$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json) Hash identifier: 1rzv2mcui7NDVeqCCVER73mI0ZWetRWFKJnzVqHCUt4= Subject key identifier: 3C:53:AE:C7:0F:EE:70:04:04:15:67:76:D9:07:7F:7E:67:E6:AD:E2 Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0ACF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft Manifest number: 0AC7 Signing time: Sun 10 Aug 2025 19:30:25 +0000 Manifest this update: Sun 10 Aug 2025 19:30:25 +0000 Manifest next update: Sun 17 Aug 2025 19:30:25 +0000 Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: Neh1lTzhIPpgXsaoFtvKkU8mSMnuSRmQIp94WdBvsi8=) 2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2767 (0xacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: Aug 10 19:30:25 2025 GMT Not After : Aug 17 19:30:25 2025 GMT Subject: CN=6898f351-d262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:64:95:8d:14:d2:b5:69:f2:33:7f:57:be: cf:0d:77:95:47:3d:1b:f0:83:ad:06:ee:e8:b5:cf: e8:fa:38:7a:a0:44:00:95:58:3e:04:d7:b1:92:ab: 2e:67:33:f8:a9:e0:43:0a:e0:c6:f3:40:60:2f:bf: b8:a0:84:e9:48:6e:1d:9c:d6:ed:bd:6f:82:5c:1b: 67:c3:a9:37:8e:7c:71:84:ee:77:97:8a:fd:18:76: 2c:9f:a9:33:b3:c1:17:54:6a:49:c0:d2:34:5c:73: 37:c8:6e:ee:59:dd:f2:3a:e2:eb:d7:d3:a3:9c:12: 4c:27:c7:5b:27:70:0f:c5:ed:8a:b6:3d:7c:d3:e0: b5:37:64:3c:f7:ec:25:a7:80:9c:11:3e:0d:64:26: d3:0a:5b:fa:ac:ff:00:8a:99:5b:28:bf:ef:70:70: 84:03:6b:13:ba:41:41:cb:3a:08:7c:f7:20:f2:46: ef:a3:c5:3c:3d:c6:95:b0:27:e1:e3:ed:98:83:3b: c1:b1:53:69:ba:0b:bc:d6:a3:9d:2d:0c:8b:b2:09: 8e:49:ed:66:e4:1f:84:e8:c2:57:ce:38:8b:a5:26: 7f:e5:4b:f8:13:90:86:b0:8b:48:db:15:e4:f5:1d: bb:3e:13:7d:6c:52:81:b1:9d:d8:60:f5:6b:0b:3d: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:53:AE:C7:0F:EE:70:04:04:15:67:76:D9:07:7F:7E:67:E6:AD:E2 X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0a:2e:7a:ff:e1:b5:7e:7d:4c:56:1f:12:28:e7:22:09:28: 7f:f7:af:96:43:bc:a3:50:aa:ac:e8:b8:8b:68:34:e4:85:31: b9:da:e8:96:bb:72:b7:14:d5:d5:12:78:e0:c3:2e:23:f6:2f: 43:26:e0:41:87:06:0c:c0:8d:da:b8:e3:c9:48:30:32:65:c3: c8:83:9c:8d:fa:f6:9d:83:2f:53:2b:5d:99:d0:10:4e:cc:e0: 9e:79:4a:48:af:59:9b:d0:24:17:8b:02:a3:f7:dd:95:5d:ab: 1e:68:5a:39:22:0d:f7:46:32:5f:82:dd:d2:8b:8b:56:b2:6f: c0:e9:b0:66:f0:70:4a:89:6b:ed:97:a4:a1:4a:69:cb:a0:a2: 28:5e:03:0f:e5:d1:74:70:47:5e:68:5c:2f:21:ad:22:52:e2: 56:cd:56:8d:3f:8e:3a:80:cf:f4:95:dd:4c:29:4c:76:d5:09: 0b:b8:82:19:e8:fb:da:b8:47:07:58:9e:4e:94:22:a3:30:77: d3:79:4e:03:bb:aa:01:c4:11:34:00:09:a5:24:04:5f:f4:5a: f8:91:54:64:c4:ca:75:a9:a7:88:76:9e:ad:2f:42:8e:73:eb: c4:1a:96:f3:58:4a:b4:c4:b9:2e:39:6f:ee:fa:51:3c:48:09: c4:b4:4a:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjUwODEwMTkzMDI1WhcNMjUwODE3MTkzMDI1WjAYMRYwFAYD VQQDEw02ODk4ZjM1MS1kMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aRklY0U0rVp8jN/V77PDXeVRz0b8IOtBu7otc/o+jh6oEQAlVg+BNexkqsu ZzP4qeBDCuDG80BgL7+4oITpSG4dnNbtvW+CXBtnw6k3jnxxhO53l4r9GHYsn6kz s8EXVGpJwNI0XHM3yG7uWd3yOuLr19OjnBJMJ8dbJ3APxe2Ktj180+C1N2Q89+wl p4CcET4NZCbTClv6rP8AiplbKL/vcHCEA2sTukFByzoIfPcg8kbvo8U8PcaVsCfh 4+2YgzvBsVNpugu81qOdLQyLsgmOSe1m5B+E6MJXzjiLpSZ/5Uv4E5CGsItI2xXk 9R27PhN9bFKBsZ3YYPVrCz2KIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxTrscP 7nAEBBVndtkHf35n5q3iMB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBCNC9CQzhDMTBBRTU3M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2ps M1Rsa2ptcEQ0QS1uSTk1bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmCi56/+G1fn1MVh8SKOciCSh/96+WQ7yjUKqs6LiLaDTkhTG52uiW u3K3FNXVEnjgwy4j9i9DJuBBhwYMwI3auOPJSDAyZcPIg5yN+vadgy9TK12Z0BBO zOCeeUpIr1mb0CQXiwKj992VXaseaFo5Ig33RjJfgt3Si4tWsm/A6bBm8HBKiWvt l6ShSmnLoKIoXgMP5dF0cEdeaFwvIa0iUuJWzVaNP446gM/0ld1MKUx21QkLuIIZ 6PvauEcHWJ5OlCKjMHfTeU4Du6oBxBE0AAmlJARf9Fr4kVRkxMp1qaeIdp6tL0KO c+vEGpbzWEq0xLkuOW/u+lE8SAnEtEpZ -----END CERTIFICATE-----Generated at Mon Aug 11 13:17:47 2025 by rpki-client