$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: auHzG4SWe0xsO6d5ozVfha3ixakgf1014oIDJNzcxRg= Subject key identifier: DA:80:02:0C:BF:82:A9:56:90:B0:27:84:8F:0E:1F:99:51:49:D5:40 Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 0A Signing time: Sat 23 Aug 2025 08:21:33 +0000 Manifest this update: Sat 23 Aug 2025 08:21:33 +0000 Manifest next update: Sat 30 Aug 2025 08:21:33 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: XeFQb1WXkcDTpfv+gkHLZlUZpt6qamZ2u/PHf4cQwBw=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Aug 23 08:21:33 2025 GMT Not After : Aug 30 08:21:33 2025 GMT Subject: CN=68a97a0d-d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:09:88:51:e0:b4:8d:cb:9b:8e:e2:86:a9:fb: aa:ff:24:66:07:58:69:c3:ab:be:6c:2d:a5:eb:74: 6b:5a:05:9c:45:3e:93:70:b3:74:43:c6:91:90:e1: 3c:60:28:ad:4e:71:18:9a:29:e0:fb:c1:2a:8c:7b: e1:d9:fe:2b:34:a0:00:26:11:28:8d:b6:71:b6:23: f2:a8:c3:e3:83:c9:32:7a:f2:5a:5c:ad:11:1f:ec: a5:2c:87:a8:07:4c:df:54:e0:89:63:5d:6a:44:3b: 2a:5e:e0:a3:68:5f:aa:8f:d7:25:b6:f9:39:6d:29: a0:df:3e:23:a9:fd:a4:38:13:59:0b:4b:34:e3:89: 8a:da:20:88:b3:2d:87:94:94:25:d2:78:90:8f:5d: 52:36:0a:f7:b4:0f:05:b1:34:bb:dc:9a:7e:c9:06: 24:70:e9:a6:c7:fd:dc:90:9f:69:4a:55:1f:07:72: 03:4b:25:c7:88:23:8b:b8:16:9f:23:85:af:b4:48: 78:2c:c0:97:70:14:6c:59:02:f8:1f:91:1f:68:48: 48:5c:29:ce:f7:3c:10:e7:98:15:09:3e:8d:9c:a9: c0:7a:99:95:55:64:73:26:1c:0a:81:7a:d1:db:d4: 3b:8f:cf:95:54:6d:f0:65:18:3d:62:89:46:5d:d7: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:02:0C:BF:82:A9:56:90:B0:27:84:8F:0E:1F:99:51:49:D5:40 X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f1:5a:9a:7b:aa:ee:8b:77:4e:09:c6:61:77:0a:8f:a6:20: 5b:6c:59:52:a0:40:1b:38:65:d8:07:1e:30:93:fc:05:c8:17: 6e:93:d6:6b:9e:ae:0b:2b:1d:7d:78:8f:d3:ca:8d:98:cd:9e: c3:a4:90:fc:42:0d:0a:79:c9:87:05:b1:09:5a:3b:04:45:86: 6a:5a:36:c3:70:96:bc:1b:dd:e2:fd:f8:ac:22:19:39:2c:99: 50:15:00:8c:56:0b:91:f6:18:f7:90:bf:8b:69:e8:0b:ec:22: 09:41:1f:37:b1:c3:1a:18:5f:cf:8b:8f:c7:3c:cc:6f:99:0e: 7b:78:38:91:78:f8:08:74:7e:a5:d5:9e:4c:c1:c2:c8:f1:fd: ef:4e:d6:97:88:e2:fb:59:5e:ce:e4:23:5c:1b:01:db:f5:5d: 95:12:b1:b6:29:f7:3f:71:ab:e2:e0:e7:4b:f6:5a:02:a6:21: 13:23:68:f7:59:fe:4d:e8:8b:9a:6f:76:c1:82:81:97:80:17: cd:aa:7b:1d:44:0a:1a:86:04:63:cc:ec:98:8b:5b:91:cd:0e: 5b:e3:47:c0:bf:5c:9c:0d:9b:cf:d2:5f:33:ec:93:79:97:04: 7e:85:ef:81:fc:eb:8e:8e:f4:75:70:8e:31:cf:94:e2:53:ad: 00:99:ad:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNTA4MjMwODIxMzNaFw0yNTA4MzAwODIxMzNaMBgxFjAUBgNV BAMTDTY4YTk3YTBkLWQ5NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtCYhR4LSNy5uO4oap+6r/JGYHWGnDq75sLaXrdGtaBZxFPpNws3RDxpGQ4Txg KK1OcRiaKeD7wSqMe+HZ/is0oAAmESiNtnG2I/Kow+ODyTJ68lpcrREf7KUsh6gH TN9U4IljXWpEOype4KNoX6qP1yW2+TltKaDfPiOp/aQ4E1kLSzTjiYraIIizLYeU lCXSeJCPXVI2Cve0DwWxNLvcmn7JBiRw6abH/dyQn2lKVR8HcgNLJceII4u4Fp8j ha+0SHgswJdwFGxZAvgfkR9oSEhcKc73PBDnmBUJPo2cqcB6mZVVZHMmHAqBetHb 1DuPz5VUbfBlGD1iiUZd1wtZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2oACDL+C qVaQsCeEjw4fmVFJ1UAwHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPxWpp7qu6Ld04JxmF3Co+mIFtsWVKgQBs4ZdgHHjCT/AXIF26T1mue rgsrHX14j9PKjZjNnsOkkPxCDQp5yYcFsQlaOwRFhmpaNsNwlrwb3eL9+KwiGTks mVAVAIxWC5H2GPeQv4tp6AvsIglBHzexwxoYX8+Lj8c8zG+ZDnt4OJF4+Ah0fqXV nkzBwsjx/e9O1peI4vtZXs7kI1wbAdv1XZUSsbYp9z9xq+Lg50v2WgKmIRMjaPdZ /k3oi5pvdsGCgZeAF82qex1EChqGBGPM7JiLW5HNDlvjR8C/XJwNm8/SXzPsk3mX BH6F74H8646O9HVwjjHPlOJTrQCZrdk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:45 2025 by rpki-client