$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: 71xhp6tUPPM+eQ3grlF2cSV4+s+TXbCuAkw8OsHwLBA= Subject key identifier: CA:28:A9:AC:B1:7D:FB:DD:4F:35:76:98:20:FB:1F:24:15:77:C8:6A Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34BB Signing time: Sun 24 Aug 2025 14:40:39 +0000 Manifest this update: Sun 24 Aug 2025 14:40:38 +0000 Manifest next update: Sun 31 Aug 2025 14:40:38 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: o+dglpL8uTbyS9Mcm4ee1VFQJ/wTGccmQZ/smWTpLcE=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Aug 24 14:40:38 2025 GMT Not After : Aug 31 14:40:38 2025 GMT Subject: CN=68ab2467-294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:36:49:71:52:19:71:2b:74:74:e9:b5:e0: 95:c6:2b:83:01:a7:16:47:fa:37:4c:a3:98:1f:e7: 66:ff:74:7f:36:1e:b1:b2:ba:e6:41:e3:ef:38:23: e9:ee:1b:44:46:41:75:89:cc:33:97:00:60:be:47: 8f:c2:08:9e:15:b9:46:71:a9:ac:a3:c9:8a:39:bf: 0b:69:e0:80:51:4d:7e:17:6c:46:71:65:59:42:07: fb:93:94:19:e5:4a:e2:77:63:cc:d5:2c:48:4a:21: aa:cd:69:f2:00:f5:7a:54:da:78:27:af:6f:fc:bc: 2c:ed:43:eb:21:5c:79:2a:6a:a3:f9:32:a6:79:6f: 1f:50:34:8a:93:ba:db:52:45:e9:5c:15:3d:b2:ad: 56:b2:7d:3f:90:ec:57:70:26:c8:38:eb:46:1f:c1: 2e:b5:17:dd:79:57:ff:b0:77:40:01:0f:64:06:8a: 59:68:b0:d3:12:07:0c:4f:57:b5:5d:61:74:12:40: 46:bc:da:20:a1:90:b1:cc:f7:f8:8f:ff:71:8b:58: 13:46:8b:2c:bb:1a:3b:c7:43:a3:21:29:c8:db:ed: 16:4d:43:9a:bd:0a:ff:34:1c:6c:1c:d7:ce:af:e6: 14:5e:31:cc:3c:ac:79:f1:c3:01:14:a1:36:ce:fb: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:28:A9:AC:B1:7D:FB:DD:4F:35:76:98:20:FB:1F:24:15:77:C8:6A X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:6a:f9:42:07:bb:82:94:08:50:3a:e6:e3:90:84:38:c8:87: 2f:a4:5d:fa:55:71:94:56:c9:91:c1:89:a8:4c:92:d7:cf:e2: 73:7c:2e:30:53:c4:4b:2f:a8:2a:c5:10:2d:90:a6:4f:3f:18: 1b:a0:a4:01:dd:d6:25:c4:ea:a5:06:b5:3d:06:0b:0a:ec:e8: d9:3b:9f:4c:63:ba:e3:e4:4d:76:9b:94:96:89:55:5c:31:31: f5:42:e2:e0:ed:bb:aa:b1:c5:f8:2e:21:3d:d8:4f:69:db:bc: 63:68:c5:91:b7:51:56:fe:64:f1:98:ee:35:f5:9b:a3:2a:a3: a1:9c:46:6a:0c:12:23:6f:33:ae:76:9e:25:b1:d0:eb:00:b2: ca:ae:35:04:fe:8d:21:c0:37:65:ca:fc:b5:57:8e:76:23:4e: 39:0f:57:e6:6c:5b:00:8a:1c:ac:ac:31:9b:ff:2f:2c:57:38: 96:8a:98:6a:2b:b5:b0:20:85:5f:e1:d3:ec:c0:8d:10:9e:64: a3:db:d2:62:ed:32:7a:35:35:de:12:a3:aa:9c:42:64:7e:5e: f1:aa:d8:71:2c:08:61:54:be:2e:c9:53:e5:28:0d:71:91:7d: 79:49:a5:2d:45:29:cf:8a:12:37:48:47:a5:b4:0b:e2:6b:ba: 1e:15:5d:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUwODI0MTQ0MDM4WhcNMjUwODMxMTQ0MDM4WjAYMRYwFAYD VQQDEw02OGFiMjQ2Ny0yOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxA2SXFSGXErdHTpteCVxiuDAacWR/o3TKOYH+dm/3R/Nh6xsrrmQePvOCPp 7htERkF1icwzlwBgvkePwgieFblGcamso8mKOb8LaeCAUU1+F2xGcWVZQgf7k5QZ 5Urid2PM1SxISiGqzWnyAPV6VNp4J69v/Lws7UPrIVx5Kmqj+TKmeW8fUDSKk7rb UkXpXBU9sq1Wsn0/kOxXcCbIOOtGH8EutRfdeVf/sHdAAQ9kBopZaLDTEgcMT1e1 XWF0EkBGvNogoZCxzPf4j/9xi1gTRossuxo7x0OjISnI2+0WTUOavQr/NBxsHNfO r+YUXjHMPKx58cMBFKE2zvsrlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMooqayx ffvdTzV2mCD7HyQVd8hqMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHavlCB7uClAhQOubjkIQ4yIcvpF36VXGUVsmRwYmoTJLXz+JzfC4w U8RLL6gqxRAtkKZPPxgboKQB3dYlxOqlBrU9BgsK7OjZO59MY7rj5E12m5SWiVVc MTH1QuLg7buqscX4LiE92E9p27xjaMWRt1FW/mTxmO419ZujKqOhnEZqDBIjbzOu dp4lsdDrALLKrjUE/o0hwDdlyvy1V452I045D1fmbFsAihysrDGb/y8sVziWiphq K7WwIIVf4dPswI0QnmSj29Ji7TJ6NTXeEqOqnEJkfl7xqthxLAhhVL4uyVPlKA1x kX15SaUtRSnPihI3SEeltAvia7oeFV3J -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:57 2025 by rpki-client