$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json) Hash identifier: JHZ/QfYmd7kAEglbjuoG4QnXzyQnfOBAQGA6S37pPgA= Subject key identifier: D8:96:A6:70:DD:B5:0D:0C:44:4B:52:00:B1:44:3B:9A:F4:46:0C:76 Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft Manifest number: BE Signing time: Sat 23 Aug 2025 06:05:26 +0000 Manifest this update: Sat 23 Aug 2025 06:05:25 +0000 Manifest next update: Sat 30 Aug 2025 06:05:25 +0000 Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: tWNnKDiiURYXjdqhVqnCcvWKKXXo8qShbrQzgcU7/hw=) 2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: w7XAoEqzOUn2fN+Z5QNERvhpDDcLRxuYcXrspPvLSME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Validity Not Before: Aug 23 06:05:25 2025 GMT Not After : Aug 30 06:05:25 2025 GMT Subject: CN=68a95a26-23e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:01:9f:5d:93:69:6c:4d:83:e6:9c:47:4d: 65:ff:b1:83:b3:64:41:a7:f6:f6:e1:67:0b:65:1c: d7:0d:c6:3d:d5:47:d0:5f:dd:b5:41:9a:f3:65:f0: 04:36:e4:4c:27:9d:4c:87:e2:39:c8:04:2f:ca:77: eb:92:a8:10:30:1a:50:27:29:52:6e:76:d5:3c:04: 1a:58:17:a2:28:2b:a9:9b:e5:69:8d:c4:11:b9:e6: e7:53:d6:f5:d6:9f:b5:a7:15:3b:cd:7d:bf:4a:42: cb:9b:b9:c5:17:88:17:9c:a4:56:05:da:6d:93:68: 61:c4:26:3a:00:c9:b6:26:7f:cf:b2:67:5f:66:d6: 01:13:74:7e:32:51:30:60:89:52:05:2d:44:c3:76: 1b:65:b0:68:b4:97:e4:2b:a5:66:c9:09:9f:af:83: fe:94:5f:5e:48:8f:90:00:10:d4:67:91:84:1a:13: 6f:74:c9:14:6c:a1:f7:b3:9e:f2:41:7a:dc:7d:d1: 67:2d:a6:1a:9b:e9:ec:ae:db:bc:72:84:a8:5a:5b: 9e:30:1b:f7:39:c7:44:b7:97:27:15:4f:05:64:b1: bc:42:b2:20:d1:45:8f:27:3a:71:46:b9:08:ca:74: b5:f5:d4:dd:92:0a:ec:3f:8e:8a:43:f1:52:48:76: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:96:A6:70:DD:B5:0D:0C:44:4B:52:00:B1:44:3B:9A:F4:46:0C:76 X509v3 Authority Key Identifier: keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:8f:e6:bf:0d:bd:5d:63:5a:70:c0:81:41:a7:e8:ed:cf: e5:67:a3:21:3e:48:35:ac:7b:cc:3c:d8:da:48:ea:b3:5c:8b: 9b:11:f4:a2:c9:0d:75:2a:a9:3a:84:30:7e:3d:33:cc:67:ca: 9a:c8:14:08:33:6a:88:fe:be:13:66:52:34:3a:a1:20:d3:62: 02:a9:3c:bd:bc:34:be:9a:87:69:2e:b4:43:18:7d:3c:90:87: e7:c5:03:86:9a:76:0b:8d:94:14:93:73:c8:8f:e1:34:22:0a: 4e:d5:fd:38:64:fa:b9:b1:da:e1:83:3e:37:7b:80:9a:79:d2: 92:60:c2:be:cf:53:7c:4a:1b:12:fb:8c:00:4d:cb:53:6f:f6: 03:68:1d:49:05:1d:07:a5:43:70:47:4a:f2:24:6f:9c:71:84: b7:6c:eb:f9:c6:6d:6e:c3:55:98:b2:fe:48:f5:e8:9b:29:46: 42:14:48:17:28:b7:03:4b:3b:61:cb:3c:9e:f9:4d:bd:e0:34: 3a:10:e9:ae:94:d9:b1:31:9b:e4:75:1c:51:c0:05:1a:6a:b7: 4f:51:35:ce:74:c7:52:ae:dc:c7:85:7b:5b:54:fb:2e:4d:f2: ee:e3:6d:c4:1f:7a:56:52:e0:a9:44:6a:87:66:cc:f8:08:f5: 46:1c:4a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QTYxMTAvBgNVBAUTKEE0Qjg3RjlERjk2QTIwNzI2MUI5N0I0QzlFMzhDODNC NUM4MEQ2NkUwHhcNMjUwODIzMDYwNTI1WhcNMjUwODMwMDYwNTI1WjAYMRYwFAYD VQQDEw02OGE5NWEyNi0yM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZABn12TaWxNg+acR01l/7GDs2RBp/b24WcLZRzXDcY91UfQX921QZrzZfAE NuRMJ51Mh+I5yAQvynfrkqgQMBpQJylSbnbVPAQaWBeiKCupm+VpjcQRuebnU9b1 1p+1pxU7zX2/SkLLm7nFF4gXnKRWBdptk2hhxCY6AMm2Jn/PsmdfZtYBE3R+MlEw YIlSBS1Ew3YbZbBotJfkK6VmyQmfr4P+lF9eSI+QABDUZ5GEGhNvdMkUbKH3s57y QXrcfdFnLaYam+nsrtu8coSoWlueMBv3OcdEt5cnFU8FZLG8QrIg0UWPJzpxRrkI ynS19dTdkgrsP46KQ/FSSHaGlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiWpnDd tQ0MREtSALFEO5r0Rgx2MB8GA1UdIwQYMBaAFKS4f535aiByYbl7TJ44yDtcgNZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZBNi9BMkM2MjFBMDVG MzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlISmh1WHRNbmpqSU8xeUEx bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMaF9uZmxxSUhKaHVYdE1uampJTzF5QTFtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZBNi9BMkM2MjFBMDVGMzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlI Smh1WHRNbmpqSU8xeUExbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPWo/mvw29XWNacMCBQafo7c/lZ6MhPkg1rHvMPNjaSOqzXIubEfSi yQ11Kqk6hDB+PTPMZ8qayBQIM2qI/r4TZlI0OqEg02ICqTy9vDS+modpLrRDGH08 kIfnxQOGmnYLjZQUk3PIj+E0IgpO1f04ZPq5sdrhgz43e4CaedKSYMK+z1N8ShsS +4wATctTb/YDaB1JBR0HpUNwR0ryJG+ccYS3bOv5xm1uw1WYsv5I9eibKUZCFEgX KLcDSzthyzye+U294DQ6EOmulNmxMZvkdRxRwAUaardPUTXOdMdSrtzHhXtbVPsu TfLu423EH3pWUuCpRGqHZsz4CPVGHEr+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:20 2025 by rpki-client