$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: kJfmjYLzDgtVNLDarV/8eum9eS4h/0l4U8EctmhnNL0= Subject key identifier: 98:46:2B:15:B6:B3:1D:43:ED:A6:41:EC:5B:33:B2:D1:C6:DF:F8:AE Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01FC Signing time: Sat 23 Aug 2025 02:32:15 +0000 Manifest this update: Sat 23 Aug 2025 02:32:14 +0000 Manifest next update: Sat 30 Aug 2025 02:32:14 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: HtA5n3UZnQ1+nz0FmZJLD35Ch6xe6h02Itm0KwzzFT4=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Aug 23 02:32:14 2025 GMT Not After : Aug 30 02:32:14 2025 GMT Subject: CN=68a9282e-270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:b2:dd:98:70:b2:a0:fb:95:9e:d8:b2:55: ee:d7:34:af:03:d7:9f:5a:39:0a:ce:64:fe:a0:dc: f3:af:a9:5e:19:7f:de:16:f5:e7:75:8c:10:ec:57: e8:59:70:cf:8f:ae:72:62:51:1b:15:f0:67:36:16: 36:b6:b2:18:fb:95:ca:80:e4:a7:df:78:79:de:d3: c4:10:8b:0e:9a:9c:e6:5b:c5:b8:3b:1e:6f:70:1a: 5e:3f:83:7a:5e:22:ee:29:56:9a:6c:72:70:d7:88: 79:07:f6:5a:40:06:f8:73:2c:02:b0:ba:92:d5:35: a7:16:1b:33:18:cd:96:9b:ff:d0:56:c6:41:e6:c1: 2d:70:cb:4c:b1:77:e8:ef:f8:a1:87:74:ec:73:d3: 92:ec:af:a8:c3:fa:b7:35:dc:28:24:5a:84:19:1e: 45:33:81:df:c1:0d:91:eb:35:69:cb:1b:2a:24:24: dc:40:71:38:5d:cb:ef:98:cf:de:ec:60:c3:79:f1: 5a:20:4d:64:4b:61:49:44:bb:52:78:b2:fa:9b:22: 30:8d:a8:59:41:5d:8e:37:c4:9d:75:31:ff:97:47: db:db:d7:e7:de:ce:10:e4:04:ed:08:7c:3a:1f:8c: 66:df:d1:e3:5b:48:a4:7a:cd:fa:5e:5c:2b:85:f4: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:2B:15:B6:B3:1D:43:ED:A6:41:EC:5B:33:B2:D1:C6:DF:F8:AE X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a8:aa:b6:f9:11:48:ae:90:f9:24:ad:d0:ed:2a:64:39:d2: 18:ff:14:f8:28:6b:10:b8:dd:52:5d:28:4c:6c:0c:ff:8d:02: a0:21:12:e7:2c:25:88:8d:9d:5d:8a:c1:31:00:93:bb:00:30: ef:fe:1e:58:50:53:66:a4:aa:8d:de:24:a0:bd:8c:32:7f:af: 67:24:05:2f:30:11:94:3c:7d:d8:40:94:84:ba:4e:be:57:4e: 47:02:b7:8f:e2:45:da:95:bf:c6:96:54:af:b9:73:5c:ad:f3: 9d:ff:f3:95:8e:69:74:2f:e2:4c:bd:c7:97:32:5f:6f:1c:b9: 07:21:17:63:23:07:30:ae:00:30:d6:97:1a:80:ad:ca:fd:bb: de:98:ae:2d:be:6a:5f:02:94:6c:2e:28:3b:91:a0:6d:83:67: 17:53:85:e8:8d:64:be:b7:18:f4:14:2c:67:49:42:eb:03:0e: d6:00:a1:22:8d:89:78:d1:25:a9:1e:7d:2e:6e:9b:09:a0:4d: e6:7d:73:a8:b7:9a:0e:53:11:1b:43:b2:bf:4d:e9:17:a9:21: 7c:19:84:25:ab:1c:97:d0:bc:4c:e9:e7:36:cf:18:4e:da:49: 63:7c:9d:6b:3e:58:a8:e1:f6:c6:43:ca:d9:69:06:da:ff:2f: 2d:2c:41:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwODIzMDIzMjE0WhcNMjUwODMwMDIzMjE0WjAYMRYwFAYD VQQDEw02OGE5MjgyZS0yNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu2y3ZhwsqD7lZ7YslXu1zSvA9efWjkKzmT+oNzzr6leGX/eFvXndYwQ7Ffo WXDPj65yYlEbFfBnNhY2trIY+5XKgOSn33h53tPEEIsOmpzmW8W4Ox5vcBpeP4N6 XiLuKVaabHJw14h5B/ZaQAb4cywCsLqS1TWnFhszGM2Wm//QVsZB5sEtcMtMsXfo 7/ihh3Tsc9OS7K+ow/q3NdwoJFqEGR5FM4HfwQ2R6zVpyxsqJCTcQHE4XcvvmM/e 7GDDefFaIE1kS2FJRLtSeLL6myIwjahZQV2ON8SddTH/l0fb29fn3s4Q5ATtCHw6 H4xm39HjW0ikes36XlwrhfS1qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhGKxW2 sx1D7aZB7FszstHG3/iuMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8qKq2+RFIrpD5JK3Q7SpkOdIY/xT4KGsQuN1SXShMbAz/jQKgIRLn LCWIjZ1disExAJO7ADDv/h5YUFNmpKqN3iSgvYwyf69nJAUvMBGUPH3YQJSEuk6+ V05HAreP4kXalb/GllSvuXNcrfOd//OVjml0L+JMvceXMl9vHLkHIRdjIwcwrgAw 1pcagK3K/bvemK4tvmpfApRsLig7kaBtg2cXU4XojWS+txj0FCxnSULrAw7WAKEi jYl40SWpHn0ubpsJoE3mfXOot5oOUxEbQ7K/TekXqSF8GYQlqxyX0LxM6ec2zxhO 2kljfJ1rPlio4fbGQ8rZaQba/y8tLEEi -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:24 2025 by rpki-client