$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: +E2Q2Qray7sUsdBSBz/qYLDny0S5xAlSPSKVdaaqn8E= Subject key identifier: FD:00:51:7F:3D:00:D4:BF:ED:BC:2A:66:F1:58:F5:CA:78:B4:F8:ED Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 0312 Signing time: Fri 05 Sep 2025 01:32:30 +0000 Manifest this update: Fri 05 Sep 2025 01:32:29 +0000 Manifest next update: Fri 12 Sep 2025 01:32:29 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: RQK8K4pDgYSQE2Dx5pyv8gOth09yHJ5sstrxQQz1moc=) 2: 4968AAF076AE11F0A3ED6312C4F9AE02.roa (hash: xb4RcSvUiYTd8REdi4WyBe4stRGCNU0ydozy77HnnoE=) 3: FEC3CB74776111F082092E24C4F9AE02.roa (hash: WINt7fbZOdk8aIrfAAKWVCk1MAQPU+oaYxl0DhlLJgg=) 4: 76CBDB6A6D3B11F094EF1637C4F9AE02.roa (hash: S7bxaDDAXQakuF016AdjVEyXPe/gRq6Ul7Boj5SjSh8=) 5: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Sep 5 01:32:29 2025 GMT Not After : Sep 12 01:32:29 2025 GMT Subject: CN=68ba3dae-ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:a9:b0:e3:5a:ee:0c:46:5b:a6:6e:7b:d7: 9d:6e:4a:fb:60:77:8c:0a:bc:c5:bb:b2:88:25:5f: 99:f4:b2:7b:9b:df:d5:71:7b:d0:77:be:5f:03:6b: be:22:89:d8:cd:65:47:10:c5:81:50:0e:c7:da:3d: 5c:44:76:e5:75:0d:13:a0:25:78:1d:dd:4b:c8:e9: 9a:51:cd:98:4b:d2:be:01:20:8d:9d:ca:ee:f6:9d: b6:55:3a:c6:29:ea:91:7f:85:e5:d7:93:d2:24:f6: b0:3d:6e:80:f6:c0:b6:f1:38:47:ea:8d:6d:d2:88: 7b:09:0d:e8:6b:7c:80:dd:7d:80:ad:bd:db:1c:3f: 81:57:9b:b7:f4:97:c5:bf:48:43:45:95:9e:6f:fe: a8:b5:34:08:3f:87:b2:ac:e4:ae:78:08:06:fe:ed: 98:41:bf:94:ce:f5:ea:a1:33:59:94:da:b9:0d:4d: 7c:c4:2b:70:28:dd:af:f5:c1:3c:d7:89:f5:32:e5: 11:4e:fd:3d:33:8d:b4:2b:1d:d0:c3:a2:06:ae:d7: 52:89:76:68:5a:20:45:1f:0d:aa:3d:17:09:a7:60: 9a:c2:c2:69:a6:00:fb:86:60:2c:ee:9f:6e:61:59: 6a:46:9b:3d:c7:3a:d7:fa:a0:05:68:1f:e7:39:f6: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:51:7F:3D:00:D4:BF:ED:BC:2A:66:F1:58:F5:CA:78:B4:F8:ED X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7f:62:17:bb:50:55:9d:eb:f7:0a:0d:ac:0d:3d:8a:98:89: e2:22:fd:8d:02:0c:e6:b9:ff:f7:c0:fe:69:aa:0e:96:30:ea: 30:6c:c5:a5:96:82:ce:8c:db:aa:e3:74:1c:51:64:db:8a:2e: 9b:df:a0:5d:84:b6:5c:fb:56:1b:14:08:08:71:87:d3:49:3d: 38:13:04:61:b8:5c:04:c9:55:5c:85:bc:44:d3:f2:ce:d8:d9: 01:7f:9f:e9:9f:26:8d:7d:db:74:cb:80:5d:e3:b1:45:82:f3: 58:d7:30:b6:dc:cc:25:9e:87:28:5f:6e:0d:41:c0:ca:ee:ee: 60:91:c2:51:73:38:2e:ec:c5:47:f1:15:9c:05:34:ce:a4:fc: ad:bd:19:73:37:9f:09:62:7d:89:a2:a5:8c:a9:c9:dc:10:d2: 90:b0:d1:87:54:bf:95:fc:78:e6:ed:92:e9:2d:6a:e5:a0:39: 08:b3:b0:e7:9c:e6:49:0f:bb:04:f9:db:66:d5:1d:de:d7:9e: 36:51:bd:21:0c:66:82:bb:ac:84:da:06:01:f1:ce:24:09:66: 9a:64:9c:27:87:7d:fb:e4:7b:9d:2e:15:96:a4:63:c0:97:ea: 3a:f0:59:49:15:a1:42:5b:e2:0b:af:8a:7c:c3:7c:1a:ae:73: 23:53:f1:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwOTA1MDEzMjI5WhcNMjUwOTEyMDEzMjI5WjAYMRYwFAYD VQQDEw02OGJhM2RhZS1jZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD+psONa7gxGW6Zue9edbkr7YHeMCrzFu7KIJV+Z9LJ7m9/VcXvQd75fA2u+ IonYzWVHEMWBUA7H2j1cRHbldQ0ToCV4Hd1LyOmaUc2YS9K+ASCNncru9p22VTrG KeqRf4Xl15PSJPawPW6A9sC28ThH6o1t0oh7CQ3oa3yA3X2Arb3bHD+BV5u39JfF v0hDRZWeb/6otTQIP4eyrOSueAgG/u2YQb+UzvXqoTNZlNq5DU18xCtwKN2v9cE8 14n1MuURTv09M420Kx3Qw6IGrtdSiXZoWiBFHw2qPRcJp2CawsJppgD7hmAs7p9u YVlqRps9xzrX+qAFaB/nOfZCpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0AUX89 ANS/7bwqZvFY9cp4tPjtMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsf2IXu1BVnev3Cg2sDT2KmIniIv2NAgzmuf/3wP5pqg6WMOowbMWl loLOjNuq43QcUWTbii6b36BdhLZc+1YbFAgIcYfTST04EwRhuFwEyVVchbxE0/LO 2NkBf5/pnyaNfdt0y4Bd47FFgvNY1zC23MwlnocoX24NQcDK7u5gkcJRczgu7MVH 8RWcBTTOpPytvRlzN58JYn2JoqWMqcncENKQsNGHVL+V/Hjm7ZLpLWrloDkIs7Dn nOZJD7sE+dtm1R3e1542Ub0hDGaCu6yE2gYB8c4kCWaaZJwnh3375HudLhWWpGPA l+o68FlJFaFCW+ILr4p8w3warnMjU/FM -----END CERTIFICATE-----Generated at Sat Sep 6 15:09:07 2025 by rpki-client