$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: lkmVUNfB7vzYBVf9G9y4DSb+gm4ej5odwDD/ZPzV5kI= Subject key identifier: 8D:77:4D:4D:3A:F3:7B:2C:28:E2:3A:A6:8F:71:02:03:72:1B:14:6D Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: FC Signing time: Sat 23 Aug 2025 05:26:36 +0000 Manifest this update: Sat 23 Aug 2025 05:26:36 +0000 Manifest next update: Sat 30 Aug 2025 05:26:36 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: lWcQ1PNX8JaFQV2yUNKEysZPMA/cShW8d4RrgJgZhrY=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Aug 23 05:26:36 2025 GMT Not After : Aug 30 05:26:36 2025 GMT Subject: CN=68a9510c-1eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:65:b6:0f:ce:73:db:a0:26:84:a9:85:30: 33:af:a9:21:9a:bc:75:6b:43:61:4d:66:10:d3:aa: 75:61:cd:df:b0:2f:46:8e:f2:fe:36:b9:ea:7c:f6: ec:23:e5:c2:52:a8:ae:dc:bc:07:36:bb:6c:79:95: 4e:53:e5:bb:d4:cb:64:18:57:8f:5c:a6:3e:52:36: 81:d2:d4:f9:76:83:91:77:8c:98:27:10:0d:21:5c: 30:44:65:71:ec:5f:f9:b0:4b:60:8f:a3:42:2f:b4: 04:a2:70:27:46:94:0e:a0:80:d1:d3:4b:76:dc:34: dc:38:93:12:51:9b:9f:f5:98:26:b5:75:60:29:f0: 4f:fc:82:39:17:47:a4:09:2f:1e:41:75:d5:9a:de: 2b:bc:6b:73:45:f4:66:61:47:e3:b2:fa:1f:fa:0b: 40:4a:85:6a:d9:6f:90:62:ed:f2:bb:a1:6c:49:b3: 84:31:91:53:07:a1:eb:14:fc:27:44:bc:d6:f5:03: 22:48:72:07:4d:68:35:02:e4:75:0d:d8:fb:41:7d: 04:e0:22:75:04:4b:c8:08:48:3c:d6:91:41:b4:5f: d8:8a:d1:a5:f6:52:a4:4c:21:b4:10:52:37:12:59: cd:cc:8e:3e:a1:59:42:07:20:24:76:8f:e0:f8:61: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:77:4D:4D:3A:F3:7B:2C:28:E2:3A:A6:8F:71:02:03:72:1B:14:6D X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3b:21:04:d5:c7:5c:2d:16:a2:a4:ee:5f:75:86:96:1d:3e: ba:00:b1:23:c2:f8:a4:df:38:f8:55:66:87:58:1a:99:de:07: f2:e9:64:27:5f:de:bc:3f:86:40:9c:f7:07:d2:f5:4d:88:91: cc:e7:48:7f:6e:ce:42:c0:56:21:43:cd:ae:6d:b0:7b:71:31: 48:f9:48:8e:34:03:a8:90:22:a8:1d:5c:71:5c:9b:b4:ba:e8: f5:83:20:80:80:43:0a:e4:98:86:fb:b0:06:cb:d0:e2:d4:71: 36:67:87:8b:8e:75:eb:b5:79:d1:7f:c9:65:3f:97:54:cd:45: ed:ea:8b:f8:ab:c5:b3:61:ab:d5:65:f2:53:c4:cc:1f:e6:0b: 4d:5c:a3:6a:73:4f:1d:39:17:9a:3a:02:9d:87:94:dc:ca:bf: b0:b4:99:60:b7:dd:a5:fe:64:6d:f6:d3:a3:6b:54:28:c3:7e: 8e:9b:09:11:e5:52:6f:a3:6f:3d:92:93:02:9f:d1:ff:ef:4f: aa:3e:65:ed:7b:3b:b1:0f:55:4c:f1:d4:4c:5e:37:ff:95:6b: c4:92:ea:9d:4f:89:9a:c4:9a:9d:41:4c:99:fc:1f:b1:9d:5c: 6f:43:11:d3:28:0f:eb:dd:4c:ce:21:76:10:f7:1f:4c:9b:48: 85:29:b0:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwODIzMDUyNjM2WhcNMjUwODMwMDUyNjM2WjAYMRYwFAYD VQQDEw02OGE5NTEwYy0xZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN5ltg/Oc9ugJoSphTAzr6khmrx1a0NhTWYQ06p1Yc3fsC9GjvL+NrnqfPbs I+XCUqiu3LwHNrtseZVOU+W71MtkGFePXKY+UjaB0tT5doORd4yYJxANIVwwRGVx 7F/5sEtgj6NCL7QEonAnRpQOoIDR00t23DTcOJMSUZuf9ZgmtXVgKfBP/II5F0ek CS8eQXXVmt4rvGtzRfRmYUfjsvof+gtASoVq2W+QYu3yu6FsSbOEMZFTB6HrFPwn RLzW9QMiSHIHTWg1AuR1Ddj7QX0E4CJ1BEvICEg81pFBtF/YitGl9lKkTCG0EFI3 ElnNzI4+oVlCByAkdo/g+GEZ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI13TU06 83ssKOI6po9xAgNyGxRtMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhOyEE1cdcLRaipO5fdYaWHT66ALEjwvik3zj4VWaHWBqZ3gfy6WQn X968P4ZAnPcH0vVNiJHM50h/bs5CwFYhQ82ubbB7cTFI+UiONAOokCKoHVxxXJu0 uuj1gyCAgEMK5JiG+7AGy9Di1HE2Z4eLjnXrtXnRf8llP5dUzUXt6ov4q8WzYavV ZfJTxMwf5gtNXKNqc08dOReaOgKdh5Tcyr+wtJlgt92l/mRt9tOja1Qow36OmwkR 5VJvo289kpMCn9H/70+qPmXtezuxD1VM8dRMXjf/lWvEkuqdT4maxJqdQUyZ/B+x nVxvQxHTKA/r3UzOIXYQ9x9Mm0iFKbBy -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:47 2025 by rpki-client