$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: w5wtl6bKyfkz51+oWRF/LTkXaCzsJ74xloMqnopYM4k= Subject key identifier: 5C:14:BC:92:49:7D:CC:2B:DE:AA:5A:6E:DE:A1:CB:A1:6B:71:89:59 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 62 Signing time: Wed 03 Sep 2025 07:44:16 +0000 Manifest this update: Wed 03 Sep 2025 07:44:16 +0000 Manifest next update: Wed 10 Sep 2025 07:44:16 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: JxBesOWJ5psc4p6oFuZ84RTuDndApVYA4iTK1fxxfVc=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Sep 3 07:44:16 2025 GMT Not After : Sep 10 07:44:16 2025 GMT Subject: CN=68b7f1d0-5b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:42:2d:f7:55:bf:07:57:e1:37:c6:e3:a7: f6:7d:cf:e1:a6:05:d0:f8:ca:74:a7:42:b3:35:18: 6f:9d:67:8f:78:73:71:86:60:02:e9:cc:28:2a:f1: 19:a0:78:36:2c:bc:42:86:29:bf:14:f8:bf:b4:40: c9:0d:6e:16:07:13:75:f9:12:40:e7:5b:7a:cf:d6: ed:48:f9:82:3f:1a:7e:64:d3:a7:8d:4f:68:08:4f: 83:29:4d:ba:40:f2:d2:f1:30:9d:62:0e:e3:c2:2d: 2a:2b:1b:eb:a0:03:16:51:a2:7d:82:6c:60:d3:b6: 45:ba:f9:8b:21:23:24:f8:f7:6e:04:41:a2:38:53: 06:24:88:f8:c7:72:78:46:db:15:6d:55:90:df:55: 29:60:26:44:1c:e8:4b:93:f5:75:18:08:90:38:b1: 18:00:28:44:2b:24:73:39:8e:00:64:06:60:60:f0: 04:86:ca:35:d2:95:22:e2:dd:7b:32:ff:0d:4c:b1: 5e:39:23:ed:fd:c4:a7:6b:c2:bd:a9:63:79:64:02: 0d:34:2c:cd:11:46:ae:bc:4b:d4:1e:5c:5e:82:4a: ed:44:4a:bf:4d:3f:bf:88:34:86:43:9a:38:d7:2a: 4d:7f:65:47:58:e3:e6:60:88:6e:53:7b:a7:34:22: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:BC:92:49:7D:CC:2B:DE:AA:5A:6E:DE:A1:CB:A1:6B:71:89:59 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:04:68:9d:f0:22:e4:62:08:66:47:a8:14:99:46:51:66: 9d:f1:54:d9:f5:bb:e8:97:e6:22:ae:18:1b:7a:8a:54:72:b9: 8d:c8:19:33:20:8d:36:f8:e8:ec:4a:e1:56:02:92:cc:e9:d4: 31:53:53:5c:d8:0b:70:de:89:b4:47:17:55:1d:d9:1d:c6:3b: 03:5e:f1:e9:f3:c4:40:24:5e:ce:02:01:e9:16:c5:37:e2:15: 96:3a:ae:a2:90:7a:04:12:d2:74:b6:9b:bd:c4:29:25:fa:57: 4f:d8:df:45:f2:76:9a:0e:3c:c0:c2:8c:8a:57:d1:d9:c8:7d: ae:4f:28:35:25:ce:cc:50:d9:4f:e9:1d:44:e0:cb:40:6f:93: 1a:59:f0:b4:6e:79:0b:0b:ed:cb:97:83:e8:6c:95:2a:59:48: d2:c8:d4:09:fb:fa:4e:00:51:48:98:0d:c4:70:7d:66:99:cd: f7:5a:61:69:bd:3e:fb:57:14:06:ee:3e:c8:40:70:df:50:20: 3b:f7:7d:d1:12:64:ea:da:c7:c3:a3:b9:86:aa:d8:15:b9:e9: 9c:9f:42:10:73:2a:36:f9:24:f3:70:f8:d7:0e:8d:9b:39:bc: 97:99:06:2b:eb:bd:37:2f:79:41:58:fc:67:fb:54:69:6a:c8: ee:7f:f6:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTA5MDMwNzQ0MTZaFw0yNTA5MTAwNzQ0MTZaMBgxFjAUBgNV BAMTDTY4YjdmMWQwLTViNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdC0It91W/B1fhN8bjp/Z9z+GmBdD4ynSnQrM1GG+dZ494c3GGYALpzCgq8Rmg eDYsvEKGKb8U+L+0QMkNbhYHE3X5EkDnW3rP1u1I+YI/Gn5k06eNT2gIT4MpTbpA 8tLxMJ1iDuPCLSorG+ugAxZRon2CbGDTtkW6+YshIyT4924EQaI4UwYkiPjHcnhG 2xVtVZDfVSlgJkQc6EuT9XUYCJA4sRgAKEQrJHM5jgBkBmBg8ASGyjXSlSLi3Xsy /w1MsV45I+39xKdrwr2pY3lkAg00LM0RRq68S9QeXF6CSu1ESr9NP7+INIZDmjjX Kk1/ZUdY4+ZgiG5Te6c0Ir65AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXBS8kkl9 zCveqlpu3qHLoWtxiVkwHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3 SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADdoBGid8CLkYghmR6gUmUZRZp3xVNn1u+iX5iKuGBt6ilRyuY3IGTMg jTb46OxK4VYCkszp1DFTU1zYC3DeibRHF1Ud2R3GOwNe8enzxEAkXs4CAekWxTfi FZY6rqKQegQS0nS2m73EKSX6V0/Y30XydpoOPMDCjIpX0dnIfa5PKDUlzsxQ2U/p HUTgy0BvkxpZ8LRueQsL7cuXg+hslSpZSNLI1An7+k4AUUiYDcRwfWaZzfdaYWm9 PvtXFAbuPshAcN9QIDv3fdESZOrax8OjuYaq2BW56ZyfQhBzKjb5JPNw+NcOjZs5 vJeZBivrvTcveUFY/Gf7VGlqyO5/9rw= -----END CERTIFICATE-----Generated at Thu Sep 4 15:52:56 2025 by rpki-client