$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: vM1zobxMS2x4XZuQbYJXiUMIVIE3TC+SzFI/jaeIOCU= Subject key identifier: AB:75:16:41:99:44:4E:96:C3:14:8F:46:07:16:B9:DF:0D:B6:08:2A Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 4A Signing time: Sat 19 Jul 2025 07:37:09 +0000 Manifest this update: Sat 19 Jul 2025 07:37:08 +0000 Manifest next update: Sat 26 Jul 2025 07:37:08 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: T3t3pwp+JtoqEhmRFw4wy6dMWYNelvzqHZZp33peTg8=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Jul 19 07:37:08 2025 GMT Not After : Jul 26 07:37:08 2025 GMT Subject: CN=687b4b25-1ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:b3:55:8f:50:f3:2d:93:8f:fe:58:bc:c2: bc:73:de:97:34:51:2c:d2:50:8d:e6:e7:82:eb:94: eb:e8:9a:0f:57:f3:0e:75:4c:6f:e9:0f:8a:e8:5a: 24:0a:38:7a:5f:c4:9e:33:1e:9a:e2:65:b1:38:41: 28:e6:c7:40:d0:e7:07:d6:33:58:5b:24:e2:c5:f0: c7:92:b3:1c:03:d2:a5:e7:67:bd:1d:d9:dc:71:3c: 73:f2:e7:bf:42:f7:df:93:47:21:21:50:b5:1f:53: 73:48:93:3a:eb:e1:56:9d:c3:93:d0:3a:10:17:55: 8c:60:c1:d1:46:b7:28:43:78:49:fd:8e:89:7a:1c: c7:f3:6e:6b:ef:15:bf:71:87:29:d7:de:a1:c0:bc: b5:0a:33:f9:7c:25:2b:b9:5c:dd:9f:52:6a:b4:ab: 64:b0:1a:a4:8a:c9:6e:65:74:17:2a:ea:39:46:1b: b1:df:30:2b:cb:05:1b:66:c3:81:23:72:18:a3:1b: 65:ee:6c:5c:ba:1a:c1:c7:b0:90:4a:be:1a:ac:6f: ea:f4:8f:ca:e5:e3:ee:60:97:2c:8c:19:76:fe:6a: 66:c1:99:c2:04:ff:3e:7a:e7:85:ed:47:d6:e4:8c: 7a:93:22:34:52:83:b1:39:c1:7a:09:7b:58:f0:d6: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:16:41:99:44:4E:96:C3:14:8F:46:07:16:B9:DF:0D:B6:08:2A X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:05:a2:31:de:0c:67:ea:a2:59:e2:bc:8d:e7:d9:90:e6:a5: aa:0c:64:d0:80:16:f9:4f:78:d1:1f:0e:17:20:d7:10:4e:33: 98:26:c9:1a:06:b0:b5:8e:fc:ec:9e:62:e1:6e:dc:41:d9:60: 24:d8:36:4e:5b:3d:b9:f5:80:37:7a:68:00:32:ae:47:1d:59: 19:2c:fa:7d:f1:b0:d4:dd:0f:91:2d:91:c7:bd:2a:12:3f:40: 0b:47:f6:67:c1:8d:f4:2b:27:2b:a3:bd:72:3d:3d:d4:d1:80: 6b:a5:08:6f:9b:95:ff:f7:a9:54:43:58:d2:5b:59:f4:a5:98: ae:2b:de:f2:c3:a7:32:98:a7:0b:77:55:ae:9b:fb:af:02:5b: da:6b:10:76:f1:a3:2d:b7:f0:1b:1b:a2:81:ed:8c:dc:07:a4: 66:11:01:4f:32:da:28:54:47:10:68:56:ff:ae:13:ea:70:14: 2c:5e:b8:e7:8d:b2:4b:1b:9d:6d:be:1f:91:9a:48:bc:28:b7: a3:90:1f:9a:34:6a:bd:60:86:36:5a:ad:de:98:cb:a4:68:66: 77:90:fa:db:78:06:8e:5d:63:bb:53:a4:8d:97:bc:30:51:41: 61:87:79:6c:df:97:2d:34:6b:25:3e:45:24:5c:6a:c9:8e:09: 81:91:85:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTA3MTkwNzM3MDhaFw0yNTA3MjYwNzM3MDhaMBgxFjAUBgNV BAMTDTY4N2I0YjI1LTFlZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdwrNVj1DzLZOP/li8wrxz3pc0USzSUI3m54LrlOvomg9X8w51TG/pD4roWiQK OHpfxJ4zHpriZbE4QSjmx0DQ5wfWM1hbJOLF8MeSsxwD0qXnZ70d2dxxPHPy579C 99+TRyEhULUfU3NIkzrr4Vadw5PQOhAXVYxgwdFGtyhDeEn9jol6HMfzbmvvFb9x hynX3qHAvLUKM/l8JSu5XN2fUmq0q2SwGqSKyW5ldBcq6jlGG7HfMCvLBRtmw4Ej chijG2XubFy6GsHHsJBKvhqsb+r0j8rl4+5glyyMGXb+ambBmcIE/z5654XtR9bk jHqTIjRSg7E5wXoJe1jw1p8VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq3UWQZlE TpbDFI9GBxa53w22CCowHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3 SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgFojHeDGfqolnivI3n2ZDmpaoMZNCAFvlPeNEfDhcg1xBOM5gmyRoG sLWO/OyeYuFu3EHZYCTYNk5bPbn1gDd6aAAyrkcdWRks+n3xsNTdD5Etkce9KhI/ QAtH9mfBjfQrJyujvXI9PdTRgGulCG+blf/3qVRDWNJbWfSlmK4r3vLDpzKYpwt3 Va6b+68CW9prEHbxoy238BsbooHtjNwHpGYRAU8y2ihURxBoVv+uE+pwFCxeuOeN sksbnW2+H5GaSLwot6OQH5o0ar1ghjZard6Yy6RoZneQ+tt4Bo5dY7tTpI2XvDBR QWGHeWzfly00ayU+RSRcasmOCYGRhck= -----END CERTIFICATE-----Generated at Sun Jul 20 21:57:22 2025 by rpki-client