$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: smBIpZbxTBXtwVH5da3XZSJIWkKpGTKuUlRFuwuelkY= Subject key identifier: 85:22:50:49:27:D5:21:E8:1C:09:72:BE:07:F3:C2:F8:DD:F7:64:32 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 284A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 2845 Signing time: Wed 20 Aug 2025 15:39:16 +0000 Manifest this update: Wed 20 Aug 2025 15:39:16 +0000 Manifest next update: Wed 27 Aug 2025 15:39:16 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: oyqbeV0i5IQvgd9St8pKGLa2S5BD0tRjRGRmYCFPYyc=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10314 (0x284a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Aug 20 15:39:16 2025 GMT Not After : Aug 27 15:39:16 2025 GMT Subject: CN=68a5ec24-6846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:47:01:84:a4:c8:e0:9b:68:0a:09:1f:6c: 69:04:45:f5:45:54:34:79:46:5b:29:dd:92:9d:d9: c3:76:18:8c:9b:5b:bb:71:3e:fc:80:83:d1:c2:7b: 3c:ff:09:14:cb:1f:91:ba:53:23:7b:be:85:3a:42: 97:d9:2b:28:c3:bd:48:56:f2:47:c8:15:37:c1:c3: 93:4c:52:5a:16:bc:de:a7:32:3a:56:1e:6f:41:b7: 2c:06:9e:41:9b:fb:c9:5e:94:8e:d4:ed:80:27:72: 92:e1:90:df:d6:f4:42:d6:f7:42:f9:f9:88:24:af: d3:9b:d6:73:a9:c1:d7:8e:03:9a:2d:4a:3c:24:ff: 2a:be:9b:ce:13:d6:8e:0a:7d:5d:e2:70:0d:76:01: db:c2:af:b3:6c:c9:6b:b4:b0:b1:8a:8f:77:c9:ed: 54:02:fe:af:b5:4d:a2:9e:8a:16:7a:b9:a1:fe:85: 04:c8:fc:5c:8b:2d:3c:19:21:2c:ad:63:8a:27:32: e2:64:3b:85:23:ac:dc:2d:28:57:a7:a9:e8:5d:d9: ff:d6:94:64:a0:ea:18:0e:7e:28:86:6b:33:76:23: 86:33:f1:30:83:f9:32:34:ad:e5:e5:5f:06:f1:f2: 37:87:c7:80:8d:65:a0:22:ef:dd:de:26:69:85:f2: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:50:49:27:D5:21:E8:1C:09:72:BE:07:F3:C2:F8:DD:F7:64:32 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7b:74:f8:c4:8e:82:ae:a8:6b:67:af:9c:37:40:cd:8c:09: 76:cc:07:df:d5:e6:9d:0b:98:f6:50:21:44:d5:2f:8b:76:f2: cc:53:5d:c9:3b:59:73:de:da:68:4c:77:ce:d9:80:7e:08:28: 5d:87:d4:26:d1:4f:3b:9b:0b:bd:cc:f6:68:e0:ee:50:83:33: 10:64:2a:8f:a2:29:63:57:bd:39:6d:ec:da:74:c0:01:5b:05: 2a:24:40:ae:2a:26:1e:d3:8c:1f:df:ea:d4:75:68:70:33:0a: 34:c2:db:37:25:a0:50:20:ad:61:f4:1b:fa:88:56:5c:69:18: de:32:9e:e8:6b:d0:ba:4e:d5:c5:16:12:95:74:40:49:af:a6: 95:b2:9b:cf:35:61:61:33:4a:f5:d2:e2:e6:85:36:26:25:89: 0b:02:48:c1:60:92:f3:95:85:b5:b5:dc:14:8c:24:5c:64:27: 3f:9a:93:ae:01:8a:a4:50:c6:82:f6:7f:a2:e0:cd:5c:af:4e: 82:39:c4:f7:25:af:e1:3e:87:c4:db:ce:43:e3:c2:fd:8e:cb: 5a:15:6d:72:cf:7a:4b:c2:46:b2:18:17:a0:61:4b:ab:d8:9f: f8:0b:d9:2d:19:a1:40:38:2e:97:ec:f4:5f:c6:f7:02:d0:2d: e9:d0:1b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjUwODIwMTUzOTE2WhcNMjUwODI3MTUzOTE2WjAYMRYwFAYD VQQDEw02OGE1ZWMyNC02ODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowdHAYSkyOCbaAoJH2xpBEX1RVQ0eUZbKd2SndnDdhiMm1u7cT78gIPRwns8 /wkUyx+RulMje76FOkKX2Ssow71IVvJHyBU3wcOTTFJaFrzepzI6Vh5vQbcsBp5B m/vJXpSO1O2AJ3KS4ZDf1vRC1vdC+fmIJK/Tm9ZzqcHXjgOaLUo8JP8qvpvOE9aO Cn1d4nANdgHbwq+zbMlrtLCxio93ye1UAv6vtU2inooWermh/oUEyPxciy08GSEs rWOKJzLiZDuFI6zcLShXp6noXdn/1pRkoOoYDn4ohmszdiOGM/Ewg/kyNK3l5V8G 8fI3h8eAjWWgIu/d3iZphfIqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUiUEkn 1SHoHAlyvgfzwvjd92QyMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAe3T4xI6CrqhrZ6+cN0DNjAl2zAff1eadC5j2UCFE1S+LdvLMU13J O1lz3tpoTHfO2YB+CChdh9Qm0U87mwu9zPZo4O5QgzMQZCqPoiljV705bezadMAB WwUqJECuKiYe04wf3+rUdWhwMwo0wts3JaBQIK1h9Bv6iFZcaRjeMp7oa9C6TtXF FhKVdEBJr6aVspvPNWFhM0r10uLmhTYmJYkLAkjBYJLzlYW1tdwUjCRcZCc/mpOu AYqkUMaC9n+i4M1cr06COcT3Ja/hPofE285D48L9jstaFW1yz3pLwkayGBegYUur 2J/4C9ktGaFAOC6X7PRfxvcC0C3p0BtO -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client