$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json) Hash identifier: 901l0jZH1xy2Gq7AlOHk3itY3gF0cp4dTsFuE4hr5Vc= Subject key identifier: 80:81:27:C3:02:A5:DF:83:6C:85:A5:A3:31:5E:F6:96:3B:DB:AC:68 Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft Manifest number: 1C Signing time: Thu 07 Aug 2025 08:34:29 +0000 Manifest this update: Thu 07 Aug 2025 08:34:28 +0000 Manifest next update: Thu 14 Aug 2025 08:34:28 +0000 Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: aZ1900wMfPMMvAe6hlk+bFf7OSe7GuqgvCNVETPaClw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Validity Not Before: Aug 7 08:34:28 2025 GMT Not After : Aug 14 08:34:28 2025 GMT Subject: CN=68946515-8193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:7c:44:f0:61:f1:14:14:ed:f3:b2:ad:0d: 7d:0a:8c:6d:38:d6:57:e9:f1:8a:fa:30:d1:14:85: 02:7e:f4:ee:dd:11:cb:34:58:69:aa:9c:c3:b2:0b: 12:90:15:bc:98:92:b7:31:10:85:fe:1b:07:1d:02: ac:68:8a:0b:d9:15:14:8f:8d:99:cb:d6:37:7b:28: a5:3f:4a:c3:fc:20:5c:5f:e8:1f:e0:94:96:33:50: 5e:b6:c3:1f:f0:b0:2e:48:53:14:7b:ef:a7:2a:74: 6b:c1:8f:9b:7b:7c:96:5a:57:f4:3e:20:37:c0:ed: ad:dc:52:79:f3:86:0f:9f:7f:43:35:a3:72:8b:96: 6a:a1:41:b3:56:d3:11:88:df:be:fa:7a:4e:ba:1e: 8c:81:3a:39:cf:54:0e:8b:f1:7d:33:ad:e6:9d:e6: 0d:45:6c:b1:0d:10:cb:2f:18:3f:ae:f4:7c:39:51: 10:1a:0e:b6:7a:46:aa:ab:f7:00:21:6b:59:c2:7e: 6e:91:98:56:5d:d6:19:f2:31:54:24:7b:ca:f6:5e: a8:d6:fb:56:05:4c:6c:37:85:1b:74:80:27:ed:1f: eb:5e:6b:c2:46:08:22:82:87:c6:14:b3:95:ee:8f: 3a:b1:e1:d8:11:29:61:06:e1:ed:38:2d:56:5a:7b: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:81:27:C3:02:A5:DF:83:6C:85:A5:A3:31:5E:F6:96:3B:DB:AC:68 X509v3 Authority Key Identifier: keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:5b:c8:8c:c8:3f:8c:69:0d:cd:5b:de:6c:60:f6:d3:06:b0: 28:bb:c3:65:7f:8a:06:62:00:31:d9:70:56:bd:c2:8d:7f:30: b6:06:84:f7:f5:28:8e:22:dd:6c:cc:a4:b9:ea:59:2e:e1:8b: bc:07:31:00:ae:34:d6:8f:e7:66:00:36:d3:09:f7:c2:55:93: 13:be:e9:87:cc:dc:cd:8c:d9:19:d6:00:9e:b0:ec:d9:63:39: bb:59:a9:52:b5:6b:23:23:e2:b9:98:82:d2:27:39:50:4b:65: 44:0f:9d:ba:e0:65:d3:86:c8:a6:44:0b:db:33:57:58:14:75: f7:30:82:c4:be:36:03:c2:2b:7c:1e:01:29:ad:56:54:17:ad: 76:f0:e9:d9:02:5d:12:ad:84:33:3f:11:fa:e2:a9:d3:17:50: 02:42:4c:72:1b:8c:d0:b5:3b:65:f4:6d:9e:90:e7:cf:6f:35: dc:21:98:4c:35:83:90:7f:7b:7f:a1:51:57:2c:33:da:a7:68: cb:58:cc:43:58:ca:db:7e:e5:c7:e0:fa:94:6b:a0:fc:1a:fc: 11:ed:e3:9a:83:7e:1c:9a:5f:68:a2:a2:2d:64:49:92:7c:c8: 1f:c5:aa:3c:a6:a8:ea:c3:b4:66:72:36:e2:d5:8f:a1:1f:23: 9b:34:1b:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoM0YwOTk3OUQ4ODhBM0RBNzcxNjBCM0M4MDczN0NDMzYw MEM2QjhERTAeFw0yNTA4MDcwODM0MjhaFw0yNTA4MTQwODM0MjhaMBgxFjAUBgNV BAMTDTY4OTQ2NTE1LTgxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCycHxE8GHxFBTt87KtDX0KjG041lfp8Yr6MNEUhQJ+9O7dEcs0WGmqnMOyCxKQ FbyYkrcxEIX+GwcdAqxoigvZFRSPjZnL1jd7KKU/SsP8IFxf6B/glJYzUF62wx/w sC5IUxR776cqdGvBj5t7fJZaV/Q+IDfA7a3cUnnzhg+ff0M1o3KLlmqhQbNW0xGI 3776ek66HoyBOjnPVA6L8X0zread5g1FbLENEMsvGD+u9Hw5URAaDrZ6Rqqr9wAh a1nCfm6RmFZd1hnyMVQke8r2XqjW+1YFTGw3hRt0gCftH+tea8JGCCKCh8YUs5Xu jzqx4dgRKWEG4e04LVZaezuPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgIEnwwKl 34NshaWjMV72ljvbrGgwHwYDVR0jBBgwFoAUPwmXnYiKPadxYLPIBzfMNgDGuN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3L0EyN0ZFNkRDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHdtWG5ZaUtQYWR4WUxQSUJ6Zk1OZ0RHdU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3L0EyN0ZFNkRDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFk eFlMUElCemZNTmdER3VONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFdbyIzIP4xpDc1b3mxg9tMGsCi7w2V/igZiADHZcFa9wo1/MLYGhPf1 KI4i3WzMpLnqWS7hi7wHMQCuNNaP52YANtMJ98JVkxO+6YfM3M2M2RnWAJ6w7Nlj ObtZqVK1ayMj4rmYgtInOVBLZUQPnbrgZdOGyKZEC9szV1gUdfcwgsS+NgPCK3we ASmtVlQXrXbw6dkCXRKthDM/EfriqdMXUAJCTHIbjNC1O2X0bZ6Q589vNdwhmEw1 g5B/e3+hUVcsM9qnaMtYzENYytt+5cfg+pRroPwa/BHt45qDfhyaX2iioi1kSZJ8 yB/FqjymqOrDtGZyNuLVj6EfI5s0G9Q= -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:04 2025 by rpki-client