$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: 0Q/qDTfwxbmqUCw5Ym2d7rJNIkNyjMpebrb80IbmoYQ= Subject key identifier: 4A:83:88:23:63:C3:4E:04:83:69:FB:6F:74:6D:13:A5:E1:70:67:BA Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0B94 Signing time: Wed 20 Aug 2025 19:03:43 +0000 Manifest this update: Wed 20 Aug 2025 19:03:43 +0000 Manifest next update: Wed 27 Aug 2025 19:03:43 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: ivirDDqqEWDReBbp7WFDr8Rv9i3rYh52aC8pVSF9l0E=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Aug 20 19:03:43 2025 GMT Not After : Aug 27 19:03:43 2025 GMT Subject: CN=68a61c0f-656b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:26:dd:84:c0:38:82:6b:a9:50:63:b8:0f: a9:63:d4:97:77:a6:18:f7:af:b8:a6:fb:fc:59:72: 82:a8:de:d1:de:0c:ac:ec:52:c8:9a:6b:06:d9:a4: 1b:bb:bb:e1:6a:41:41:b6:50:40:c2:0a:aa:31:b9: 33:c1:61:eb:dd:de:cb:55:31:ed:60:86:2d:f3:18: c4:a2:fd:bf:23:99:f9:d3:bd:36:81:b2:eb:f6:8c: cf:95:f9:05:15:c2:06:04:75:49:0f:0d:f9:b0:80: ed:ef:53:99:1c:80:1c:6a:5f:49:a6:a7:f7:2a:44: 1f:13:8d:49:36:e1:39:55:e3:6c:07:ab:10:22:08: bf:47:69:b3:81:35:ac:fb:6d:ee:23:39:46:b1:af: 86:d7:db:db:fe:2b:28:78:30:b4:01:2e:18:e5:c3: 68:6d:a2:83:3a:80:23:1f:a9:6a:fc:5f:84:d5:d9: da:55:52:23:a7:d0:ee:76:53:8b:f0:b6:42:c7:6d: e0:e8:44:c8:17:56:e7:f8:75:dd:8a:b9:87:6b:e7: 37:bf:ab:06:56:4a:4c:c6:e5:69:52:4a:fc:28:17: 64:26:ac:c7:12:49:bb:69:39:ba:bb:78:df:c5:7f: 7c:4d:e2:9a:bf:9f:9e:68:8f:3d:1e:7a:2b:f3:b6: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:83:88:23:63:C3:4E:04:83:69:FB:6F:74:6D:13:A5:E1:70:67:BA X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:24:4f:5e:01:18:e3:d0:2b:3e:9c:98:36:cb:52:84:a5:ca: c4:da:0b:f8:7b:17:f4:a1:ce:d1:ef:b8:5c:bc:94:84:15:1f: 4d:70:77:12:d6:a6:05:8f:66:31:cd:c4:54:e0:2b:bc:ae:1d: be:5c:5b:ca:93:5e:eb:84:3f:93:d2:c8:39:1c:e2:55:90:97: 63:bb:4d:21:4c:46:17:eb:48:a4:3a:c4:97:f4:7f:20:b3:47: 67:79:06:77:28:f6:5e:95:20:be:f5:bf:f8:2b:5a:a2:e1:cb: fb:84:f2:d3:89:35:1d:b2:11:05:ff:7c:7b:9d:d8:38:54:0c: 55:ca:eb:9f:e2:7a:76:37:c0:5d:5b:b1:6f:f7:b1:48:90:e2: dc:4c:78:ca:94:d1:0b:b4:75:6a:94:e3:76:7b:6e:79:13:15: ed:8a:30:fa:b0:a0:14:cc:8f:c1:c3:bd:32:de:55:70:72:2e: de:0e:7e:b5:00:83:5a:5a:9e:16:02:75:7a:2f:a2:85:d1:5e: b6:e1:e7:e5:27:41:94:5c:cc:bd:46:4c:52:e1:d6:1a:db:ea: d9:b8:88:c0:88:f8:39:7d:72:c1:e7:9a:e7:d8:e5:de:05:3c: 19:cf:82:60:ea:9b:5b:fb:40:db:e8:1b:e4:8a:a1:05:87:fa: a0:42:87:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwODIwMTkwMzQzWhcNMjUwODI3MTkwMzQzWjAYMRYwFAYD VQQDEw02OGE2MWMwZi02NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO0m3YTAOIJrqVBjuA+pY9SXd6YY96+4pvv8WXKCqN7R3gys7FLImmsG2aQb u7vhakFBtlBAwgqqMbkzwWHr3d7LVTHtYIYt8xjEov2/I5n50702gbLr9ozPlfkF FcIGBHVJDw35sIDt71OZHIAcal9Jpqf3KkQfE41JNuE5VeNsB6sQIgi/R2mzgTWs +23uIzlGsa+G19vb/isoeDC0AS4Y5cNobaKDOoAjH6lq/F+E1dnaVVIjp9DudlOL 8LZCx23g6ETIF1bn+HXdirmHa+c3v6sGVkpMxuVpUkr8KBdkJqzHEkm7aTm6u3jf xX98TeKav5+eaI89Hnor87aWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqDiCNj w04Eg2n7b3RtE6XhcGe6MB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcJE9eARjj0Cs+nJg2y1KEpcrE2gv4exf0oc7R77hcvJSEFR9NcHcS 1qYFj2YxzcRU4Cu8rh2+XFvKk17rhD+T0sg5HOJVkJdju00hTEYX60ikOsSX9H8g s0dneQZ3KPZelSC+9b/4K1qi4cv7hPLTiTUdshEF/3x7ndg4VAxVyuuf4np2N8Bd W7Fv97FIkOLcTHjKlNELtHVqlON2e255ExXtijD6sKAUzI/Bw70y3lVwci7eDn61 AINaWp4WAnV6L6KF0V624eflJ0GUXMy9RkxS4dYa2+rZuIjAiPg5fXLB55rn2OXe BTwZz4Jg6ptb+0Db6BvkiqEFh/qgQoe7 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:00 2025 by rpki-client