$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json) Hash identifier: CRvbffLdrulBrChW9n3TfSTtyiNX6mni6HYCAY6cZJA= Subject key identifier: 32:FF:2C:79:E6:84:F4:10:00:27:CD:68:AE:8C:B7:E7:91:06:27:CF Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft Manifest number: 0C47 Signing time: Fri 22 Aug 2025 18:46:38 +0000 Manifest this update: Fri 22 Aug 2025 18:46:37 +0000 Manifest next update: Fri 29 Aug 2025 18:46:37 +0000 Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: /884UAj02N0S5gyErgzWNZno1e6uXsO75RAjFbwG8WQ=) 2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: 31xev4NPWwXKKZxGPGay9JA7GBIzfTlM7xCV7ZGyWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: Aug 22 18:46:37 2025 GMT Not After : Aug 29 18:46:37 2025 GMT Subject: CN=68a8bb0e-d5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:fb:ef:00:20:55:08:38:59:54:62:e0:d7: a6:7d:ae:9e:a1:79:68:b3:55:8b:ea:9c:82:d1:d0: 34:72:04:21:0f:5d:43:35:d4:45:81:9c:4a:26:f4: 10:41:ff:00:1b:c0:19:84:ae:0a:55:67:fb:2f:60: e2:45:d1:f4:22:96:96:0c:83:f5:5a:9f:d5:3d:c0: e4:74:c9:94:fa:0c:78:d9:55:62:cb:ba:16:f1:a9: de:a3:81:1b:6c:70:99:b5:62:67:f3:2b:9f:7b:a0: b9:cb:51:e9:cb:10:c4:21:37:8b:22:78:c9:f8:f8: 7e:15:bc:db:0f:cd:93:b1:68:e2:5f:d6:70:11:1d: dd:56:ca:6e:57:bb:39:d2:aa:56:cd:51:8d:ee:53: 50:c7:8b:4a:ec:65:fe:71:2a:d2:e2:84:54:ce:2a: 15:ee:af:1f:aa:a2:62:11:6e:e8:15:7f:06:fe:49: a6:74:2b:1b:7d:83:c8:31:bd:83:d7:1c:41:e5:80: b6:0d:4d:9c:20:e2:79:dc:22:c0:03:da:4a:38:2e: 35:e4:b7:cd:bc:4d:3d:47:a7:c8:66:04:f0:c9:25: 0e:8f:d1:a4:ab:65:1f:51:c4:22:20:53:51:50:db: 02:44:de:fe:c9:18:64:da:49:55:fd:c4:4b:58:a4: 66:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:2C:79:E6:84:F4:10:00:27:CD:68:AE:8C:B7:E7:91:06:27:CF X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8c:ba:01:a3:c1:9a:5c:9d:5b:da:69:6d:2c:6c:35:b3:76: 68:d0:37:a7:1e:c3:3d:48:58:8e:63:cb:b2:54:5a:ac:97:b0: 11:c8:a8:2c:7c:d4:df:c4:a3:be:18:e6:90:7a:f6:48:92:b2: 5e:5d:98:d6:d0:39:88:b0:71:1d:65:97:ba:6f:d6:ed:f9:6d: 9e:a8:fe:f0:aa:19:d0:23:39:22:2a:df:00:0a:9f:45:13:31: c1:8c:07:ac:74:90:8e:83:2a:14:f1:60:be:2a:70:d3:60:ab: 8e:80:a1:e5:56:03:60:25:55:88:d1:7b:ed:83:76:b1:9a:62: 9f:41:6a:a8:a9:12:f0:d1:00:e2:19:db:70:7a:2b:46:db:04: c4:ed:b1:c4:a4:96:21:b0:26:4c:fd:70:1e:c9:f0:a6:41:cb: 39:c5:cf:53:a4:62:08:cd:52:dd:30:e1:89:36:a7:32:4c:04: 5b:1d:6e:36:0c:98:50:7d:3b:07:87:10:b0:68:70:a0:4f:6a: 35:b1:cd:9e:0f:45:c1:fb:41:50:d8:8b:d1:42:02:0c:92:e3: 67:cf:42:4c:c0:60:7f:c7:60:c7:af:3f:b8:ae:26:2a:c2:e9: ba:db:2c:f0:0a:d0:1e:60:35:d0:d1:5d:8f:1e:81:6f:07:aa: 3c:e7:7b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjUwODIyMTg0NjM3WhcNMjUwODI5MTg0NjM3WjAYMRYwFAYD VQQDEw02OGE4YmIwZS1kNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5/77wAgVQg4WVRi4Nemfa6eoXlos1WL6pyC0dA0cgQhD11DNdRFgZxKJvQQ Qf8AG8AZhK4KVWf7L2DiRdH0IpaWDIP1Wp/VPcDkdMmU+gx42VViy7oW8aneo4Eb bHCZtWJn8yufe6C5y1HpyxDEITeLInjJ+Ph+FbzbD82TsWjiX9ZwER3dVspuV7s5 0qpWzVGN7lNQx4tK7GX+cSrS4oRUzioV7q8fqqJiEW7oFX8G/kmmdCsbfYPIMb2D 1xxB5YC2DU2cIOJ53CLAA9pKOC415LfNvE09R6fIZgTwySUOj9Gkq2UfUcQiIFNR UNsCRN7+yRhk2klV/cRLWKRmAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL/LHnm hPQQACfNaK6Mt+eRBifPMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0RDOC9FNUNBRjkzRTExRDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZu UlZFMjZGcV9JMnFxcVRlNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfjLoBo8GaXJ1b2mltLGw1s3Zo0DenHsM9SFiOY8uyVFqsl7ARyKgs fNTfxKO+GOaQevZIkrJeXZjW0DmIsHEdZZe6b9bt+W2eqP7wqhnQIzkiKt8ACp9F EzHBjAesdJCOgyoU8WC+KnDTYKuOgKHlVgNgJVWI0Xvtg3axmmKfQWqoqRLw0QDi GdtweitG2wTE7bHEpJYhsCZM/XAeyfCmQcs5xc9TpGIIzVLdMOGJNqcyTARbHW42 DJhQfTsHhxCwaHCgT2o1sc2eD0XB+0FQ2IvRQgIMkuNnz0JMwGB/x2DHrz+4riYq wum62yzwCtAeYDXQ0V2PHoFvB6o853uz -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:02 2025 by rpki-client