$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json) Hash identifier: 7pLXIf0/MSHcWKtsPMqEejVTLdd5TPoqkGFN+s/xBmU= Subject key identifier: 96:D8:4B:60:FF:28:02:3D:96:2C:F6:AF:86:25:8E:62:9C:0F:FB:A0 Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft Manifest number: 2CCA Signing time: Sat 26 Jul 2025 15:33:07 +0000 Manifest this update: Sat 26 Jul 2025 15:33:07 +0000 Manifest next update: Sat 02 Aug 2025 15:33:07 +0000 Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: NKBcIuYmSDShWyv4dGG1uMb6g0OIypLwcILMK/wQnH0=) 2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: rd1Y32xkoeiGOMGm6/GALVzy5u2L42RHVTq0ym4rGxc=) 3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: pfSrv7ABwA9/SpzKbTS+fYCpaS8uDOGjDIZI4jVwlaM=) 4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: EH3KOVhO+p9xGSMvIHUrJUleuaQ1FPNW3sUdbyMtTPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 15:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11517 (0x2cfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Jul 26 15:33:07 2025 GMT Not After : Aug 2 15:33:07 2025 GMT Subject: CN=6884f533-fabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:f7:d0:29:6b:c8:e8:76:ea:15:a0:35:be: 4f:8a:af:40:44:c0:79:36:04:df:a6:01:2f:98:fa: a1:fb:f5:9c:82:e4:6b:76:7b:a8:ed:82:ed:6c:43: f6:e7:91:82:65:46:39:9b:1f:b2:bc:19:37:54:fd: 46:d5:3d:47:44:25:0d:6d:93:e8:54:18:ee:6f:69: ce:10:6c:bf:5c:34:a6:c6:2c:0f:e0:1e:57:11:6d: 4a:90:8b:aa:8a:13:54:b6:28:8a:fd:ca:f3:94:97: 33:21:62:02:81:82:45:7a:aa:66:70:ed:56:d5:a3: 99:4c:99:b2:38:4b:6b:2d:c0:b6:a3:fc:0e:11:1c: b5:fb:58:dd:1a:18:84:19:3e:1b:40:ab:1e:c3:f1: b9:af:f5:a2:34:e4:58:0e:95:f5:55:09:01:9e:2a: 0d:43:26:32:ae:77:b1:9f:fa:75:d9:d2:c8:b4:1e: 05:d5:cd:5b:cd:18:11:9f:d1:c8:c4:53:e9:20:88: 6b:fc:b5:ae:9e:4f:5a:ea:ea:bb:eb:2a:6d:37:af: be:e4:64:96:aa:4b:6b:39:58:03:03:56:e2:ab:e3: da:32:7f:b7:4f:fa:3a:ae:68:36:c4:07:7c:70:93: 7e:57:5a:d4:ce:4d:79:6c:2e:f1:cf:e8:3c:df:db: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D8:4B:60:FF:28:02:3D:96:2C:F6:AF:86:25:8E:62:9C:0F:FB:A0 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:65:bc:29:3b:d5:cf:2c:3c:a5:5a:ff:02:d5:1a:a4:5b:55: 4d:b8:6f:5c:9f:d7:dc:16:d3:ed:a5:5d:20:f4:23:0a:4c:63: 24:98:7b:6e:be:36:50:cd:f6:87:71:5d:b1:13:6d:9e:5a:70: 0b:a7:92:6a:32:17:6a:f5:74:58:ea:c0:6c:50:7b:11:1a:d9: e2:13:87:18:af:11:c2:d5:34:0b:b9:91:c1:66:e2:7a:db:a2: 85:3d:27:9f:01:5c:cf:21:ab:ff:68:f3:d0:1f:8f:07:20:e2: a0:7a:fa:83:f6:84:d5:ef:14:1a:3e:bf:d2:92:88:ae:de:45: f9:62:ae:3e:e5:10:49:78:76:f5:da:27:c6:d4:09:54:b8:bc: 15:12:4b:02:ac:51:74:47:88:69:94:f3:f1:79:54:47:05:7a: 85:4e:c4:f7:5d:dc:a7:41:d6:e7:17:1d:5f:5e:ef:70:5f:46: da:e6:b4:25:2d:b8:ba:6d:c3:48:7e:c8:88:8f:af:e4:58:2c: 2d:e0:25:91:b8:5b:78:e9:47:d0:34:e2:2c:15:99:90:0f:44: 94:c3:74:94:f6:cc:74:53:63:45:0c:3b:70:a5:c8:fb:8e:6c: f8:89:b5:a3:2b:f3:48:59:3c:98:d2:68:6a:e7:5b:0e:7a:9b: 25:47:0f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjUwNzI2MTUzMzA3WhcNMjUwODAyMTUzMzA3WjAYMRYwFAYD VQQDEw02ODg0ZjUzMy1mYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yz30ClryOh26hWgNb5Piq9ARMB5NgTfpgEvmPqh+/WcguRrdnuo7YLtbEP2 55GCZUY5mx+yvBk3VP1G1T1HRCUNbZPoVBjub2nOEGy/XDSmxiwP4B5XEW1KkIuq ihNUtiiK/crzlJczIWICgYJFeqpmcO1W1aOZTJmyOEtrLcC2o/wOERy1+1jdGhiE GT4bQKsew/G5r/WiNORYDpX1VQkBnioNQyYyrnexn/p12dLItB4F1c1bzRgRn9HI xFPpIIhr/LWunk9a6uq76yptN6++5GSWqktrOVgDA1biq+PaMn+3T/o6rmg2xAd8 cJN+V1rUzk15bC7xz+g839tNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbYS2D/ KAI9liz2r4YljmKcD/ugMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu S1dOcThQT2pkZE9SQ1EtU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ZbwpO9XPLDylWv8C1RqkW1VNuG9cn9fcFtPtpV0g9CMKTGMkmHtu vjZQzfaHcV2xE22eWnALp5JqMhdq9XRY6sBsUHsRGtniE4cYrxHC1TQLuZHBZuJ6 26KFPSefAVzPIav/aPPQH48HIOKgevqD9oTV7xQaPr/Skoiu3kX5Yq4+5RBJeHb1 2ifG1AlUuLwVEksCrFF0R4hplPPxeVRHBXqFTsT3XdynQdbnFx1fXu9wX0ba5rQl Lbi6bcNIfsiIj6/kWCwt4CWRuFt46UfQNOIsFZmQD0SUw3SU9sx0U2NFDDtwpcj7 jmz4ibWjK/NIWTyY0mhq51sOepslRw9v -----END CERTIFICATE-----Generated at Sun Jul 27 05:56:42 2025 by rpki-client