$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json) Hash identifier: i4MO85YXJX7TO4wgjrtS4ztJvIsBCcYgBSbEfk7gnsU= Subject key identifier: 8A:6D:F6:84:6F:1F:00:0C:4E:FB:D9:A4:0E:ED:85:F3:2D:BC:2F:AF Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0D99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft Manifest number: 0D90 Signing time: Sun 20 Jul 2025 17:57:47 +0000 Manifest this update: Sun 20 Jul 2025 17:57:46 +0000 Manifest next update: Sun 27 Jul 2025 17:57:46 +0000 Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: w9IQGEYg1664SL5kzW8da2NnszFBSqKnFA5E46VDclo=) 2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: pTMoVBZCsEARFbs1aGExyarMu+r7tLUk6ACYjZUvCyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3481 (0xd99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: Jul 20 17:57:46 2025 GMT Not After : Jul 27 17:57:46 2025 GMT Subject: CN=687d2e1b-f3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:0f:3f:7d:f4:e3:ec:55:c6:46:cf:03:28: fd:6d:1b:c3:d6:75:67:82:e8:40:a5:00:31:2d:95: 7b:9b:6a:0d:fd:07:42:9e:18:18:2a:67:51:c7:ee: 7f:ea:6a:7a:a6:eb:50:2e:05:65:4c:75:0a:d2:64: ed:79:a3:78:b9:eb:5c:cb:2e:c9:51:79:ac:11:b2: 04:4b:53:2f:94:47:ff:40:48:77:9f:e0:6a:06:f1: 64:37:c4:8c:cb:e8:87:b7:84:4a:0c:86:7b:bc:30: 62:0c:27:5f:b0:3e:5e:5c:8e:e1:48:9f:09:29:e9: 90:13:03:a4:23:9a:1a:c9:72:5e:30:83:dd:d3:e6: 1c:a8:68:a4:eb:20:cc:d4:6d:11:9d:56:32:1b:03: 4c:eb:eb:10:e2:50:bd:83:dd:d4:dc:42:59:32:77: c8:86:c3:69:43:64:58:d2:6f:4f:97:28:73:c4:c2: af:6a:55:14:b8:76:91:a1:63:3e:ab:b7:3c:b6:d5: e0:d7:de:2d:07:26:ba:31:ce:0a:da:df:ed:b4:06: 11:31:00:0d:68:f2:a9:f9:70:02:1a:41:99:dc:f7: ed:de:01:45:a8:00:e6:2a:ad:cc:a4:6b:59:4b:4b: ff:b1:5e:f5:e7:fa:aa:49:10:f9:fb:bc:aa:83:c1: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:F6:84:6F:1F:00:0C:4E:FB:D9:A4:0E:ED:85:F3:2D:BC:2F:AF X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:40:30:a3:d7:1b:09:a6:0c:32:cb:10:d1:a9:22:f2:04:a3: 4f:b2:74:7f:97:24:e9:e8:7f:32:9b:1d:c5:9c:d8:7d:b0:de: 44:a1:8a:63:c8:68:3b:a5:ee:91:9f:e2:95:ee:16:96:63:1f: 4a:81:6e:33:d3:5e:06:b9:42:c7:ee:9e:9d:0d:80:60:a5:69: ee:65:8e:25:dd:04:a4:13:0d:76:cf:81:46:a8:dd:fe:42:f9: a3:a0:d0:a7:e2:89:fc:75:7a:21:9f:a6:99:f5:c6:a7:c7:5c: c0:64:b2:d2:b3:81:4a:ee:07:1f:4b:8a:c6:ae:1e:c4:98:48: ed:39:2e:99:b0:c7:87:ef:9a:ac:f1:80:d5:00:5b:98:82:69: 47:d4:ea:a7:fa:d2:3b:19:48:ce:84:67:16:61:8b:87:f1:6e: d7:0a:37:76:85:e7:bf:ad:56:6e:69:9a:39:9f:2d:84:56:7b: 4c:48:af:d6:69:e1:60:98:8a:2e:14:c4:bc:34:74:45:a6:79: 06:79:0d:b1:fb:f1:7c:7a:7f:79:1b:61:fc:5e:9f:fb:4a:fc: d1:1d:ff:a8:9a:a3:aa:a1:a8:df:ae:88:ef:d9:de:7f:41:37: 3d:07:54:dc:07:2f:97:09:1c:37:3e:ea:5e:38:8f:89:fe:a7: e4:91:3f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjUwNzIwMTc1NzQ2WhcNMjUwNzI3MTc1NzQ2WjAYMRYwFAYD VQQDEw02ODdkMmUxYi1mM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMwPP3304+xVxkbPAyj9bRvD1nVnguhApQAxLZV7m2oN/QdCnhgYKmdRx+5/ 6mp6putQLgVlTHUK0mTteaN4uetcyy7JUXmsEbIES1MvlEf/QEh3n+BqBvFkN8SM y+iHt4RKDIZ7vDBiDCdfsD5eXI7hSJ8JKemQEwOkI5oayXJeMIPd0+YcqGik6yDM 1G0RnVYyGwNM6+sQ4lC9g93U3EJZMnfIhsNpQ2RY0m9PlyhzxMKvalUUuHaRoWM+ q7c8ttXg194tBya6Mc4K2t/ttAYRMQANaPKp+XACGkGZ3Pft3gFFqADmKq3MpGtZ S0v/sV715/qqSRD5+7yqg8GIjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpt9oRv HwAMTvvZpA7thfMtvC+vMB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP UGJQd3ZNSmNocFRPRzgzSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMQDCj1xsJpgwyyxDRqSLyBKNPsnR/lyTp6H8ymx3FnNh9sN5EoYpj yGg7pe6Rn+KV7haWYx9KgW4z014GuULH7p6dDYBgpWnuZY4l3QSkEw12z4FGqN3+ QvmjoNCn4on8dXohn6aZ9canx1zAZLLSs4FK7gcfS4rGrh7EmEjtOS6ZsMeH75qs 8YDVAFuYgmlH1Oqn+tI7GUjOhGcWYYuH8W7XCjd2hee/rVZuaZo5ny2EVntMSK/W aeFgmIouFMS8NHRFpnkGeQ2x+/F8en95G2H8Xp/7SvzRHf+omqOqoajfrojv2d5/ QTc9B1TcBy+XCRw3PupeOI+J/qfkkT+F -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:19 2025 by rpki-client