$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft File: PTTx6lntsIbxczTVmekxDXH-B0Q.mft (raw, json) Hash identifier: 7aJ6suKLwZiU2VGYl5P5VkTYU+SlvtXyudiW/ppq6xI= Subject key identifier: 5C:7F:6F:81:EC:2E:30:90:93:8D:44:E3:86:22:D8:2A:20:31:BB:83 Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft Manifest number: 0E89 Signing time: Wed 20 Aug 2025 17:46:44 +0000 Manifest this update: Wed 20 Aug 2025 17:46:43 +0000 Manifest next update: Wed 27 Aug 2025 17:46:43 +0000 Files and hashes: 1: PTTx6lntsIbxczTVmekxDXH-B0Q.crl (hash: F9PWXS0njj5RRyqKQLl9XAGwjWRKES+WIWG5JFQjCds=) 2: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (hash: alUP6VMzD0tmc3pTboCQa5BjgFfvzIB460TqVIvJ3eU=) 3: A152FA389E2211E99CA85B6CC4F9AE02.roa (hash: tVnO8ZV7Glm7r1+kxCAZBT0FT0Hia7Gl07cM925RQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6, serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Aug 20 17:46:43 2025 GMT Not After : Aug 27 17:46:43 2025 GMT Subject: CN=68a60a04-83e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:17:b0:6d:56:85:8d:8f:1f:87:75:df:75: 2d:39:80:76:e5:9a:ef:c1:e7:f8:0e:fe:32:d6:5d: 6e:f3:a2:dc:e9:83:4d:2e:2e:90:e8:e9:f3:a9:b4: 38:4a:70:42:96:65:5b:21:d2:0c:44:92:dc:27:15: 24:42:dc:0d:4d:38:f7:5e:35:a6:8f:50:69:6c:f6: a9:35:d8:3a:1e:62:74:78:9d:41:cd:b0:e8:fb:44: 04:5f:3e:e4:4b:83:45:b5:86:f0:74:ca:dc:0f:95: 3b:df:0f:1a:1f:24:1b:f6:c3:de:cb:e2:30:3e:17: 62:d7:57:28:ca:e4:1d:37:53:37:4d:e3:58:64:be: 9b:a0:ff:96:b2:ce:20:09:31:84:d0:d5:b9:94:26: 06:7f:aa:78:ee:c7:33:31:7f:11:b6:22:c8:bd:1d: c1:7e:32:4a:fa:c2:00:f3:a4:8d:e5:25:19:9e:d0: ac:27:3e:cc:2f:50:88:e6:2b:40:8c:fa:1d:b5:b0: 82:4b:c5:a9:28:11:a3:3a:14:2b:c5:51:4f:a7:5d: 02:ae:23:ca:05:eb:35:73:2f:cb:2a:e4:b5:21:fc: 5f:dc:05:40:43:10:d5:db:0e:f6:50:8b:a4:4c:4e: fa:fb:02:bc:6d:d0:54:0e:39:aa:e2:2a:74:28:86: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7F:6F:81:EC:2E:30:90:93:8D:44:E3:86:22:D8:2A:20:31:BB:83 X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f1:cb:53:ff:d5:71:6a:87:00:af:2d:68:b3:84:32:1a:05: 65:87:18:62:27:43:92:d0:78:0a:b3:fa:52:8f:d3:b2:91:37: f0:d1:70:5d:dc:11:b2:49:41:1f:94:7f:a4:13:8d:db:d9:90: 9b:94:44:29:8b:8e:e0:e9:41:17:8d:07:bb:f6:5e:58:e5:0f: 2b:7a:4d:25:dd:69:78:c1:13:83:73:97:8b:d3:8b:a3:ec:03: de:37:52:04:e8:76:95:fb:5f:96:fa:de:1a:ac:41:28:a5:ba: f7:e4:e9:df:6d:b7:66:81:44:86:13:7c:71:34:9f:d5:9d:cb: e9:97:b1:2e:e7:63:de:7f:9b:0d:cc:b1:e5:ed:39:86:ab:11: 52:33:b7:a2:41:68:cf:e5:69:8a:97:b1:c5:a4:38:49:ea:6a: c1:fe:de:af:c8:88:76:85:a9:e6:b4:2d:7c:c9:ed:ad:20:97: 83:44:b5:69:93:d5:14:b8:c6:4e:fb:4e:30:2e:6a:ef:11:ab: 76:b0:fb:7b:a0:56:67:e6:b7:f4:ce:2d:85:51:eb:cb:22:2a: 53:ee:75:83:b2:fb:73:e4:57:9f:f4:bd:ce:c1:09:08:60:4a: bc:56:cf:89:03:09:07:e6:ff:1d:4d:b7:7a:c2:3d:cf:2f:b2: fb:11:e2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjUwODIwMTc0NjQzWhcNMjUwODI3MTc0NjQzWjAYMRYwFAYD VQQDEw02OGE2MGEwNC04M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoYXsG1WhY2PH4d133UtOYB25Zrvwef4Dv4y1l1u86Lc6YNNLi6Q6OnzqbQ4 SnBClmVbIdIMRJLcJxUkQtwNTTj3XjWmj1BpbPapNdg6HmJ0eJ1BzbDo+0QEXz7k S4NFtYbwdMrcD5U73w8aHyQb9sPey+IwPhdi11coyuQdN1M3TeNYZL6boP+Wss4g CTGE0NW5lCYGf6p47sczMX8RtiLIvR3BfjJK+sIA86SN5SUZntCsJz7ML1CI5itA jPodtbCCS8WpKBGjOhQrxVFPp10CriPKBes1cy/LKuS1Ifxf3AVAQxDV2w72UIuk TE76+wK8bdBUDjmq4ip0KIZawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx/b4Hs LjCQk41E44Yi2CogMbuDMB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUFFNi83QkMyOTMyNjlCRjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJ YnhjelRWbWVreERYSC1CMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP8ctT/9VxaocAry1os4QyGgVlhxhiJ0OS0HgKs/pSj9OykTfw0XBd 3BGySUEflH+kE43b2ZCblEQpi47g6UEXjQe79l5Y5Q8rek0l3Wl4wRODc5eL04uj 7APeN1IE6HaV+1+W+t4arEEopbr35OnfbbdmgUSGE3xxNJ/Vncvpl7Eu52Pef5sN zLHl7TmGqxFSM7eiQWjP5WmKl7HFpDhJ6mrB/t6vyIh2hanmtC18ye2tIJeDRLVp k9UUuMZO+04wLmrvEat2sPt7oFZn5rf0zi2FUevLIipT7nWDsvtz5Fef9L3OwQkI YEq8Vs+JAwkH5v8dTbd6wj3PL7L7EeIz -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:05 2025 by rpki-client