$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: N4WV8NLZO1yWlHLqjgySNKcnVVEpYfmyFxkk+JJf3K4= Subject key identifier: 4D:18:A9:50:90:57:04:19:CD:DC:14:C4:8D:4F:64:E9:D0:96:F8:95 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34B3 Signing time: Fri 08 Aug 2025 14:42:23 +0000 Manifest this update: Fri 08 Aug 2025 14:42:23 +0000 Manifest next update: Fri 15 Aug 2025 14:42:23 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: OHI/jspqliGG3IlXP1SGi53AQ8uBJOq3gb8uObHtny8=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Aug 8 14:42:23 2025 GMT Not After : Aug 15 14:42:23 2025 GMT Subject: CN=68960ccf-a4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:36:bd:27:01:dd:b7:a8:dd:49:74:17:2b: 1a:f3:a6:e6:04:ca:0d:b1:cd:f6:36:58:aa:86:b8: 94:3f:24:b9:48:5a:dd:da:83:93:40:8d:4d:7d:8f: 31:ed:1b:9d:60:cc:47:fe:fa:88:d4:2e:b1:4e:01: 52:d2:85:db:5e:5e:87:96:fb:78:34:c5:0c:e4:a6: d9:0f:fd:dc:f6:c1:2c:78:d4:5f:7f:0e:e6:ae:13: 33:fd:e3:0c:ab:f7:d3:25:a0:1e:40:23:73:7e:ba: 3a:7d:de:51:74:66:40:9d:ac:c4:c8:39:38:d9:20: 99:0d:69:04:00:4a:b4:8d:2f:9d:83:b7:ca:d5:bc: d2:8e:bf:06:f5:31:43:ff:12:79:59:8d:09:9b:f2: bb:43:7c:04:b2:52:81:3a:cf:5a:21:50:c6:ca:bc: 7e:02:2d:c0:18:91:9b:66:81:1d:b6:31:af:4c:22: e1:69:14:4b:21:2f:df:64:8e:a6:63:cf:47:fa:a6: 58:77:5f:5d:61:cf:b8:e9:f5:e3:ea:e5:13:a4:6f: 2e:99:f4:a2:6c:f1:1f:94:38:16:ea:f5:bb:00:34: a3:b1:b4:41:ac:84:cb:7c:60:bd:08:cc:f1:3f:3d: 03:e9:a5:12:4f:fe:62:ed:26:a1:3a:36:31:cb:2f: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:A9:50:90:57:04:19:CD:DC:14:C4:8D:4F:64:E9:D0:96:F8:95 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:80:2e:83:f7:00:31:3b:06:3e:72:44:e4:67:b1:99:f9:75: 79:1e:8d:b3:98:bd:56:71:7f:5e:c3:e4:a4:4b:be:57:32:97: ad:a4:d6:c3:92:7d:46:ae:86:d2:d9:3a:74:2d:cc:ea:2c:ba: 6d:96:2f:b3:a5:ba:03:35:e5:3b:dd:92:00:72:5b:77:49:10: 13:ee:9f:a6:37:aa:9c:b0:c8:03:83:80:8d:5d:21:6d:ee:1e: da:2b:8e:c9:46:48:58:14:66:cd:5c:0a:8e:06:24:84:a7:8d: 80:bd:d3:7f:d4:c2:ac:5c:c5:61:4d:f8:03:8d:88:1a:7a:2f: 14:8d:8e:d3:63:3a:e8:1b:ad:87:74:a1:2c:22:cc:14:a7:a6: d8:f6:6b:39:f0:6a:e1:f7:2d:74:d6:a2:5f:c9:c9:d1:a1:9d: a3:80:2d:25:75:08:a1:28:ea:68:12:43:64:4e:98:0e:cf:0b: c9:49:1d:f1:a2:07:07:0b:9d:9e:e9:9c:91:d7:78:ac:ea:a5: 13:09:0f:56:71:84:47:24:6b:da:7c:97:6a:09:3f:15:c9:01: a4:5f:18:02:ad:39:ba:a2:fc:36:d4:a2:c3:8b:ed:ea:86:19: 4f:b1:dc:b7:cf:a3:92:13:e0:34:3e:2b:5b:71:0f:fd:47:7a: e2:e1:c5:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUwODA4MTQ0MjIzWhcNMjUwODE1MTQ0MjIzWjAYMRYwFAYD VQQDEw02ODk2MGNjZi1hNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziM2vScB3beo3Ul0Fysa86bmBMoNsc32NliqhriUPyS5SFrd2oOTQI1NfY8x 7RudYMxH/vqI1C6xTgFS0oXbXl6Hlvt4NMUM5KbZD/3c9sEseNRffw7mrhMz/eMM q/fTJaAeQCNzfro6fd5RdGZAnazEyDk42SCZDWkEAEq0jS+dg7fK1bzSjr8G9TFD /xJ5WY0Jm/K7Q3wEslKBOs9aIVDGyrx+Ai3AGJGbZoEdtjGvTCLhaRRLIS/fZI6m Y89H+qZYd19dYc+46fXj6uUTpG8umfSibPEflDgW6vW7ADSjsbRBrITLfGC9CMzx Pz0D6aUST/5i7SahOjYxyy+XwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0YqVCQ VwQZzdwUxI1PZOnQlviVMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugC6D9wAxOwY+ckTkZ7GZ+XV5Ho2zmL1WcX9ew+SkS75XMpetpNbD kn1GrobS2Tp0LczqLLptli+zpboDNeU73ZIAclt3SRAT7p+mN6qcsMgDg4CNXSFt 7h7aK47JRkhYFGbNXAqOBiSEp42AvdN/1MKsXMVhTfgDjYgaei8UjY7TYzroG62H dKEsIswUp6bY9ms58Grh9y101qJfycnRoZ2jgC0ldQihKOpoEkNkTpgOzwvJSR3x ogcHC52e6ZyR13is6qUTCQ9WcYRHJGvafJdqCT8VyQGkXxgCrTm6ovw21KLDi+3q hhlPsdy3z6OSE+A0PitbcQ/9R3ri4cUt -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:36 2025 by rpki-client