$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: jMRydVR4TrywKGQYZPUW3mxpQgVQrsEpUlzwfYQFr5M= Subject key identifier: 82:92:1E:DE:4B:13:A0:18:37:D7:AE:E2:38:41:E2:93:71:67:22:DF Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 11 Signing time: Fri 05 Sep 2025 08:33:01 +0000 Manifest this update: Fri 05 Sep 2025 08:33:00 +0000 Manifest next update: Fri 12 Sep 2025 08:33:00 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: q9Io9Ji6IHb9FkTg/dYa1dI7vyHhHHD2NxtBz7aTK08=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Sep 5 08:33:00 2025 GMT Not After : Sep 12 08:33:00 2025 GMT Subject: CN=68baa03c-ba3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:ae:7c:1d:65:6d:0b:54:af:e2:bc:8b:8a: 92:c9:05:35:59:a7:4c:c9:e0:6a:8e:7a:07:cc:c0: 1c:8c:65:e8:d2:14:10:bb:61:f9:ef:07:59:07:26: 02:ba:f8:ab:10:4b:c9:18:c3:1c:b5:2a:be:4f:32: 67:49:3a:42:37:18:4f:51:64:ef:df:59:c3:1c:d9: 77:fa:1a:06:39:1c:3c:0e:62:f8:2d:5a:60:0d:f1: 9b:e7:60:c1:35:b6:fc:5e:5e:e1:75:f4:62:0c:c3: ae:cf:7b:8d:21:ce:b6:ff:3a:19:5b:73:d2:85:89: f0:ec:6d:e0:c4:6a:ca:b1:ec:32:95:81:76:9f:5e: b4:5a:15:b2:eb:f4:ac:b2:e9:f5:fa:4f:fb:64:2c: 2b:f8:f9:41:3e:49:f0:fb:17:e5:b6:ea:3c:be:06: da:9c:14:c0:7b:6a:e5:48:38:1e:b3:40:76:48:4f: 17:6d:bc:cd:25:05:99:d6:f7:69:15:60:53:fe:d4: 11:97:4a:7e:93:dc:1d:bc:a1:a3:e0:98:b4:ea:33: ac:26:91:a5:07:3d:ea:c6:e0:d1:0d:f1:c3:10:39: 0f:3e:ee:bf:9b:13:d9:36:de:bc:a8:c7:21:ff:23: f2:fe:33:72:04:f5:cb:10:7e:da:5c:a2:64:63:60: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:92:1E:DE:4B:13:A0:18:37:D7:AE:E2:38:41:E2:93:71:67:22:DF X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:c1:ec:97:00:6a:a8:16:a5:a5:3a:21:b1:a0:71:15:49: 18:eb:cd:06:8f:27:61:7b:06:b9:5b:86:69:94:46:31:0b:ac: 6a:e0:16:77:b4:fb:0e:71:a7:04:0f:29:f5:12:6c:26:ec:d0: 37:62:35:55:10:8d:cf:02:e4:d8:bf:57:75:c5:c8:68:c9:a1: 4f:b7:63:a8:74:49:71:b1:64:74:12:be:cd:e3:cf:7f:b0:c1: b4:1a:0f:e9:de:24:95:2f:c8:0f:de:26:de:39:ad:49:3c:a5: f3:dd:08:74:6d:ca:84:59:49:f1:f8:42:b0:1f:9c:88:94:24: 7d:03:ec:14:be:c4:39:11:e0:ef:e4:cc:5e:4b:f5:e1:32:81: 79:05:c3:0a:52:ed:21:df:4d:09:05:e8:13:f9:5c:a4:d2:95: 90:61:ee:8f:38:4b:84:3d:4e:39:a1:e5:4f:7a:cc:53:33:22: 71:de:b5:65:2c:04:92:c7:32:18:e4:df:45:fc:db:f4:1d:af: bf:a3:69:a0:9a:d5:e8:6b:07:81:1d:bf:85:53:34:96:bf:c7: 6b:8d:cf:65:2a:63:c7:33:07:ba:46:79:32:d3:5d:a1:83:10: 1b:e7:80:45:de:d6:76:bd:e4:96:cd:12:62:4b:79:95:eb:8f: 1d:10:fa:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNTA5MDUwODMzMDBaFw0yNTA5MTIwODMzMDBaMBgxFjAUBgNV BAMTDTY4YmFhMDNjLWJhM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmGK58HWVtC1Sv4ryLipLJBTVZp0zJ4GqOegfMwByMZejSFBC7YfnvB1kHJgK6 +KsQS8kYwxy1Kr5PMmdJOkI3GE9RZO/fWcMc2Xf6GgY5HDwOYvgtWmAN8ZvnYME1 tvxeXuF19GIMw67Pe40hzrb/Ohlbc9KFifDsbeDEasqx7DKVgXafXrRaFbLr9Kyy 6fX6T/tkLCv4+UE+SfD7F+W26jy+BtqcFMB7auVIOB6zQHZITxdtvM0lBZnW92kV YFP+1BGXSn6T3B28oaPgmLTqM6wmkaUHPerG4NEN8cMQOQ8+7r+bE9k23ryoxyH/ I/L+M3IE9csQftpcomRjYJSBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgpIe3ksT oBg3167iOEHik3FnIt8wHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIdJweyXAGqoFqWlOiGxoHEVSRjrzQaPJ2F7BrlbhmmURjELrGrgFne0 +w5xpwQPKfUSbCbs0DdiNVUQjc8C5Ni/V3XFyGjJoU+3Y6h0SXGxZHQSvs3jz3+w wbQaD+neJJUvyA/eJt45rUk8pfPdCHRtyoRZSfH4QrAfnIiUJH0D7BS+xDkR4O/k zF5L9eEygXkFwwpS7SHfTQkF6BP5XKTSlZBh7o84S4Q9Tjmh5U96zFMzInHetWUs BJLHMhjk30X82/Qdr7+jaaCa1ehrB4Edv4VTNJa/x2uNz2UqY8czB7pGeTLTXaGD EBvngEXe1na95JbNEmJLeZXrjx0Q+lk= -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:28 2025 by rpki-client