$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: fKCS2rETl0c4V3FDiEwEUgu+z4BGltoLvYIgsbt9PqE= Subject key identifier: 6F:33:D3:ED:85:81:14:83:64:75:48:71:3D:20:72:ED:26:CE:F6:6E Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 093E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 092A Signing time: Fri 08 Aug 2025 20:35:36 +0000 Manifest this update: Fri 08 Aug 2025 20:35:36 +0000 Manifest next update: Fri 15 Aug 2025 20:35:36 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: 3J3BBvEadIRaOE9mLYqjyV9kdR5Q1IaWRu+IFnlZfXY=) 2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: g6ZF73udqOvaMk79CC0xL6laKl1ilnMa4mhmtzges9Y=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: GgE2GgTXjnlE63xFP6LVosemjRTE0pIIUFRg3E+lupM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Aug 8 20:35:36 2025 GMT Not After : Aug 15 20:35:36 2025 GMT Subject: CN=68965f98-3c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:09:78:3d:04:32:5f:43:ca:77:e6:36:c7: b7:37:df:a7:42:11:49:35:ac:42:ce:19:01:09:f1: 89:04:4a:88:44:a8:84:16:4b:1f:9e:bf:e7:10:ae: 3c:34:27:78:f3:1e:16:86:c6:a3:f7:88:8e:3f:4c: 37:bc:34:df:d2:80:97:f6:54:00:85:fe:d9:12:a5: af:ca:a3:d3:b8:20:b9:20:21:9e:2f:25:bf:7f:29: 03:83:96:02:05:2c:b3:91:73:78:f4:50:fb:59:1a: d0:dc:68:37:f5:2a:e1:e3:11:ee:c8:ce:0b:2e:22: 21:09:57:f7:d7:f1:f8:0d:88:59:34:08:d6:6c:95: 05:2b:8a:69:42:30:8e:1f:cf:02:5e:6c:7e:80:d0: 9f:70:07:63:15:e6:44:65:80:4b:14:96:8c:8e:7e: 28:ba:0c:f0:1c:f9:0e:ae:18:18:db:0a:69:1f:3c: 15:2e:4c:cd:ec:5a:65:3a:20:e0:63:5a:e3:33:08: 66:e9:f2:6a:bf:c0:e1:f2:0a:3d:75:78:bf:e3:26: b3:bf:b1:f6:90:8b:c8:78:0e:88:ec:1d:90:da:de: fc:f7:e2:17:e6:ea:f5:b4:8f:f8:20:2b:f6:b3:1e: 10:c1:13:2e:7c:f4:42:db:03:55:dd:cd:b4:c9:47: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:D3:ED:85:81:14:83:64:75:48:71:3D:20:72:ED:26:CE:F6:6E X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e4:b8:73:38:7f:6f:3b:67:06:70:7c:8b:52:79:85:0a:6f: 53:fe:2f:a5:52:cc:63:ff:d8:9b:9f:79:08:96:d3:4f:8d:1c: d9:de:d8:f1:1c:c9:42:bb:37:43:97:e3:9a:5a:bb:ef:ea:f9: eb:a1:21:14:c1:7b:02:f1:e9:1f:40:fc:5e:2a:e9:0a:fd:8b: 6c:c7:6d:4d:66:c2:1a:d9:be:70:74:4c:79:20:3a:d3:55:19: 28:b1:70:93:92:f6:9c:68:b3:1e:e5:a9:b1:a9:c8:3b:94:0e: 1b:c9:01:8c:b6:c1:26:25:63:fa:da:3c:60:12:0d:e9:3c:f7: 8f:0d:8d:2d:18:20:b7:1b:30:c0:28:06:ef:6d:47:d1:cd:b0: 4e:c8:f2:97:87:1a:5d:19:26:ae:91:6e:c5:9c:ce:6d:fd:66: ac:5a:cb:0a:83:bf:c2:fa:ea:0f:97:3a:da:48:db:4f:34:91: c9:f1:4d:4c:30:16:a5:cb:cb:b7:26:00:92:d6:ae:2a:07:e3: 4b:b3:d6:2c:8f:f5:8a:ee:e5:3a:ec:bf:87:b5:a5:04:0f:d6: 0a:6f:d5:97:59:17:b3:e8:0b:1f:b3:2b:03:14:d4:ae:9e:34: 47:36:cc:5a:87:9e:6c:2a:6f:d1:ff:55:9e:9b:6a:21:a7:a0: 1c:fe:1a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjUwODA4MjAzNTM2WhcNMjUwODE1MjAzNTM2WjAYMRYwFAYD VQQDEw02ODk2NWY5OC0zYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MUJeD0EMl9DynfmNse3N9+nQhFJNaxCzhkBCfGJBEqIRKiEFksfnr/nEK48 NCd48x4Whsaj94iOP0w3vDTf0oCX9lQAhf7ZEqWvyqPTuCC5ICGeLyW/fykDg5YC BSyzkXN49FD7WRrQ3Gg39Srh4xHuyM4LLiIhCVf31/H4DYhZNAjWbJUFK4ppQjCO H88CXmx+gNCfcAdjFeZEZYBLFJaMjn4ougzwHPkOrhgY2wppHzwVLkzN7FplOiDg Y1rjMwhm6fJqv8Dh8go9dXi/4yazv7H2kIvIeA6I7B2Q2t789+IX5ur1tI/4ICv2 sx4QwRMufPRC2wNV3c20yUd6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8z0+2F gRSDZHVIcT0gcu0mzvZuMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj5LhzOH9vO2cGcHyLUnmFCm9T/i+lUsxj/9ibn3kIltNPjRzZ3tjx HMlCuzdDl+OaWrvv6vnroSEUwXsC8ekfQPxeKukK/Ytsx21NZsIa2b5wdEx5IDrT VRkosXCTkvacaLMe5amxqcg7lA4byQGMtsEmJWP62jxgEg3pPPePDY0tGCC3GzDA KAbvbUfRzbBOyPKXhxpdGSaukW7FnM5t/WasWssKg7/C+uoPlzraSNtPNJHJ8U1M MBaly8u3JgCS1q4qB+NLs9Ysj/WK7uU67L+HtaUED9YKb9WXWRez6AsfsysDFNSu njRHNsxah55sKm/R/1Wem2ohp6Ac/hqu -----END CERTIFICATE-----Generated at Sun Aug 10 18:52:54 2025 by rpki-client