$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: bt4iksddATRLJqURVyhYRF4Ned5YRcYhrkgMAZxunMw= Subject key identifier: 47:BC:51:F0:6C:DB:8A:50:0F:21:E2:F8:70:E0:66:29:0D:E7:B7:26 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 029C Signing time: Wed 13 Aug 2025 02:07:47 +0000 Manifest this update: Wed 13 Aug 2025 02:07:46 +0000 Manifest next update: Wed 20 Aug 2025 02:07:46 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: h6GQuLsXjsnnIP13Ru2dwMH1JgXhEdgLBetYe0+3zz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Aug 13 02:07:46 2025 GMT Not After : Aug 20 02:07:46 2025 GMT Subject: CN=689bf372-80c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:ae:f2:26:82:f8:bf:ba:cb:51:9c:ff:c7: 64:f2:73:e7:9a:84:be:f2:e7:09:c0:0a:fe:ac:a2: af:32:66:18:10:b9:e7:43:1d:2f:0d:c9:fa:90:f2: 88:09:a1:96:ed:d3:fe:54:52:84:2f:1a:5f:7e:33: 95:f1:4d:5b:47:09:4e:32:f1:10:54:37:16:c9:26: 68:47:ba:e5:6f:12:d6:89:c8:ac:b8:71:eb:1e:cf: 80:9e:bb:02:56:f7:0e:0f:ae:a3:0b:08:91:90:64: d0:07:93:5a:49:bf:dc:1f:08:7a:a7:75:26:9d:e5: 32:68:db:3f:69:f1:21:48:57:4b:af:a2:aa:38:b5: ef:2e:bf:13:a0:04:f9:ab:83:04:fc:24:b3:22:bd: 31:aa:67:61:7f:98:06:3f:b4:0a:62:63:a2:1a:e6: dc:bb:a8:12:67:f8:c5:0b:b3:d6:3c:7b:02:af:5f: 09:f3:cd:f8:f9:22:78:ff:56:53:18:7d:58:1b:7d: d3:81:61:47:5d:20:f0:b8:4f:27:9a:35:d0:be:8e: 70:35:08:a2:02:fc:03:f0:3e:c1:d3:56:3d:12:d4: dc:f6:ee:48:e7:63:63:41:07:9a:a2:28:b8:f6:57: 97:5a:66:eb:11:5a:f7:29:c4:91:6b:0d:7b:93:0d: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BC:51:F0:6C:DB:8A:50:0F:21:E2:F8:70:E0:66:29:0D:E7:B7:26 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d1:b5:94:8f:56:89:6e:8e:3e:84:0a:4d:fb:42:25:6d:b5: c3:57:ab:08:9e:c9:9a:fd:94:88:ed:a0:ef:bf:d9:43:8d:7a: 55:84:74:c7:b7:a0:46:dc:3d:c3:ca:be:e9:a0:3a:79:a5:18: 16:aa:a1:1f:99:7b:a8:76:6d:8a:d3:2f:41:d1:98:15:85:eb: 20:fe:73:d8:49:53:fb:ca:af:7c:db:54:ca:bd:1f:c3:2e:92: 90:1f:25:bb:68:a4:2d:8f:ef:dc:d4:84:f0:15:ac:df:dd:2b: 08:e9:15:0c:9d:8f:ce:df:5d:e2:77:21:c7:ac:24:d6:1e:fc: c1:dc:c8:99:f3:22:06:4f:a1:09:83:e4:27:c2:96:49:77:58: 6c:c3:36:d4:0e:e6:8b:55:d2:14:32:4e:75:58:4c:fd:12:92: 6b:41:62:ec:a9:4a:cd:5b:93:fa:7f:e9:1a:7b:51:ac:b3:a8: a6:bc:fd:c6:38:fc:4a:98:0d:8b:20:02:ca:3e:92:0d:e2:48: 97:a7:c9:d1:5f:34:21:aa:af:2f:8c:18:86:74:3c:fb:ab:6f: e7:41:d6:12:a1:74:3d:ba:87:a6:91:f8:15:c9:6e:f3:53:25: 33:50:52:0e:27:24:06:c9:4f:60:fc:a7:50:eb:23:46:33:e6: 54:1c:02:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwODEzMDIwNzQ2WhcNMjUwODIwMDIwNzQ2WjAYMRYwFAYD VQQDEw02ODliZjM3Mi04MGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOiu8iaC+L+6y1Gc/8dk8nPnmoS+8ucJwAr+rKKvMmYYELnnQx0vDcn6kPKI CaGW7dP+VFKELxpffjOV8U1bRwlOMvEQVDcWySZoR7rlbxLWicisuHHrHs+AnrsC VvcOD66jCwiRkGTQB5NaSb/cHwh6p3UmneUyaNs/afEhSFdLr6KqOLXvLr8ToAT5 q4ME/CSzIr0xqmdhf5gGP7QKYmOiGubcu6gSZ/jFC7PWPHsCr18J8834+SJ4/1ZT GH1YG33TgWFHXSDwuE8nmjXQvo5wNQiiAvwD8D7B01Y9EtTc9u5I52NjQQeaoii4 9leXWmbrEVr3KcSRaw17kw1vDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe8UfBs 24pQDyHi+HDgZikN57cmMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX0bWUj1aJbo4+hApN+0IlbbXDV6sInsma/ZSI7aDvv9lDjXpVhHTH t6BG3D3Dyr7poDp5pRgWqqEfmXuodm2K0y9B0ZgVhesg/nPYSVP7yq9821TKvR/D LpKQHyW7aKQtj+/c1ITwFazf3SsI6RUMnY/O313idyHHrCTWHvzB3MiZ8yIGT6EJ g+QnwpZJd1hswzbUDuaLVdIUMk51WEz9EpJrQWLsqUrNW5P6f+kae1Gss6imvP3G OPxKmA2LIALKPpIN4kiXp8nRXzQhqq8vjBiGdDz7q2/nQdYSoXQ9uoemkfgVyW7z UyUzUFIOJyQGyU9g/KdQ6yNGM+ZUHAJX -----END CERTIFICATE-----Generated at Wed Aug 13 09:49:24 2025 by rpki-client