$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json) Hash identifier: t1V31zJqU2jjV+LOynxMmjrm81PAYdeDuLjSaEV1IrA= Subject key identifier: 29:AF:2D:7A:D1:20:44:B2:6A:89:C7:A7:D5:11:15:FD:9E:63:96:FB Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft Manifest number: 0195 Signing time: Sun 27 Jul 2025 03:35:44 +0000 Manifest this update: Sun 27 Jul 2025 03:35:44 +0000 Manifest next update: Sun 03 Aug 2025 03:35:44 +0000 Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: YPiPIZXM/un9gP9IRLWKmESLweWvT6ShzFE1Nr3hSXA=) 2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: a4fQ9/brXb5z2Mtyms5QfXYQ2TroFUoiyPnPZ317i3A=) 3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: AbLxDDz7EyW1J/bgbPyfasPFpKdJaru9haT9jeZMl/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 03:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Validity Not Before: Jul 27 03:35:44 2025 GMT Not After : Aug 3 03:35:44 2025 GMT Subject: CN=68859e90-0124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:60:b4:dc:92:44:e4:61:64:39:c3:08:b7: 76:4c:a6:1f:5e:ea:00:55:81:bb:8a:8f:f2:f5:34: 5a:3d:1c:84:60:b5:3f:62:6c:27:99:43:52:9d:4c: dd:ce:f7:f2:f6:d9:a3:48:5a:e6:6e:be:8f:1d:da: d2:fd:f4:da:7f:73:c9:49:e9:83:3b:ea:2e:5e:e7: 34:68:64:d9:70:67:f2:34:2d:99:84:09:56:a7:a1: 3e:67:4a:0b:c5:f5:d8:99:2f:9e:48:71:43:2b:e3: 34:f4:97:b9:0e:1a:17:b2:26:51:d1:c9:65:2f:25: 15:d8:f1:9b:e7:c8:37:fc:f0:46:98:e3:e9:33:1f: ba:9f:df:8b:30:b1:56:14:da:a5:25:0c:cf:38:81: 99:e8:27:ba:9c:ef:fc:b9:60:62:f1:6e:53:72:de: e1:f2:0f:bc:55:d1:5d:c7:01:c1:5d:6b:a4:a5:bb: 53:4e:4f:98:57:67:dc:8d:d6:f0:65:dc:b1:33:d5: 70:a2:e3:49:11:7c:1c:91:fa:c4:40:76:a9:04:30: b3:15:cb:13:81:65:d9:d4:36:c5:07:4e:ab:d2:31: ae:19:2b:a3:60:9d:66:4d:ee:6e:cc:ad:a7:f7:53: ba:9f:dc:70:ee:0a:39:ee:65:9b:5b:d4:2c:fa:e1: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:2D:7A:D1:20:44:B2:6A:89:C7:A7:D5:11:15:FD:9E:63:96:FB X509v3 Authority Key Identifier: keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:aa:84:17:b7:a7:37:6d:f5:88:99:9a:19:bb:05:d5:25:b6: 51:40:42:05:3e:95:72:4f:f7:1d:c4:92:f8:24:1d:0a:da:ed: fb:8e:8b:2c:fa:71:3f:48:1d:f8:18:5f:b3:be:ab:49:c6:17: 21:d8:6b:f7:e8:8e:9e:68:56:20:f0:75:af:b0:43:15:7f:3f: 6b:e8:ee:99:ad:6e:dd:9a:33:d3:3b:a1:af:0f:a0:44:04:b6: 2f:55:22:84:97:02:97:87:b3:34:d0:57:ce:6e:e7:34:20:d9: 3e:5c:9b:25:0d:9c:4b:3f:8d:0c:b2:d9:a3:0c:ee:27:fc:8d: 9d:84:16:d6:7b:e6:b0:bb:7f:3f:02:d3:48:4b:26:b7:d8:aa: 93:d8:d1:0b:99:da:ef:1a:fa:af:7a:58:ee:42:03:5a:bd:97: 05:3d:b3:9b:d1:23:9d:25:74:f1:65:fa:42:4f:ef:32:bc:d4: a4:6f:b8:17:8d:e6:a3:89:71:ba:db:97:3a:aa:ef:9d:5e:4b: ac:ac:de:e5:c0:1e:15:76:c5:bb:82:65:35:6a:be:2f:d2:e6: 38:10:29:ef:66:c1:f2:39:9d:2e:1b:10:52:6b:d8:80:6e:ea: fa:cf:d2:cd:24:31:a1:95:95:0b:8e:fb:e2:fe:82:46:6f:b5: f7:9c:d6:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5RkUxMTAvBgNVBAUTKEE1RDlDNkE2Rjk2NzVCOTFDRTU0RDExNUY4OEM5NDEw RjE4RjkwRkUwHhcNMjUwNzI3MDMzNTQ0WhcNMjUwODAzMDMzNTQ0WjAYMRYwFAYD VQQDEw02ODg1OWU5MC0wMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iZgtNySRORhZDnDCLd2TKYfXuoAVYG7io/y9TRaPRyEYLU/YmwnmUNSnUzd zvfy9tmjSFrmbr6PHdrS/fTaf3PJSemDO+ouXuc0aGTZcGfyNC2ZhAlWp6E+Z0oL xfXYmS+eSHFDK+M09Je5DhoXsiZR0cllLyUV2PGb58g3/PBGmOPpMx+6n9+LMLFW FNqlJQzPOIGZ6Ce6nO/8uWBi8W5Tct7h8g+8VdFdxwHBXWukpbtTTk+YV2fcjdbw ZdyxM9VwouNJEXwckfrEQHapBDCzFcsTgWXZ1DbFB06r0jGuGSujYJ1mTe5uzK2n 91O6n9xw7go57mWbW9Qs+uFc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmvLXrR IESyaonHp9URFf2eY5b7MB8GA1UdIwQYMBaAFKXZxqb5Z1uRzlTRFfiMlBDxj5D+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzlGRS81M0NCNjkwQ0ZE RTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1SE9WTkVWLUl5VUVQR1Br UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkbkdwdmxuVzVIT1ZORVYtSXlVRVBHUGtQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzlGRS81M0NCNjkwQ0ZERTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1 SE9WTkVWLUl5VUVQR1BrUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbqoQXt6c3bfWImZoZuwXVJbZRQEIFPpVyT/cdxJL4JB0K2u37joss +nE/SB34GF+zvqtJxhch2Gv36I6eaFYg8HWvsEMVfz9r6O6ZrW7dmjPTO6GvD6BE BLYvVSKElwKXh7M00FfObuc0INk+XJslDZxLP40MstmjDO4n/I2dhBbWe+awu38/ AtNISya32KqT2NELmdrvGvqveljuQgNavZcFPbOb0SOdJXTxZfpCT+8yvNSkb7gX jeajiXG625c6qu+dXkusrN7lwB4VdsW7gmU1ar4v0uY4ECnvZsHyOZ0uGxBSa9iA bur6z9LNJDGhlZULjvvi/oJGb7X3nNYX -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:25 2025 by rpki-client