$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json) Hash identifier: O5mKjh5Yx7x+FZS/VoAXO5M1O6g/05quBH0fRIxxu1g= Subject key identifier: 39:1F:78:46:21:26:E7:81:7E:1A:0B:E8:D2:8F:4A:FF:BD:09:9C:62 Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft Manifest number: 0546 Signing time: Wed 06 Aug 2025 23:55:20 +0000 Manifest this update: Wed 06 Aug 2025 23:55:20 +0000 Manifest next update: Wed 13 Aug 2025 23:55:20 +0000 Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: h8D8DUaAuHQkBO/ewIsNLpHr3dmNtqGqCWfQPpxVrTI=) 2: 1953EB90FF1B11EBA5CEF970C4F9AE02.roa (hash: GyNWMA5uS2CM++CZD9BiRxHkePo3mscOl1IpeulPgT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Validity Not Before: Aug 6 23:55:20 2025 GMT Not After : Aug 13 23:55:20 2025 GMT Subject: CN=6893eb68-ae23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:ef:78:ec:89:c6:5d:0c:91:c6:40:67:4d: e1:7e:b8:80:7f:05:d2:f6:31:a9:b3:30:1f:0e:7b: 9d:2a:79:4d:d0:dc:3d:7a:7c:a5:3e:49:f7:ec:6f: 60:8a:e8:00:1f:36:dc:c2:67:03:54:d3:dc:97:90: c3:88:d5:9e:a5:14:ec:81:f9:ba:5f:00:a5:c3:ae: a4:10:71:33:5e:8a:db:4a:74:ab:25:f6:44:10:87: e0:db:f2:df:85:fa:05:a2:d4:f4:13:4f:6e:77:8e: 23:92:5c:18:0e:13:b8:34:b9:f5:08:c5:c9:79:64: 0d:7f:1a:e5:b8:45:d0:29:9e:6c:c6:37:ec:c6:37: ac:3b:25:bb:cd:9e:13:36:3e:aa:a8:6d:09:63:20: 37:f1:cc:3c:b2:94:3e:29:7c:57:3e:e2:d4:18:9d: fd:4a:df:a8:e6:9f:d4:4a:66:b7:19:cb:6a:6e:33: e2:57:5e:9d:81:c7:02:bf:be:12:96:19:28:1b:10: 50:e4:70:b5:ba:fd:75:21:9c:75:f9:b3:65:3f:88: 62:19:78:9d:40:f0:ff:a5:30:e2:b6:48:ff:a4:b6: 68:40:0c:a5:fb:43:f0:09:69:02:0c:15:79:19:83: 32:26:59:6c:72:e1:4b:ac:0b:6f:98:76:e0:7c:4e: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:78:46:21:26:E7:81:7E:1A:0B:E8:D2:8F:4A:FF:BD:09:9C:62 X509v3 Authority Key Identifier: keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ac:68:1d:17:8d:49:b5:f8:13:c9:0d:b7:94:bf:cd:5d:d2: 22:c0:6d:84:02:85:69:68:89:aa:46:12:6c:b7:7f:04:4c:0e: 30:89:23:35:0d:0c:f0:8a:14:70:92:ba:b1:b6:3b:ef:b7:c6: da:0b:2a:67:f1:f1:10:dc:5c:d7:3e:d3:21:e8:55:89:ce:1b: 7d:a8:bb:7d:f3:c0:63:1e:d4:f0:83:10:8d:9a:0c:a0:f6:a9: 39:0b:37:7b:3b:52:87:c0:0b:01:9c:42:7c:dd:bf:58:91:54: 5f:c7:99:10:33:db:f2:d5:23:05:fa:b8:9f:e7:81:cb:91:a3: c7:c3:39:f8:b8:2d:7a:1a:e7:b5:66:3c:ee:36:84:7a:35:6c: 2c:84:88:ea:41:af:5a:45:a5:b5:d0:51:31:ff:38:fb:50:d9: 43:64:a3:f7:8d:c0:76:e8:22:83:54:e9:22:09:18:79:ad:2b: 52:fd:b0:32:27:65:90:f0:b5:e6:a7:ac:64:52:d7:35:c6:de: b5:96:67:25:56:9d:7c:48:e4:cd:e5:93:b8:8b:7e:11:ff:02: 41:5f:dc:ed:dd:07:40:2d:6b:40:ea:8a:9e:4d:c9:56:70:c7: a0:8d:df:f7:14:2e:79:48:82:0c:0e:25:9f:9e:ff:0b:32:98: 8b:9b:b1:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M4MUMxMTAvBgNVBAUTKDNGM0IyRjVCM0JBRTUyQTZCNTY5MkNBRjkyQTI1NTRC MDZEQTg2M0QwHhcNMjUwODA2MjM1NTIwWhcNMjUwODEzMjM1NTIwWjAYMRYwFAYD VQQDEw02ODkzZWI2OC1hZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNPveOyJxl0MkcZAZ03hfriAfwXS9jGpszAfDnudKnlN0Nw9enylPkn37G9g iugAHzbcwmcDVNPcl5DDiNWepRTsgfm6XwClw66kEHEzXorbSnSrJfZEEIfg2/Lf hfoFotT0E09ud44jklwYDhO4NLn1CMXJeWQNfxrluEXQKZ5sxjfsxjesOyW7zZ4T Nj6qqG0JYyA38cw8spQ+KXxXPuLUGJ39St+o5p/USma3GctqbjPiV16dgccCv74S lhkoGxBQ5HC1uv11IZx1+bNlP4hiGXidQPD/pTDitkj/pLZoQAyl+0PwCWkCDBV5 GYMyJllscuFLrAtvmHbgfE5HnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkfeEYh JueBfhoL6NKPSv+9CZxiMB8GA1UdIwQYMBaAFD87L1s7rlKmtWksr5KiVUsG2oY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy9EMTlBRUUzRUZG MTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVxYTFhU3l2a3FKVlN3YmFo ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6c3ZXenV1VXFhMWFTeXZrcUpWU3diYWhqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzgxQy9EMTlBRUUzRUZGMTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVx YTFhU3l2a3FKVlN3YmFoajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhrGgdF41JtfgTyQ23lL/NXdIiwG2EAoVpaImqRhJst38ETA4wiSM1 DQzwihRwkrqxtjvvt8baCypn8fEQ3FzXPtMh6FWJzht9qLt988BjHtTwgxCNmgyg 9qk5Czd7O1KHwAsBnEJ83b9YkVRfx5kQM9vy1SMF+rif54HLkaPHwzn4uC16Gue1 ZjzuNoR6NWwshIjqQa9aRaW10FEx/zj7UNlDZKP3jcB26CKDVOkiCRh5rStS/bAy J2WQ8LXmp6xkUtc1xt61lmclVp18SOTN5ZO4i34R/wJBX9zt3QdALWtA6oqeTclW cMegjd/3FC55SIIMDiWfnv8LMpiLm7F4 -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:40 2025 by rpki-client