$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: xH0oMEkttorDl3Zju23yAFmoBOao6KfcQloBIuP80pQ= Subject key identifier: 4F:8F:6E:C3:58:0C:C3:B6:22:0E:80:4F:97:E5:80:DB:6B:A5:50:5D Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 0442 Signing time: Sat 23 Aug 2025 00:30:37 +0000 Manifest this update: Sat 23 Aug 2025 00:30:37 +0000 Manifest next update: Sat 30 Aug 2025 00:30:37 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: IrXkiDe5+rqAcTw4+SfJATfZ1nqG/WOYnJ4z34/XQfg=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Aug 23 00:30:37 2025 GMT Not After : Aug 30 00:30:37 2025 GMT Subject: CN=68a90bad-c505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:64:bb:80:d3:da:56:79:79:d9:9e:e3:0e: 0a:a7:50:f5:c9:8b:7b:b1:f3:52:44:46:5b:88:ac: ce:e4:e3:2d:ee:24:15:76:fb:b7:65:0d:b2:69:b6: 28:b8:a1:22:87:54:9d:f0:b1:ff:38:34:75:96:52: 96:fa:8b:c6:aa:08:22:64:46:75:b1:45:ed:31:7e: b1:ac:b7:be:9f:0f:13:f2:fd:cb:ef:c2:e1:d0:09: dc:9c:c4:b9:7f:08:ed:93:ed:f6:61:61:1a:c1:f7: 16:8f:ae:f2:63:35:09:01:2a:21:c3:39:05:27:8b: ff:e0:bd:0b:de:ad:73:aa:b5:a3:c8:d0:c4:30:5c: de:9d:3f:2d:a7:6f:aa:5f:f5:3c:74:70:bc:b7:e5: 9c:69:ae:e7:a4:13:8d:da:2b:96:c4:d0:11:9f:21: fc:15:51:08:fa:73:aa:d6:c7:17:40:55:a5:bb:8f: 1c:f5:bc:b4:e4:58:76:b7:45:e9:2f:4d:f8:6a:eb: 35:10:a7:ac:8b:56:7f:7d:1a:c3:fb:48:b7:33:c3: c7:16:9e:92:b8:2b:3c:b2:97:36:13:50:ff:f0:05: 62:0e:0b:c1:61:ed:31:c1:f6:e3:25:8d:38:cc:c3: 4b:99:ab:44:07:35:6f:fd:8c:13:1d:87:c8:4c:54: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8F:6E:C3:58:0C:C3:B6:22:0E:80:4F:97:E5:80:DB:6B:A5:50:5D X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:85:75:02:85:23:b6:7a:27:90:85:06:19:b0:6f:6e:83:40: 6c:17:e9:f8:a3:d6:2f:ba:0a:1b:1a:4b:2e:41:15:ef:87:10: c3:07:a1:a4:54:a3:34:80:40:3c:97:6c:dc:37:1d:b8:b1:64: 0f:ef:b0:8b:4e:ab:dd:a1:39:b2:a3:f7:84:58:7c:72:ac:42: 09:a2:42:d4:b7:5f:ea:87:98:76:87:94:d8:49:f6:e4:93:d6: b6:f5:79:6b:c9:cc:da:cf:d7:16:53:cc:42:d4:ab:a8:8b:f6: 4a:6e:ad:9c:dc:ca:b5:0b:92:a5:55:b8:85:0e:cd:ce:0a:c1: b4:71:a8:f5:42:c7:42:c7:45:e4:99:1c:3d:7a:9d:01:f5:83: b6:cc:cc:3b:75:fc:55:42:f8:48:97:4f:68:8f:eb:34:f5:9f: 27:d7:39:d7:bc:02:16:50:96:21:ee:0a:7b:b0:70:c3:73:b6: e1:17:98:f9:b7:43:a9:a4:db:d7:22:38:c1:0f:5d:05:66:f7: fb:e3:4c:6d:3d:76:ac:97:2d:58:8a:fd:4b:d2:e9:37:38:1b: 9f:37:be:52:13:4f:f2:62:c4:df:07:1b:ba:46:ff:fe:73:84: 12:14:43:bc:ba:98:f9:20:8a:16:ee:87:85:1b:90:35:02:ad: 40:a6:72:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUwODIzMDAzMDM3WhcNMjUwODMwMDAzMDM3WjAYMRYwFAYD VQQDEw02OGE5MGJhZC1jNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUFku4DT2lZ5edme4w4Kp1D1yYt7sfNSREZbiKzO5OMt7iQVdvu3ZQ2yabYo uKEih1Sd8LH/ODR1llKW+ovGqggiZEZ1sUXtMX6xrLe+nw8T8v3L78Lh0AncnMS5 fwjtk+32YWEawfcWj67yYzUJASohwzkFJ4v/4L0L3q1zqrWjyNDEMFzenT8tp2+q X/U8dHC8t+Wcaa7npBON2iuWxNARnyH8FVEI+nOq1scXQFWlu48c9by05Fh2t0Xp L034aus1EKesi1Z/fRrD+0i3M8PHFp6SuCs8spc2E1D/8AViDgvBYe0xwfbjJY04 zMNLmatEBzVv/YwTHYfITFQimQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+PbsNY DMO2Ig6AT5flgNtrpVBdMB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByhXUChSO2eieQhQYZsG9ug0BsF+n4o9YvugobGksuQRXvhxDDB6Gk VKM0gEA8l2zcNx24sWQP77CLTqvdoTmyo/eEWHxyrEIJokLUt1/qh5h2h5TYSfbk k9a29Xlryczaz9cWU8xC1Kuoi/ZKbq2c3Mq1C5KlVbiFDs3OCsG0caj1QsdCx0Xk mRw9ep0B9YO2zMw7dfxVQvhIl09oj+s09Z8n1znXvAIWUJYh7gp7sHDDc7bhF5j5 t0OppNvXIjjBD10FZvf740xtPXasly1Yiv1L0uk3OBufN75SE0/yYsTfBxu6Rv/+ c4QSFEO8upj5IIoW7oeFG5A1Aq1ApnJY -----END CERTIFICATE-----Generated at Sun Aug 24 11:14:27 2025 by rpki-client