$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: suib9Exs/9AOYO5VhMtefoPoCDxeCnvjbt9TYVn/43s= Subject key identifier: D1:92:6F:02:8D:BB:F6:E4:AF:71:AF:19:AA:1A:D4:D9:05:4A:25:E0 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 04B0 Signing time: Sun 07 Sep 2025 00:16:31 +0000 Manifest this update: Sun 07 Sep 2025 00:16:31 +0000 Manifest next update: Sun 14 Sep 2025 00:16:31 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: FTBe6hb9pqK8A4ZAr5OzgqqHp12sdGJ2SBX992EhFrY=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Sep 7 00:16:31 2025 GMT Not After : Sep 14 00:16:31 2025 GMT Subject: CN=68bccedf-4fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:83:a8:70:e1:dc:2e:59:e9:34:3d:0c:70: 27:f1:9e:e2:14:67:df:2e:6a:37:de:19:32:e8:aa: 52:60:a7:68:a1:b1:14:5a:d1:82:af:45:71:b6:b2: f1:d0:03:51:59:f8:b1:df:00:7b:80:b9:5c:8d:67: 19:62:7a:db:fc:7b:9b:a4:bb:4a:ab:76:85:98:40: 38:d6:54:4c:0a:a9:df:2d:46:21:03:94:cd:c2:75: 6d:25:a1:79:bd:a8:68:8f:1b:c2:d5:1c:b4:16:f9: 2d:73:86:2c:d4:26:92:0a:2e:c1:9f:34:2f:5a:84: 31:7d:28:3e:78:ce:4a:7b:52:cd:3e:59:f0:32:f4: 22:eb:c0:9e:69:db:a9:60:4e:9d:8f:9c:19:c3:cd: 15:16:79:53:71:b3:2e:75:55:ef:b1:a2:a1:b9:42: e9:90:83:ac:c6:8a:d5:3d:eb:b8:13:0a:76:ef:04: 45:65:3d:dd:a0:83:19:64:a5:e1:f6:e0:7d:23:1b: 71:cf:99:1a:38:c2:c8:1f:37:f3:41:33:1a:e1:b1: ed:f7:90:c4:8b:60:49:05:26:92:28:13:3f:ca:73: ac:69:90:18:ef:75:66:c4:d8:9e:ed:54:98:d2:c5: 06:ac:b7:c8:fd:47:e6:90:f9:24:cc:ef:b8:b2:33: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:92:6F:02:8D:BB:F6:E4:AF:71:AF:19:AA:1A:D4:D9:05:4A:25:E0 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3e:e9:8f:a0:84:1c:79:db:4d:68:d7:b5:c4:04:a4:72:8a: 52:b0:eb:4e:0e:0d:07:16:0e:a4:f7:ee:2c:26:32:fa:9f:30: 03:43:2b:23:87:9e:48:97:09:9f:6b:0b:1d:fc:e8:2d:e1:5c: 9d:8e:e3:05:5e:fb:fa:90:8e:30:de:7f:fc:bb:2a:24:dd:1e: 78:01:67:96:3b:28:ee:fc:6a:ea:86:71:7d:0c:78:f5:56:55: d4:e6:af:c8:10:6d:55:65:fe:14:78:a9:aa:b1:72:22:f7:ed: 90:64:ad:e9:8b:de:5e:5d:7a:eb:2d:0d:bb:f0:0e:88:79:14: 73:94:53:80:94:69:5a:32:de:03:22:e7:c8:33:82:bd:0e:a7: 44:9b:0c:d0:e2:f1:dc:2c:75:1e:07:29:10:8e:85:06:31:28: 04:88:a1:a3:05:8f:17:83:2e:40:e0:8e:2f:33:4a:5e:90:e6: 5b:50:6d:c4:0a:f9:23:08:11:9c:14:38:79:0a:b1:0b:c4:80: f7:6e:53:88:2f:10:78:26:f6:d2:6c:ee:c6:a6:61:8b:2e:ac: bb:a3:b6:97:8d:47:d5:19:0d:c0:d1:f8:e4:bb:00:89:84:13: 49:bf:6b:4a:e6:d4:fe:cf:70:19:68:a4:26:e3:4b:7b:1d:ca: 52:ea:da:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUwOTA3MDAxNjMxWhcNMjUwOTE0MDAxNjMxWjAYMRYwFAYD VQQDEw02OGJjY2VkZi00ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti6DqHDh3C5Z6TQ9DHAn8Z7iFGffLmo33hky6KpSYKdoobEUWtGCr0VxtrLx 0ANRWfix3wB7gLlcjWcZYnrb/HubpLtKq3aFmEA41lRMCqnfLUYhA5TNwnVtJaF5 vahojxvC1Ry0Fvktc4Ys1CaSCi7BnzQvWoQxfSg+eM5Ke1LNPlnwMvQi68Ceadup YE6dj5wZw80VFnlTcbMudVXvsaKhuULpkIOsxorVPeu4Ewp27wRFZT3doIMZZKXh 9uB9Ixtxz5kaOMLIHzfzQTMa4bHt95DEi2BJBSaSKBM/ynOsaZAY73VmxNie7VSY 0sUGrLfI/UfmkPkkzO+4sjNLwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGSbwKN u/bkr3GvGaoa1NkFSiXgMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdPumPoIQcedtNaNe1xASkcopSsOtODg0HFg6k9+4sJjL6nzADQysj h55Ilwmfawsd/Ogt4VydjuMFXvv6kI4w3n/8uyok3R54AWeWOyju/GrqhnF9DHj1 VlXU5q/IEG1VZf4UeKmqsXIi9+2QZK3pi95eXXrrLQ278A6IeRRzlFOAlGlaMt4D IufIM4K9DqdEmwzQ4vHcLHUeBykQjoUGMSgEiKGjBY8Xgy5A4I4vM0pekOZbUG3E CvkjCBGcFDh5CrELxID3blOILxB4JvbSbO7GpmGLLqy7o7aXjUfVGQ3A0fjkuwCJ hBNJv2tK5tT+z3AZaKQm40t7HcpS6tof -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:43 2025 by rpki-client