$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: kUT30SIvLHQ3vm42HBS09UyTIsK12YllqVGR1udSYj0= Subject key identifier: 3D:76:66:C3:2E:FF:64:F8:5C:9F:2F:FF:68:13:95:F0:21:FF:70:31 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 117F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 116B Signing time: Sun 24 Aug 2025 17:12:24 +0000 Manifest this update: Sun 24 Aug 2025 17:12:24 +0000 Manifest next update: Sun 31 Aug 2025 17:12:23 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: l6reGv8RSqBSr34/C/CEiTeu5gh1KghlGzfErlk8BkM=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4479 (0x117f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Aug 24 17:12:24 2025 GMT Not After : Aug 31 17:12:23 2025 GMT Subject: CN=68ab47f8-93c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:ec:37:3a:f9:1f:72:db:ee:28:f6:4e:9e: b3:d4:00:11:3b:ed:33:eb:ab:94:9a:e8:72:1f:ad: 87:41:66:5b:7f:5f:46:2f:fb:b6:b4:ca:40:09:71: 80:0f:d2:2d:05:b4:a7:62:b1:3d:91:d8:61:6f:d8: 45:bc:e2:bc:68:85:85:1f:3f:ba:df:ec:f4:a2:b4: cc:6e:84:6c:b1:31:0a:02:1d:f2:c3:a6:73:0c:17: 57:25:95:4d:34:55:d6:9a:61:84:4d:c0:0f:d7:8a: 74:81:bb:52:62:6b:1a:92:26:4c:34:94:0e:b4:64: 00:d6:b8:9e:41:89:b7:f7:df:0f:60:dd:1c:b6:93: d3:96:98:d4:64:a9:49:83:fb:b8:aa:07:56:b4:8b: d2:44:11:07:a1:a0:dd:62:08:29:4d:63:4b:de:07: f8:b2:9a:f0:eb:3a:c4:c0:2f:69:5f:74:28:4e:8f: cf:f6:eb:99:b5:c1:4f:e1:d3:8b:88:93:4d:87:d0: fe:b7:8a:64:39:f5:4b:92:17:69:d3:28:52:dd:b1: 2e:e9:6d:f0:1c:cd:56:1d:07:59:79:09:52:a1:b6: 97:d5:67:ce:06:69:a5:5c:61:51:8d:d0:3b:6d:e4: ca:7b:39:66:65:d9:6d:a2:47:cd:3d:68:37:29:dc: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:76:66:C3:2E:FF:64:F8:5C:9F:2F:FF:68:13:95:F0:21:FF:70:31 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:91:d0:34:ec:8d:07:77:3e:11:b0:92:57:ad:5a:21:1c: 93:e8:48:ba:5c:00:14:85:55:f7:08:7b:54:10:63:21:b3:07: 9f:9e:d1:43:07:d9:ba:58:98:6a:cc:78:f2:61:50:26:e1:b8: d9:ca:a5:8b:b3:36:4c:4f:9f:85:36:1b:7b:7d:34:30:08:26: bd:a7:6f:9b:08:01:9f:d3:a2:61:3c:45:d5:3c:67:b6:2d:3b: ff:5b:36:d8:9e:20:63:7c:45:31:11:0e:5f:bf:2a:3c:76:bf: a0:08:15:48:17:10:cf:55:77:6b:25:88:24:f9:b3:16:52:8a: 8a:8a:00:1a:a8:79:78:57:c0:57:ab:25:07:78:82:d8:25:a6: a8:61:06:cc:16:9f:d4:5a:08:7a:52:13:e5:e8:12:31:0a:e8: 59:ea:af:8f:74:10:c2:e6:27:eb:e2:45:a9:1d:66:a4:05:d6: 91:8d:45:4d:5a:33:72:3f:db:f5:bd:1a:72:53:cc:d3:16:c0: 7c:c8:7a:f9:ab:43:a8:55:71:08:9b:f3:66:d4:f6:51:bc:28: 2e:4f:e7:a3:4c:61:af:f7:7f:90:c5:9f:e4:2a:8c:73:f4:a2: db:56:a0:7e:da:04:3c:70:59:8f:fe:3f:98:4a:12:c3:76:9e: 8b:08:2b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUwODI0MTcxMjI0WhcNMjUwODMxMTcxMjIzWjAYMRYwFAYD VQQDEw02OGFiNDdmOC05M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRPsNzr5H3Lb7ij2Tp6z1AARO+0z66uUmuhyH62HQWZbf19GL/u2tMpACXGA D9ItBbSnYrE9kdhhb9hFvOK8aIWFHz+63+z0orTMboRssTEKAh3yw6ZzDBdXJZVN NFXWmmGETcAP14p0gbtSYmsakiZMNJQOtGQA1rieQYm3998PYN0ctpPTlpjUZKlJ g/u4qgdWtIvSRBEHoaDdYggpTWNL3gf4sprw6zrEwC9pX3QoTo/P9uuZtcFP4dOL iJNNh9D+t4pkOfVLkhdp0yhS3bEu6W3wHM1WHQdZeQlSobaX1WfOBmmlXGFRjdA7 beTKezlmZdltokfNPWg3Kdy60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD12ZsMu /2T4XJ8v/2gTlfAh/3AxMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWw5HQNOyNB3c+EbCSV61aIRyT6Ei6XAAUhVX3CHtUEGMhswefntFD B9m6WJhqzHjyYVAm4bjZyqWLszZMT5+FNht7fTQwCCa9p2+bCAGf06JhPEXVPGe2 LTv/WzbYniBjfEUxEQ5fvyo8dr+gCBVIFxDPVXdrJYgk+bMWUoqKigAaqHl4V8BX qyUHeILYJaaoYQbMFp/UWgh6UhPl6BIxCuhZ6q+PdBDC5ifr4kWpHWakBdaRjUVN WjNyP9v1vRpyU8zTFsB8yHr5q0OoVXEIm/Nm1PZRvCguT+ejTGGv93+QxZ/kKoxz 9KLbVqB+2gQ8cFmP/j+YShLDdp6LCCss -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:14 2025 by rpki-client