 31:64:32:66:3e:df:b6:50:30:b2:17:5a:42:76:0b: 73:90:e6:d2:8c:6b:67:e3:97:92:a8:c7:bd:06:40: 23:ee:29:3f:de:b4:e2:74:a9:14:89:4b:7b:8f:9a: d1:f2:ce:a8:2e:91:71:ec:fe:15:20:06:2f:ab:e0: 39:d4:bd:34:df:9a:9c:4d:9e:98:46:0f:28:b6:97: f8:0d:4f:02:bb:04:72:db:74:d5:95:6a:ef:40:ec: 56:7f:7e:f0:42:b0:9b:8c:0c:75:de:b6:57:4a:15: b1:20:1d:48:b3:ce:5c:13:a6:96:6b:fe:c6:d4:d7: 9d:a0:1f:70:61:ea:f1:a4:4a:9f:cd:fc:a6:91:ca: bc:be:b5:53:02:e7:a0:d4:e1:fe:6e:47:1e:32:e3: c9:8b:44:cb:24:f8:bd:e2:7e:27:e7:30:af:61:4f: 6d:23:e7:53:ba:88:18:9a:fe:9b:41:12:30:b1:10: 62:bb:a4:b6:c7:97:8d:4d:c5:18:3e:42:ae:42:51: 21:1e:01:0e:00:64:ca:98:04:39:c4:37:fc:39:e6: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CB:0C:43:49:F1:81:83:B3:86:48:38:70:C3:5F:80:A2:2F:3A:8A X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:78:2c:73:a5:55:be:9c:21:ae:ef:b4:c2:89:65:ab:c1:1c: f4:18:cd:ae:09:18:bb:d8:0c:41:5d:44:e1:d3:29:a4:06:5c: cd:30:2b:cb:e8:87:96:7d:e1:b1:8a:dc:dc:32:d8:d9:ab:f8: fb:a7:5c:b6:4d:a1:a5:e2:98:d1:69:46:57:85:ba:0b:7d:f8: 96:07:f5:36:ed:a9:85:18:51:e1:d1:5b:eb:a3:2c:2b:77:bb: e6:d3:77:47:bf:38:7f:30:6d:6d:fe:10:57:f9:9c:01:39:3a: 5c:e8:58:60:6c:18:d1:e6:81:0c:1f:1b:da:63:52:ac:09:6f: 23:88:16:f9:26:1e:5a:69:be:e8:f5:52:a0:e4:96:89:40:93: bd:95:d3:7a:60:e4:db:97:e0:bf:8e:01:77:0f:19:85:4b:d3: 4e:79:4a:b8:90:21:74:e8:5d:13:2c:89:0a:42:ea:cc:4f:40: bc:7e:81:7d:61:bf:23:f9:7c:32:86:26:ac:7d:c3:e8:21:4b: 5d:dc:d2:9d:ea:db:6e:fd:b0:b9:d1:b1:a7:de:bf:c0:e0:5f: 37:29:11:50:de:e3:d6:c4:9e:d1:6b:4a:63:ff:3c:d7:83:33: 32:2f:1a:1d:ba:bb:e8:e8:37:df:f1:21:d1:92:bd:b8:da:3c: 6f:ff:9b:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjUwNzA0MjA1ODE1WhcNMjUwNzExMjA1ODE1WjAYMRYwFAYD VQQDEw02ODY4NDA2Ny00YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8FTEfGdq+3TuaOTzmnHaBxHepMbhF/TvFVVgnrrn/6bdvT4KFUTu+6ZS28x ZDJmPt+2UDCyF1pCdgtzkObSjGtn45eSqMe9BkAj7ik/3rTidKkUiUt7j5rR8s6o LpFx7P4VIAYvq+A51L0035qcTZ6YRg8otpf4DU8CuwRy23TVlWrvQOxWf37wQrCb jAx13rZXShWxIB1Is85cE6aWa/7G1NedoB9wYerxpEqfzfymkcq8vrVTAueg1OH+ bkceMuPJi0TLJPi94n4n5zCvYU9tI+dTuogYmv6bQRIwsRBiu6S2x5eNTcUYPkKu QlEhHgEOAGTKmAQ5xDf8Oeb/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjLDENJ 8YGDs4ZIOHDDX4CiLzqKMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbeCxzpVW+nCGu77TCiWWrwRz0GM2uCRi72AxBXUTh0ymkBlzNMCvL 6IeWfeGxitzcMtjZq/j7p1y2TaGl4pjRaUZXhboLffiWB/U27amFGFHh0Vvroywr d7vm03dHvzh/MG1t/hBX+ZwBOTpc6FhgbBjR5oEMHxvaY1KsCW8jiBb5Jh5aab7o 9VKg5JaJQJO9ldN6YOTbl+C/jgF3DxmFS9NOeUq4kCF06F0TLIkKQurMT0C8foF9 Yb8j+XwyhiasfcPoIUtd3NKd6ttu/bC50bGn3r/A4F83KRFQ3uPWxJ7Ra0pj/zzX gzMyLxodurvo6Dff8SHRkr242jxv/5uN -----END CERTIFICATE-----Generated at Sat Jul 5 21:46:10 2025 by rpki-client