$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: 2cAZZXh9qvNEwl/3WVU1CPUcKhpKjVTetoEc/gs7j4g= Subject key identifier: 42:3E:27:1F:3A:93:FB:44:00:22:1B:5B:D3:3D:A4:36:57:0F:03:EB Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 0104 Signing time: Sun 07 Sep 2025 05:38:01 +0000 Manifest this update: Sun 07 Sep 2025 05:38:00 +0000 Manifest next update: Sun 14 Sep 2025 05:38:00 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: DJ5LImJ8TYDL7+Kfq2SekSv3fWqUEOZTQ+pS3Q+SYgg=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Sep 7 05:38:00 2025 GMT Not After : Sep 14 05:38:00 2025 GMT Subject: CN=68bd1a39-82ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:a3:3d:63:de:b8:39:9a:ef:b2:7e:e4:0b: de:ef:9a:85:8e:dd:81:f1:c6:51:b1:90:ce:87:f4: 99:1e:1a:51:57:4a:5d:2d:f2:64:63:a1:22:76:8d: 03:9f:fb:36:ab:3a:d6:c9:fb:3b:1f:aa:b3:c3:82: a8:a1:d9:40:99:d9:29:4e:44:d9:db:34:41:d8:fd: 96:7f:c2:1e:b5:2f:0c:7e:23:5c:28:e2:43:ec:47: 17:f2:65:c1:4f:20:fb:40:c3:37:ae:23:47:e1:b7: 0d:16:24:3e:09:d3:0c:6f:10:8a:5e:5c:a6:89:ab: 70:0c:5f:86:99:90:ac:6c:74:c8:32:a9:dd:22:88: a5:ad:7a:04:61:06:86:7d:d7:ed:27:03:1b:23:e2: 5f:9d:7a:44:b9:85:85:53:1f:7c:72:73:bb:d2:08: 6f:96:5b:32:3b:df:11:76:8f:55:8b:40:dd:79:b6: 5a:25:6b:2a:ef:8c:e7:37:33:5e:e5:62:cd:b3:25: 30:d0:e8:4a:29:3b:bc:47:1c:61:a7:6a:fb:7b:99: b2:51:c7:bd:20:a3:ab:ad:99:aa:81:77:50:fd:d3: 0c:8b:c8:06:7d:33:f9:41:af:fb:65:20:ed:9b:2e: 31:87:a3:4a:10:e0:3f:fb:94:3c:92:65:6c:8a:e6: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:27:1F:3A:93:FB:44:00:22:1B:5B:D3:3D:A4:36:57:0F:03:EB X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:12:6f:42:fc:ca:b4:4d:ce:aa:2b:b4:02:67:67:4c:22:0e: 37:80:56:e6:56:9e:bd:46:08:f0:24:3d:e8:13:20:02:e2:cf: 83:cc:55:0a:72:22:79:12:81:38:da:3a:48:27:b7:4d:5e:2a: ea:9e:da:b7:68:eb:1e:ae:c6:83:16:c2:fb:dc:0d:0e:16:b6: c5:97:72:66:a2:60:c5:7d:0a:02:55:d1:dd:88:1f:19:7e:53: dd:14:64:61:a4:8f:53:41:75:28:42:d4:a5:7e:14:66:2f:cd: e4:c2:fd:58:3f:c9:8a:c5:a8:fa:85:2f:be:9e:64:7c:ef:2a: 98:9c:f5:b6:5a:ba:1c:68:25:04:b2:2b:19:1c:80:b7:ab:f0: 33:58:60:39:7b:b3:3a:c1:f5:d7:9e:37:51:ba:63:96:0e:4c: 5b:42:f3:55:1f:82:7b:11:d7:3e:90:44:67:1b:29:a0:d5:45: fd:ae:01:80:e4:5e:eb:c7:73:1b:2c:ce:15:27:b4:d5:8c:6f: 5d:ff:d2:ed:b5:64:ef:d5:fa:b4:03:f4:92:21:74:19:12:ff: 6f:6f:f5:79:f9:cb:17:49:35:aa:78:cc:5a:3d:7c:16:98:e6: ae:5b:79:29:6e:57:3e:50:d6:c0:40:df:dc:a8:98:f0:1d:11: 50:7f:f9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwOTA3MDUzODAwWhcNMjUwOTE0MDUzODAwWjAYMRYwFAYD VQQDEw02OGJkMWEzOS04MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCujPWPeuDma77J+5Ave75qFjt2B8cZRsZDOh/SZHhpRV0pdLfJkY6Eido0D n/s2qzrWyfs7H6qzw4KoodlAmdkpTkTZ2zRB2P2Wf8IetS8MfiNcKOJD7EcX8mXB TyD7QMM3riNH4bcNFiQ+CdMMbxCKXlymiatwDF+GmZCsbHTIMqndIoilrXoEYQaG fdftJwMbI+JfnXpEuYWFUx98cnO70ghvllsyO98Rdo9Vi0DdebZaJWsq74znNzNe 5WLNsyUw0OhKKTu8Rxxhp2r7e5myUce9IKOrrZmqgXdQ/dMMi8gGfTP5Qa/7ZSDt my4xh6NKEOA/+5Q8kmVsiuZTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI+Jx86 k/tEACIbW9M9pDZXDwPrMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Em9C/Mq0Tc6qK7QCZ2dMIg43gFbmVp69RgjwJD3oEyAC4s+DzFUK ciJ5EoE42jpIJ7dNXirqntq3aOsersaDFsL73A0OFrbFl3JmomDFfQoCVdHdiB8Z flPdFGRhpI9TQXUoQtSlfhRmL83kwv1YP8mKxaj6hS++nmR87yqYnPW2WrocaCUE sisZHIC3q/AzWGA5e7M6wfXXnjdRumOWDkxbQvNVH4J7Edc+kERnGymg1UX9rgGA 5F7rx3MbLM4VJ7TVjG9d/9LttWTv1fq0A/SSIXQZEv9vb/V5+csXSTWqeMxaPXwW mOauW3kpblc+UNbAQN/cqJjwHRFQf/m+ -----END CERTIFICATE-----Generated at Sun Sep 7 14:28:12 2025 by rpki-client