$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: E4ah4vmg+sNkH7/NxudCzVHa+eXpm13SwWh/BSwlkq8= Subject key identifier: 4B:14:21:93:86:29:8B:2D:4C:E6:03:A9:EC:14:B0:2F:41:14:F6:74 Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 0332 Signing time: Fri 19 Sep 2025 01:31:25 +0000 Manifest this update: Fri 19 Sep 2025 01:31:24 +0000 Manifest next update: Fri 26 Sep 2025 01:31:24 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: E60+INxs5Sz3F1WqqOyUWaMcIAsqE0j8slCIfQdlBKU=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: +p5cj7LwT5hXMy0c3PlvgwDnOhrwUIuzknInRNhRtuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: Sep 19 01:31:24 2025 GMT Not After : Sep 26 01:31:24 2025 GMT Subject: CN=68ccb26c-c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:fa:1c:1d:d7:04:10:dc:77:ed:ee:de:74: c9:98:56:b5:47:62:30:f5:bf:25:d5:cb:a5:b4:6b: 55:6d:e7:e3:f5:67:ff:ed:2a:87:ec:9c:fa:bd:9a: 7c:b9:68:68:ab:d5:8a:7c:6a:1f:71:47:bd:83:11: 27:34:62:16:47:57:68:ab:17:ea:08:da:4b:02:ff: c5:75:03:3e:0f:7f:b7:32:94:0d:7f:51:12:76:a1: 5d:5c:03:47:22:98:45:1e:f6:bd:c8:c7:fb:75:90: 3c:a3:d9:75:d8:f9:97:66:a5:ca:7a:b1:82:8b:39: a2:b8:13:9a:24:a5:cc:c9:86:b2:02:c9:8c:40:0e: c1:b8:9e:c7:40:e9:bd:11:23:d0:4b:ef:3b:ff:37: 24:e8:2c:26:56:eb:b6:bf:1f:c5:c8:85:b4:aa:e2: 69:a8:ac:a0:b0:d3:e5:c7:17:99:74:d4:e0:cc:15: 77:09:a9:f9:61:b7:95:3d:3c:7b:97:42:08:58:7f: 8d:79:5d:39:55:06:ca:36:70:f5:2a:01:1f:86:92: 58:d1:4f:7e:84:47:85:c2:de:36:76:a2:06:8f:2d: fa:c9:24:f2:21:a2:a3:cc:dc:72:a6:26:19:7d:9e: 94:27:86:29:b6:69:69:a4:12:9f:07:ea:b9:c9:3b: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:21:93:86:29:8B:2D:4C:E6:03:A9:EC:14:B0:2F:41:14:F6:74 X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:90:7d:29:dc:4e:32:e0:70:ab:dd:87:5d:52:00:22:66:34: 20:85:cf:37:25:cb:75:64:c4:94:cc:a5:06:7b:52:9c:73:2c: 8f:b6:7c:4c:d2:4e:0d:fe:28:a1:da:fb:f7:40:f3:0c:70:b4: f6:c2:63:31:d8:9e:f6:cc:ca:aa:54:64:08:f7:d3:22:8c:51: ac:24:f1:5d:5a:10:8a:8a:07:b1:31:55:21:0f:49:0b:a5:be: 5f:f3:74:24:43:fd:f7:fa:6d:7d:61:a0:a5:f4:82:ed:67:c5: e2:ff:8d:d9:a3:70:9e:b9:55:19:9c:1b:7d:33:4e:aa:36:fa: 80:9b:f7:cd:6c:24:cd:be:69:46:fa:ea:69:2f:c1:ae:c0:d0: 1f:40:ed:fa:fd:60:3b:e5:3e:cb:dc:3f:34:44:a2:c5:14:72: 56:62:e1:e1:45:c9:f5:13:c4:1f:62:b3:f6:25:97:a1:c2:26: 2d:60:51:d6:8b:c4:e9:af:c6:d7:07:8c:c5:76:e9:b0:d6:89: 80:23:3d:3e:c0:3b:9a:ca:12:a4:68:e9:22:88:65:ac:9f:8a: cf:e2:09:ef:3d:c4:77:89:c0:28:95:bb:82:ff:af:24:f0:29: f0:d3:ec:c4:0a:47:46:b7:2f:c9:40:c3:4c:bd:76:05:3e:5c: fa:60:02:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjUwOTE5MDEzMTI0WhcNMjUwOTI2MDEzMTI0WjAYMRYwFAYD VQQDEw02OGNjYjI2Yy1jNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhv6HB3XBBDcd+3u3nTJmFa1R2Iw9b8l1cultGtVbefj9Wf/7SqH7Jz6vZp8 uWhoq9WKfGofcUe9gxEnNGIWR1doqxfqCNpLAv/FdQM+D3+3MpQNf1ESdqFdXANH IphFHva9yMf7dZA8o9l12PmXZqXKerGCizmiuBOaJKXMyYayAsmMQA7BuJ7HQOm9 ESPQS+87/zck6CwmVuu2vx/FyIW0quJpqKygsNPlxxeZdNTgzBV3Can5YbeVPTx7 l0IIWH+NeV05VQbKNnD1KgEfhpJY0U9+hEeFwt42dqIGjy36ySTyIaKjzNxypiYZ fZ6UJ4YptmlppBKfB+q5yTtWiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsUIZOG KYstTOYDqewUsC9BFPZ0MB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpkH0p3E4y4HCr3YddUgAiZjQghc83Jct1ZMSUzKUGe1KccyyPtnxM 0k4N/iih2vv3QPMMcLT2wmMx2J72zMqqVGQI99MijFGsJPFdWhCKigexMVUhD0kL pb5f83QkQ/33+m19YaCl9ILtZ8Xi/43Zo3CeuVUZnBt9M06qNvqAm/fNbCTNvmlG +uppL8GuwNAfQO36/WA75T7L3D80RKLFFHJWYuHhRcn1E8QfYrP2JZehwiYtYFHW i8Tpr8bXB4zFdumw1omAIz0+wDuayhKkaOkiiGWsn4rP4gnvPcR3icAolbuC/68k 8Cnw0+zECkdGty/JQMNMvXYFPlz6YAJh -----END CERTIFICATE-----Generated at Fri Sep 19 14:00:06 2025 by rpki-client