$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: RFLKrQp83lYMa846Aj/AremkfvLGz+xVfj9YLGz4ZYY= Subject key identifier: BD:E4:E3:DF:6A:2D:2E:5D:24:3B:5F:48:1B:62:FB:F4:90:9E:2F:6D Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0EAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0EA0 Signing time: Fri 22 Aug 2025 17:47:52 +0000 Manifest this update: Fri 22 Aug 2025 17:47:51 +0000 Manifest next update: Fri 29 Aug 2025 17:47:51 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: EAe8SJ7glQYN5RMycSzcIQZmFqTLPRZ4UuOYl/7IaRI=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: vN4eTkgE+NqzrGCF55MmLQiQ1U4uCoJcvi6VZO9X/KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Aug 22 17:47:51 2025 GMT Not After : Aug 29 17:47:51 2025 GMT Subject: CN=68a8ad47-b65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:8e:23:81:37:be:b3:69:83:d6:b0:46:f3: 0f:11:df:44:f0:ee:43:8d:55:18:f7:d0:28:15:20: 27:98:0c:f2:3c:40:95:64:70:18:6b:b2:43:ae:12: 34:df:46:63:7c:7b:13:c4:93:d6:8b:3e:ba:71:aa: cf:8a:ae:65:5c:22:6e:82:f5:74:4d:e4:01:9a:d0: 51:d1:8b:59:96:5c:04:e5:0f:4c:fa:41:8f:f2:69: 45:f4:1a:01:92:bf:fc:36:c7:a9:09:e4:2d:83:99: 67:ca:db:a9:02:db:63:c4:f8:04:8c:ad:6a:93:bc: e1:f6:ac:20:a0:ca:24:ba:67:81:f4:90:fb:84:bc: ae:dd:0a:45:4d:e4:95:20:e0:46:8d:e4:af:2b:3c: 6b:fb:4a:a4:12:f5:11:ef:fb:75:bd:8e:82:76:e4: d0:07:f6:3e:81:5d:ee:58:ea:6d:05:5d:22:08:b3: 68:8b:0a:2b:2e:42:10:62:76:2e:4b:6b:7b:98:cc: 67:31:36:42:5f:9e:7e:5d:26:30:80:7b:21:16:a1: d3:89:a0:9e:8f:7b:cd:a5:97:b7:f0:f0:0b:5e:e1: 68:af:2c:f4:b3:d4:24:d7:ce:04:ad:22:df:9b:e6: 88:96:2a:c5:48:a5:74:5c:96:7c:c6:ae:a9:42:fa: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E4:E3:DF:6A:2D:2E:5D:24:3B:5F:48:1B:62:FB:F4:90:9E:2F:6D X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:64:28:f2:dd:10:ea:13:b1:7d:33:21:be:b6:56:c5:47:e5: ca:88:8f:3c:f7:ff:71:e0:06:f2:f1:ab:58:5b:ab:d7:8b:5c: 4b:a1:aa:e3:66:16:0e:1e:78:07:a9:db:19:61:b4:af:0c:fd: 27:96:1c:58:e2:0c:7f:bb:1b:f0:f2:93:a7:e0:48:f7:6a:a3: 64:9b:d6:7e:f3:fc:b9:0c:4d:f1:5f:cc:b7:6b:cf:40:1e:f1: 4d:65:4f:c7:9b:81:92:0c:80:2f:ea:16:c6:cd:80:7f:d4:9e: b3:31:67:73:2f:f1:bf:c6:48:ed:f9:b3:1a:62:0e:11:3b:cc: 41:b2:b8:e9:d6:dd:30:cd:43:b7:83:d5:3a:c1:91:82:63:24: 1a:d1:d5:a6:d0:6f:c9:92:a3:c1:0b:07:86:a0:00:ed:16:49: 7e:f5:e5:7a:14:cf:96:49:db:23:7c:ab:89:43:c2:15:d9:4f: 41:0f:51:0b:0d:5f:96:97:02:35:18:e1:c6:cd:53:76:af:8e: f5:99:7d:da:2b:cf:3d:86:fc:b8:39:12:77:5b:73:30:cb:ac: 94:1d:ff:49:6f:b8:35:88:83:a8:e2:23:ae:01:69:c1:a8:e6: 59:be:2f:b2:c8:8e:13:fa:9a:c7:23:03:34:f2:52:76:e9:ac: d8:f3:dd:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjUwODIyMTc0NzUxWhcNMjUwODI5MTc0NzUxWjAYMRYwFAYD VQQDEw02OGE4YWQ0Ny1iNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy2OI4E3vrNpg9awRvMPEd9E8O5DjVUY99AoFSAnmAzyPECVZHAYa7JDrhI0 30ZjfHsTxJPWiz66carPiq5lXCJugvV0TeQBmtBR0YtZllwE5Q9M+kGP8mlF9BoB kr/8NsepCeQtg5lnytupAttjxPgEjK1qk7zh9qwgoMokumeB9JD7hLyu3QpFTeSV IOBGjeSvKzxr+0qkEvUR7/t1vY6CduTQB/Y+gV3uWOptBV0iCLNoiworLkIQYnYu S2t7mMxnMTZCX55+XSYwgHshFqHTiaCej3vNpZe38PALXuForyz0s9Qk184ErSLf m+aIlirFSKV0XJZ8xq6pQvr8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3k499q LS5dJDtfSBti+/SQni9tMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8ZCjy3RDqE7F9MyG+tlbFR+XKiI889/9x4Aby8atYW6vXi1xLoarj ZhYOHngHqdsZYbSvDP0nlhxY4gx/uxvw8pOn4Ej3aqNkm9Z+8/y5DE3xX8y3a89A HvFNZU/Hm4GSDIAv6hbGzYB/1J6zMWdzL/G/xkjt+bMaYg4RO8xBsrjp1t0wzUO3 g9U6wZGCYyQa0dWm0G/JkqPBCweGoADtFkl+9eV6FM+WSdsjfKuJQ8IV2U9BD1EL DV+WlwI1GOHGzVN2r471mX3aK889hvy4ORJ3W3Mwy6yUHf9Jb7g1iIOo4iOuAWnB qOZZvi+yyI4T+prHIwM08lJ26azY890O -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:53 2025 by rpki-client