$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: GcV+n15yRtdXGlphrL7vKpJDvl6vR3AnE36j1EcilDM= Subject key identifier: 04:9E:31:BB:41:B9:F4:3D:E0:79:6C:73:E3:B3:9A:42:D5:9E:48:49 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 45 Signing time: Wed 09 Jul 2025 08:22:16 +0000 Manifest this update: Wed 09 Jul 2025 08:22:15 +0000 Manifest next update: Wed 16 Jul 2025 08:22:15 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: 1t+LD3y3RT632wPmtcWEpSAUN9VQC3l4tGeSvIVnAow=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Jul 2025 08:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Jul 9 08:22:15 2025 GMT Not After : Jul 16 08:22:15 2025 GMT Subject: CN=686e26b8-f5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:2f:27:58:63:79:3c:7a:f9:9d:40:a3:7f: af:3a:24:34:73:14:28:c4:67:3b:e7:4b:e1:37:8b: 6f:dd:a6:22:74:8f:f8:b2:84:fb:65:cc:fe:31:f1: a7:52:bb:5f:fc:df:d5:af:48:01:9a:aa:23:19:b6: 07:ac:72:17:d5:87:ea:92:28:59:6f:3e:6b:6c:65: a7:67:5f:a3:69:2a:6a:a0:10:fc:9e:98:d1:75:4e: 17:e6:d2:e9:89:0d:7c:df:54:03:e0:c3:04:c9:78: 2e:2e:bf:01:b2:37:ec:c4:79:24:46:7c:8e:ea:b4: 31:2f:97:e9:e5:f5:82:ce:c0:a7:36:3e:19:15:98: d5:51:30:3a:88:3b:95:37:39:d5:fc:87:d8:fc:5a: ec:27:45:76:e8:b6:13:a1:f6:5c:79:c9:7c:e7:fb: 51:5e:02:18:39:3b:7a:86:af:fb:e3:d1:a0:dd:d4: 40:18:67:2e:25:41:d6:16:99:1d:42:05:91:ab:7f: b8:14:06:76:a7:3b:09:f0:39:e7:52:2f:0a:df:71: c8:32:3b:f3:0b:88:1f:c9:0c:b4:a7:38:9e:6a:15: 5a:de:98:69:2c:03:23:d8:91:a9:a9:68:ab:15:a6: fd:ae:22:78:07:d8:87:b1:dd:ef:3d:5e:5e:44:4b: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:31:BB:41:B9:F4:3D:E0:79:6C:73:E3:B3:9A:42:D5:9E:48:49 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ca:3c:47:1b:98:0b:0d:14:61:2c:7f:6b:62:5a:58:8f:93: 87:da:ac:18:7c:8f:28:c5:45:04:e6:5d:70:2b:59:c9:1b:3b: c5:f5:78:55:9f:fa:92:56:b2:f2:0b:46:9d:1b:47:f5:9a:06: d8:76:81:ff:21:7a:fe:1e:20:5c:f5:56:78:2d:81:12:0a:17: 3d:e6:37:3b:42:eb:2b:c4:4f:c9:62:91:e3:98:2c:dd:d8:07: a8:92:52:8d:ae:08:22:dd:35:60:72:2d:1d:7f:dd:a2:85:d8: 6b:b2:69:cc:48:45:b2:8a:5b:ef:cf:13:e6:fd:e3:3f:4f:d9: d0:54:75:da:3e:00:55:81:71:db:a8:95:c5:c9:c7:91:43:cd: bc:49:61:db:e3:69:5f:dd:12:8c:37:47:7d:b3:2e:d6:92:cd: 85:d7:70:08:54:f1:ae:c3:fc:2f:4c:48:f0:57:8f:9e:2a:5b: ba:ff:58:5f:21:b6:8a:82:f3:03:55:27:d7:ec:5a:a7:32:5b: 34:2e:42:24:64:1b:b6:f5:82:d4:75:d0:e7:1c:fa:e1:16:d5: e0:78:1f:fb:cb:15:bf:1f:7d:44:5a:a5:ed:c2:2f:7e:bf:5f: ca:47:37:e7:a2:bb:6e:2f:a7:5a:07:0f:8b:8b:61:87:1b:53: c9:8b:36:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTA3MDkwODIyMTVaFw0yNTA3MTYwODIyMTVaMBgxFjAUBgNV BAMTDTY4NmUyNmI4LWY1YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvIC8nWGN5PHr5nUCjf686JDRzFCjEZzvnS+E3i2/dpiJ0j/iyhPtlzP4x8adS u1/839WvSAGaqiMZtgeschfVh+qSKFlvPmtsZadnX6NpKmqgEPyemNF1Thfm0umJ DXzfVAPgwwTJeC4uvwGyN+zEeSRGfI7qtDEvl+nl9YLOwKc2PhkVmNVRMDqIO5U3 OdX8h9j8WuwnRXbothOh9lx5yXzn+1FeAhg5O3qGr/vj0aDd1EAYZy4lQdYWmR1C BZGrf7gUBnanOwnwOedSLwrfccgyO/MLiB/JDLSnOJ5qFVremGksAyPYkampaKsV pv2uIngH2Iex3e89Xl5ES23VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBJ4xu0G5 9D3geWxz47OaQtWeSEkwHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3 SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGDKPEcbmAsNFGEsf2tiWliPk4farBh8jyjFRQTmXXArWckbO8X1eFWf +pJWsvILRp0bR/WaBth2gf8hev4eIFz1VngtgRIKFz3mNztC6yvET8likeOYLN3Y B6iSUo2uCCLdNWByLR1/3aKF2GuyacxIRbKKW+/PE+b94z9P2dBUddo+AFWBcduo lcXJx5FDzbxJYdvjaV/dEow3R32zLtaSzYXXcAhU8a7D/C9MSPBXj54qW7r/WF8h toqC8wNVJ9fsWqcyWzQuQiRkG7b1gtR10Occ+uEW1eB4H/vLFb8ffURape3CL36/ X8pHN+eiu24vp1oHD4uLYYcbU8mLNoY= -----END CERTIFICATE-----Generated at Wed Jul 9 10:01:07 2025 by rpki-client