$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: w+idoIuk+s1Nll25O0RURSn5knfETpVnu2tPgeu8vHs= Subject key identifier: 3E:5A:4A:02:3D:42:C7:87:00:37:BD:7D:A2:BB:93:5A:C1:1F:58:0D Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 03BC Signing time: Sat 23 Aug 2025 00:54:57 +0000 Manifest this update: Sat 23 Aug 2025 00:54:56 +0000 Manifest next update: Sat 30 Aug 2025 00:54:56 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: proHpOGbVxewdnIwtu39sLbJWaaciKdk46vn28cc2rg=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Aug 23 00:54:56 2025 GMT Not After : Aug 30 00:54:56 2025 GMT Subject: CN=68a91161-6a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:1e:31:95:33:b9:f0:ae:e3:fa:13:ea:e9: e7:21:8b:08:56:8d:ea:da:ad:f5:76:5f:b0:a9:10: 52:bc:02:27:53:0b:19:d3:d3:24:03:2a:f2:62:ff: 80:53:42:20:72:d5:fb:6a:b1:0e:b2:a6:2d:e7:25: 0a:d1:fe:0a:fb:b6:0b:53:4b:8d:9c:44:ed:b6:ec: 2c:9b:2c:28:4f:9a:95:ec:ee:71:6d:97:ed:e3:a2: 29:54:57:8a:77:f0:88:81:e1:81:43:09:cd:38:23: 4a:e0:2c:a5:a8:ee:d7:f0:00:dd:aa:f0:23:df:64: e2:28:e6:8f:38:21:81:9d:de:b8:7d:fb:fa:b0:97: 23:ec:03:0a:a8:69:23:aa:90:7f:e9:f6:c5:e1:3e: 67:1c:91:e1:0a:cb:77:3d:60:9e:4c:c3:9b:6c:97: a4:1d:b9:f3:de:7f:30:2a:15:24:0c:27:af:62:3e: 17:fa:a0:4f:fb:e3:bb:6b:90:8a:c8:3f:3b:8b:1b: 08:f0:35:86:7e:8a:8d:cb:30:95:74:dd:1e:e3:44: 00:27:00:dd:6f:01:ee:ad:84:73:4d:61:a0:a8:6f: 07:2d:c7:16:01:25:7a:bb:4f:d0:a4:e8:f1:f3:28: 8f:f2:cb:bd:d9:b9:6a:4f:53:82:87:ef:f5:dc:86: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5A:4A:02:3D:42:C7:87:00:37:BD:7D:A2:BB:93:5A:C1:1F:58:0D X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c8:6d:cb:9d:1c:31:a8:b0:0a:9f:ce:d4:04:c6:2a:39:e4: 88:31:df:5c:d1:e2:84:60:3e:52:e9:0b:2b:6e:90:9a:ab:2a: 62:16:b7:17:66:06:3a:b9:01:a9:9d:0f:6d:86:14:8c:ab:a8: 78:13:01:cf:58:6f:d0:06:42:1c:49:26:eb:9c:34:52:9c:ef: a5:ab:8d:b7:31:29:a3:6e:15:96:5c:7c:60:46:a6:0d:ba:b0: 94:5f:17:ba:97:95:3e:e0:37:85:2a:0c:2b:29:b0:83:5e:b1: fc:e3:c6:b8:9a:be:48:8a:3a:e4:b7:8f:c5:20:a9:43:f7:1b: 4d:a5:32:8e:d0:2b:b3:f0:99:b5:24:c2:33:b5:fc:43:91:65: bf:38:41:41:a5:53:e1:de:1b:4a:e1:0e:aa:25:36:18:d2:84: ee:37:55:da:ac:6d:72:19:f6:3e:44:3e:a5:df:55:48:00:bc: 5c:cd:cd:b2:f1:d9:1b:41:a0:79:ab:ec:d4:2a:45:89:43:fd: c9:49:73:b9:ea:43:cb:dd:da:14:b7:73:ec:71:8e:78:72:94: e7:14:e0:de:f4:f4:3a:2b:a9:eb:93:a9:50:0c:36:23:f1:7e: 1a:9e:92:57:d4:a7:2b:e3:81:a4:89:45:3b:3f:ab:de:89:c6: 08:8a:50:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwODIzMDA1NDU2WhcNMjUwODMwMDA1NDU2WjAYMRYwFAYD VQQDEw02OGE5MTE2MS02YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxooeMZUzufCu4/oT6unnIYsIVo3q2q31dl+wqRBSvAInUwsZ09MkAyryYv+A U0IgctX7arEOsqYt5yUK0f4K+7YLU0uNnETttuwsmywoT5qV7O5xbZft46IpVFeK d/CIgeGBQwnNOCNK4CylqO7X8ADdqvAj32TiKOaPOCGBnd64ffv6sJcj7AMKqGkj qpB/6fbF4T5nHJHhCst3PWCeTMObbJekHbnz3n8wKhUkDCevYj4X+qBP++O7a5CK yD87ixsI8DWGfoqNyzCVdN0e40QAJwDdbwHurYRzTWGgqG8HLccWASV6u0/QpOjx 8yiP8su92blqT1OCh+/13IaD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5aSgI9 QseHADe9faK7k1rBH1gNMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnyG3LnRwxqLAKn87UBMYqOeSIMd9c0eKEYD5S6QsrbpCaqypiFrcX ZgY6uQGpnQ9thhSMq6h4EwHPWG/QBkIcSSbrnDRSnO+lq423MSmjbhWWXHxgRqYN urCUXxe6l5U+4DeFKgwrKbCDXrH848a4mr5Iijrkt4/FIKlD9xtNpTKO0Cuz8Jm1 JMIztfxDkWW/OEFBpVPh3htK4Q6qJTYY0oTuN1XarG1yGfY+RD6l31VIALxczc2y 8dkbQaB5q+zUKkWJQ/3JSXO56kPL3doUt3PscY54cpTnFODe9PQ6K6nrk6lQDDYj 8X4anpJX1Kcr44GkiUU7P6veicYIilAP -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:20 2025 by rpki-client