$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: eJOXCKFcIHzY1BVC7nXoV6QnR5/nTK4/jZFPuGl/lv8= Subject key identifier: 33:D8:60:C1:57:9B:6B:4F:93:3E:4E:2E:73:BF:D1:EE:1B:4F:04:92 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 03AA Signing time: Sat 19 Jul 2025 01:08:45 +0000 Manifest this update: Sat 19 Jul 2025 01:08:44 +0000 Manifest next update: Sat 26 Jul 2025 01:08:44 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: 8jeVGGt8hmoZySMdMcmm/tC09tGFJAOVFzVex0QA8rI=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Jul 19 01:08:44 2025 GMT Not After : Jul 26 01:08:44 2025 GMT Subject: CN=687af01c-7c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:9b:d4:96:43:bd:a7:8c:d5:c5:df:5c:89: 1e:c6:75:b4:a2:b0:e3:b3:50:f2:2f:a2:34:7c:d8: a1:0b:a8:a3:e3:3a:a9:ed:0c:a5:e4:b2:2c:f0:87: ae:46:e1:60:56:9a:85:7b:6b:f7:3f:a9:86:4e:5d: fb:b7:4c:1c:57:08:95:20:1c:4d:5f:51:b7:9e:bd: e1:9e:2c:f1:ad:b5:e3:ee:4f:33:5b:30:b9:b2:04: ca:8f:77:29:d3:c2:38:a0:f9:91:23:35:b3:74:59: 07:4d:1d:b1:77:a2:f9:24:b4:33:dc:96:0f:c6:63: e3:5c:5e:d8:40:80:ea:31:b8:14:2c:89:a6:72:fa: 65:f9:9c:0e:57:de:ac:38:88:1e:c7:12:91:10:b8: 67:46:2e:22:78:01:57:ce:42:cf:2d:2b:e6:1b:7c: 0c:6e:42:f8:40:3c:e6:7c:79:f5:29:d4:64:4d:97: d0:b0:a5:da:c2:a4:f0:f9:f0:9b:db:91:94:6e:ef: a5:11:3d:a0:e6:c5:6c:a2:39:79:e7:44:22:55:c5: 7e:52:72:f6:eb:37:95:24:08:ff:12:a2:4e:37:fb: bc:fd:7b:cb:79:72:b2:a4:c6:70:45:e6:18:90:70: ae:c7:f9:7a:a4:a9:45:f7:81:26:22:8c:af:41:b4: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:60:C1:57:9B:6B:4F:93:3E:4E:2E:73:BF:D1:EE:1B:4F:04:92 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:1f:7f:da:23:6b:33:f4:e1:c0:b6:d5:91:2e:64:fb:de:14: 41:8f:d1:f8:cb:4f:3d:36:d8:53:41:c3:9f:18:f3:45:96:56: 5d:03:6e:58:29:de:b6:51:30:81:d2:a8:0f:95:f3:43:29:90: a7:80:ea:0b:36:f2:02:36:84:67:19:64:fb:7a:3c:e8:23:35: 4f:91:d0:cd:9f:6b:3f:bc:c7:37:49:5c:93:b1:d0:ce:11:80: c0:ed:1c:fc:b2:c7:ba:15:02:4a:83:06:79:db:04:74:21:9c: 0b:74:3e:30:bf:32:b7:4a:67:3a:01:d5:ec:67:69:23:ad:ab: c2:5c:8d:72:6d:42:dc:e2:6d:06:4e:d5:ca:b0:80:68:06:1e: 69:52:95:3c:48:a2:b9:18:5b:d1:0e:38:30:36:d9:f4:e8:43: 30:5b:79:41:2c:8f:d5:a7:87:d1:87:35:a6:12:b0:48:2a:71: f1:5a:34:ee:1f:da:31:d3:03:b4:38:da:66:df:e0:d7:bf:36: 3e:8e:50:65:31:8b:2b:2c:41:83:e7:b7:b7:06:64:ec:f5:16: ba:c6:6c:ca:74:5d:90:07:9a:8c:6a:87:f8:46:21:1e:e6:fb: 2e:03:de:1c:63:a3:5d:66:e1:7e:43:05:98:4c:f2:d7:c7:99: 72:4b:fb:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwNzE5MDEwODQ0WhcNMjUwNzI2MDEwODQ0WjAYMRYwFAYD VQQDEw02ODdhZjAxYy03YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMib1JZDvaeM1cXfXIkexnW0orDjs1DyL6I0fNihC6ij4zqp7Qyl5LIs8Ieu RuFgVpqFe2v3P6mGTl37t0wcVwiVIBxNX1G3nr3hnizxrbXj7k8zWzC5sgTKj3cp 08I4oPmRIzWzdFkHTR2xd6L5JLQz3JYPxmPjXF7YQIDqMbgULImmcvpl+ZwOV96s OIgexxKRELhnRi4ieAFXzkLPLSvmG3wMbkL4QDzmfHn1KdRkTZfQsKXawqTw+fCb 25GUbu+lET2g5sVsojl550QiVcV+UnL26zeVJAj/EqJON/u8/XvLeXKypMZwReYY kHCux/l6pKlF94EmIoyvQbQQBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPYYMFX m2tPkz5OLnO/0e4bTwSSMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7H3/aI2sz9OHAttWRLmT73hRBj9H4y089NthTQcOfGPNFllZdA25Y Kd62UTCB0qgPlfNDKZCngOoLNvICNoRnGWT7ejzoIzVPkdDNn2s/vMc3SVyTsdDO EYDA7Rz8sse6FQJKgwZ52wR0IZwLdD4wvzK3Smc6AdXsZ2kjravCXI1ybULc4m0G TtXKsIBoBh5pUpU8SKK5GFvRDjgwNtn06EMwW3lBLI/Vp4fRhzWmErBIKnHxWjTu H9ox0wO0ONpm3+DXvzY+jlBlMYsrLEGD57e3BmTs9Ra6xmzKdF2QB5qMaof4RiEe 5vsuA94cY6NdZuF+QwWYTPLXx5lyS/tr -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:21 2025 by rpki-client