$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: xtGm00lMFCQsrJJk8cN/tA5N9Ug8f/R5/UzoVb/f+k8= Subject key identifier: 87:84:68:D5:89:F6:E4:AF:0C:E1:18:2F:8F:62:71:B0:5F:FE:A0:E4 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: 84 Signing time: Fri 08 Aug 2025 19:29:35 +0000 Manifest this update: Fri 08 Aug 2025 19:29:35 +0000 Manifest next update: Fri 15 Aug 2025 19:29:35 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: CdfF9KYZvnd9khrvZiDe4Ko33h/4HXxwGXjXw7wac+o=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pDBpwWzy3RFOzY6mOa1pibkze94QAdG3zJbynRenhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Aug 8 19:29:35 2025 GMT Not After : Aug 15 19:29:35 2025 GMT Subject: CN=6896501f-ae3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:16:e3:1c:ae:54:65:d7:72:ee:ea:68:dd: 0e:5d:c1:67:b0:52:69:de:02:76:b0:62:0a:2e:1b: 87:1c:3f:10:1a:08:3b:19:60:4f:c3:41:92:39:0a: dc:62:7a:3d:b1:5f:d3:43:a6:0e:c1:30:13:a8:07: 8d:a1:5c:8a:c2:df:3f:62:a1:db:1e:e5:71:8b:4d: 3d:7b:6c:21:6b:15:26:c4:6e:63:1e:e5:18:1f:92: 4c:55:ff:7a:c6:be:40:72:2d:6f:32:56:b5:62:e4: d6:2a:c4:cc:6a:07:04:4e:20:d5:7e:5b:9f:85:c5: 10:85:01:e3:5f:ea:12:ea:29:64:75:eb:f9:7c:bd: 7c:74:7e:0f:33:b8:4f:0f:eb:3b:ea:5f:68:a1:aa: 9b:d1:c7:55:1c:ac:74:c7:98:28:04:18:16:1d:aa: 3f:f0:87:96:b8:f6:ef:ee:47:48:e6:a5:f5:58:f3: 19:2a:c2:d9:ef:6a:a7:cd:2c:2a:20:3e:e7:e8:71: 00:d3:c1:39:b9:94:83:dc:b5:41:3c:ae:e2:7b:a4: a8:a4:8e:28:ad:ec:af:73:71:98:04:1c:fb:34:86: a1:e8:74:0b:eb:44:8d:f1:69:c2:9f:e5:a3:a8:a6: f6:88:53:cd:1c:0b:91:0b:10:e5:57:4c:60:8b:1c: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:68:D5:89:F6:E4:AF:0C:E1:18:2F:8F:62:71:B0:5F:FE:A0:E4 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:01:fe:c4:43:9d:e1:71:5e:24:0d:fb:e6:47:98:1a:4c:9a: da:f2:34:fb:07:e8:f6:02:93:4d:de:d0:b4:dd:5d:c9:b0:f7: ca:74:75:a3:fc:bc:ab:00:10:a2:f7:fa:02:7c:e2:e6:42:0e: 58:76:9f:03:cd:70:af:2e:a9:d8:df:8a:69:33:34:75:71:00: 34:32:9e:3c:42:26:ac:1e:7a:7e:0e:3c:ff:75:41:62:a5:76: 19:e3:ae:19:b8:f2:45:ef:c7:9c:31:ef:a3:34:8e:f1:c5:86: ac:2e:cb:90:da:d2:de:e9:a4:24:7c:c7:4a:c3:cf:e6:fd:a6: fa:b9:ca:a6:f8:17:f6:94:c2:a5:36:c0:40:72:10:d0:d3:ed: 07:72:12:1a:34:35:4b:81:c6:23:57:d4:f1:e8:b1:81:15:20: c2:e1:2e:70:52:9c:d8:e1:a6:4c:39:77:62:4f:3d:bb:3d:e9: cb:98:81:08:86:1b:40:b1:bc:30:65:f9:55:99:90:1f:c5:5e: 9a:9e:ba:e6:b6:03:81:10:b2:ba:f1:24:5b:c4:0a:00:f4:b0: 04:33:bb:d3:b1:a7:d1:8e:00:46:8f:a1:95:9a:48:98:ab:71: ce:ed:53:7b:56:5e:fb:a7:d0:be:a0:78:ce:58:71:1a:22:73: 93:bf:98:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5 OUQyQzcyN0MwHhcNMjUwODA4MTkyOTM1WhcNMjUwODE1MTkyOTM1WjAYMRYwFAYD VQQDEw02ODk2NTAxZi1hZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW8W4xyuVGXXcu7qaN0OXcFnsFJp3gJ2sGIKLhuHHD8QGgg7GWBPw0GSOQrc Yno9sV/TQ6YOwTATqAeNoVyKwt8/YqHbHuVxi009e2whaxUmxG5jHuUYH5JMVf96 xr5Aci1vMla1YuTWKsTMagcETiDVflufhcUQhQHjX+oS6ilkdev5fL18dH4PM7hP D+s76l9ooaqb0cdVHKx0x5goBBgWHao/8IeWuPbv7kdI5qX1WPMZKsLZ72qnzSwq ID7n6HEA08E5uZSD3LVBPK7ie6SopI4oreyvc3GYBBz7NIah6HQL60SN8WnCn+Wj qKb2iFPNHAuRCxDlV0xgixw0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeEaNWJ 9uSvDOEYL49icbBf/qDkMB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM MnVSSkd3LWd6WENaMHNjbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZAf7EQ53hcV4kDfvmR5gaTJra8jT7B+j2ApNN3tC03V3JsPfKdHWj /LyrABCi9/oCfOLmQg5Ydp8DzXCvLqnY34ppMzR1cQA0Mp48QiasHnp+Djz/dUFi pXYZ464ZuPJF78ecMe+jNI7xxYasLsuQ2tLe6aQkfMdKw8/m/ab6ucqm+Bf2lMKl NsBAchDQ0+0HchIaNDVLgcYjV9Tx6LGBFSDC4S5wUpzY4aZMOXdiTz27PenLmIEI hhtAsbwwZflVmZAfxV6anrrmtgOBELK68SRbxAoA9LAEM7vTsafRjgBGj6GVmkiY q3HO7VN7Vl77p9C+oHjOWHEaInOTv5hZ -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:18 2025 by rpki-client