$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: bJCPHOy5/B4eVfQGtU4NQ/jSffGixxjixrBOpjGj3vo= Subject key identifier: DA:2A:AC:98:3F:47:F9:76:F5:C3:B6:A3:F6:CD:93:F4:07:74:85:D0 Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 28 Signing time: Sat 23 Aug 2025 08:00:50 +0000 Manifest this update: Sat 23 Aug 2025 08:00:49 +0000 Manifest next update: Sat 30 Aug 2025 08:00:49 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: 9sLaKuQK/RgUV0UKOd0ukP7Hm9LPVD42ilKSNr8Waio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Aug 23 08:00:49 2025 GMT Not After : Aug 30 08:00:49 2025 GMT Subject: CN=68a97531-c0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:ef:43:85:4a:4d:6e:71:7f:84:6f:8f:f8: 3e:df:d6:7d:21:46:2d:5e:3e:3e:ce:d4:31:77:14: 6d:5a:2a:f7:79:ff:c9:52:c2:67:62:82:5a:98:2d: 1a:79:ed:59:62:b7:b8:c7:a1:06:03:80:fd:7f:eb: fd:da:13:31:ce:ca:63:db:df:24:15:6d:b4:2a:4d: e7:39:01:a0:a9:47:90:19:ea:55:ea:04:9e:24:0c: 00:a6:a4:ee:31:ed:a3:2f:71:fb:b2:88:8a:78:f0: 36:da:09:f4:a1:aa:bc:e4:07:f5:d7:b6:b3:f7:bb: ab:0e:7b:c3:9b:b5:3b:4c:9e:99:e8:72:32:5c:ea: be:6b:b1:8e:18:73:09:9f:9e:a7:f9:e6:ee:7e:fe: 97:80:ed:e3:1f:a8:b2:64:ad:b6:45:6f:b8:5a:9e: 2c:37:1b:2e:bb:c0:6b:66:7b:f5:fd:0f:9d:0c:3d: fc:76:f5:1b:35:37:53:52:33:4d:77:cc:42:0d:e7: ba:76:b6:91:f5:08:00:17:ff:1c:3c:22:c3:b3:3b: f1:5f:48:91:28:ec:95:88:17:f4:b0:de:67:31:0c: 0f:95:32:9b:5e:24:71:62:2b:6b:17:15:bd:68:7f: 2d:37:c8:1c:52:ca:66:1f:5b:9f:88:e4:50:60:20: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:AC:98:3F:47:F9:76:F5:C3:B6:A3:F6:CD:93:F4:07:74:85:D0 X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ed:fc:56:32:f8:88:94:99:75:5e:60:ee:f7:47:d6:97:1e: 6c:8e:e2:c3:ee:d7:fb:f3:5f:61:c6:a6:79:78:2e:31:fb:b0: 2a:37:92:64:ec:0e:1e:77:e2:a0:dc:59:3a:3a:6e:fa:22:5e: 49:9a:82:f6:b6:cb:f5:45:ca:66:2b:7d:8d:eb:41:f6:40:49: f9:7d:a0:be:af:87:58:cc:39:4b:a9:56:70:82:2a:a7:d1:14: 29:22:aa:4a:09:a1:7e:f0:f6:df:0a:51:5b:bf:b1:63:98:00: b8:61:bf:a0:12:31:f8:b2:4e:ee:c5:dc:ab:48:1a:70:5a:e4: 61:cb:59:5c:64:ed:e1:e1:8d:db:84:29:88:ce:a6:03:02:2b: 11:39:12:2a:d9:72:c8:9f:1f:c5:8b:dc:8d:2e:8d:5c:f4:3d: 1d:37:c3:b6:ee:51:7e:26:65:ab:c1:e6:e8:0f:83:ad:47:e8: 05:61:94:75:fd:0a:4b:f0:19:7d:8f:9c:8f:af:95:49:85:9b: db:d8:7c:f4:91:da:81:eb:cc:cc:aa:9f:b8:a3:55:d6:e7:68: 5a:f2:5b:20:04:e1:e7:f4:82:00:f1:6a:f7:6c:96:66:3f:22: 9b:14:2a:ce:81:d4:55:9c:a9:36:3e:e6:0c:4a:7f:56:94:5d: e5:7b:7a:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTMwMzExMC8GA1UEBRMoM0YxNzc5MDk4OTE3MkY0MDkyNjdFMEZGRTc0NEVFNDhC MDE3OTFFNzAeFw0yNTA4MjMwODAwNDlaFw0yNTA4MzAwODAwNDlaMBgxFjAUBgNV BAMTDTY4YTk3NTMxLWMwYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9iu9DhUpNbnF/hG+P+D7f1n0hRi1ePj7O1DF3FG1aKvd5/8lSwmdiglqYLRp5 7Vlit7jHoQYDgP1/6/3aEzHOymPb3yQVbbQqTec5AaCpR5AZ6lXqBJ4kDACmpO4x 7aMvcfuyiIp48DbaCfShqrzkB/XXtrP3u6sOe8ObtTtMnpnocjJc6r5rsY4Ycwmf nqf55u5+/peA7eMfqLJkrbZFb7haniw3Gy67wGtme/X9D50MPfx29Rs1N1NSM013 zEIN57p2tpH1CAAX/xw8IsOzO/FfSJEo7JWIF/Sw3mcxDA+VMpteJHFiK2sXFb1o fy03yBxSymYfW5+I5FBgIOSnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2iqsmD9H +Xb1w7aj9s2T9Ad0hdAwHwYDVR0jBBgwFoAUPxd5CYkXL0CSZ+D/50TuSLAXkecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMzAzLzlCNDI0RDMwNDY4 NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhkNUNZa1hMMENTWi1EXzUwVHVTTEFYa2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx MzAzLzlCNDI0RDMwNDY4NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBD U1otRF81MFR1U0xBWGtlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACbt/FYy+IiUmXVeYO73R9aXHmyO4sPu1/vzX2HGpnl4LjH7sCo3kmTs Dh534qDcWTo6bvoiXkmagva2y/VFymYrfY3rQfZASfl9oL6vh1jMOUupVnCCKqfR FCkiqkoJoX7w9t8KUVu/sWOYALhhv6ASMfiyTu7F3KtIGnBa5GHLWVxk7eHhjduE KYjOpgMCKxE5EirZcsifH8WL3I0ujVz0PR03w7buUX4mZavB5ugPg61H6AVhlHX9 CkvwGX2PnI+vlUmFm9vYfPSR2oHrzMyqn7ijVdbnaFryWyAE4ef0ggDxavdslmY/ IpsUKs6B1FWcqTY+5gxKf1aUXeV7er8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:21 2025 by rpki-client