$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: b39kfgP/SZHB7YHYF2DlG/giaID8DVHXdBAiU12VdzU= Subject key identifier: 45:8F:A7:D5:C5:F0:05:F1:21:FB:12:89:E3:14:76:C4:30:91:43:BB Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 031F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 031A Signing time: Thu 07 Aug 2025 01:46:24 +0000 Manifest this update: Thu 07 Aug 2025 01:46:24 +0000 Manifest next update: Thu 14 Aug 2025 01:46:24 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: Lh+RrI1lNOSvCD3J5hpaOI7LyVxhzU/X0deCiI+in/U=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: fHu5/MPKlLCuXm6cY4db7lpTtm9fZVRYzzIdcMcSwUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: Aug 7 01:46:24 2025 GMT Not After : Aug 14 01:46:24 2025 GMT Subject: CN=68940570-4ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:f9:0c:0f:2a:18:b0:12:77:fe:8d:ea:a6: 31:09:34:40:00:46:6c:77:9a:b4:6c:d0:61:99:7b: 8d:f0:fc:1b:12:64:a0:a0:52:96:05:6b:49:88:5d: 55:d6:4a:92:91:5b:bc:1c:43:df:93:3f:4a:b5:50: b3:5d:86:fb:5d:f5:6d:31:c6:c5:52:1f:fd:0a:c7: 05:cf:0f:bd:af:d3:b5:ce:65:7d:f9:9c:70:24:c9: ac:e5:67:ee:4e:95:b0:ba:97:59:03:84:38:d0:e4: 19:b6:6b:52:2b:fb:89:1d:fa:1c:69:d5:56:07:39: 9e:1d:1f:36:c2:bd:b3:0a:31:31:9e:3d:4e:d2:ce: da:7a:38:ce:4a:7f:35:90:93:4e:85:56:e3:98:77: 1a:1f:9b:e2:6f:4e:d2:10:07:e0:67:60:b3:c8:d3: 41:5e:10:44:d9:07:46:9a:ca:1a:2e:de:ae:c4:38: 75:b5:99:d5:e3:f2:be:91:ba:60:b9:c2:f6:8d:1c: 80:b8:92:06:6a:29:33:6f:33:4b:6e:0f:4b:00:7c: f7:91:12:f2:79:bc:db:40:6b:d4:e6:16:8e:66:6b: c2:57:d3:4a:b0:6c:f7:c2:6e:02:04:59:da:02:11: 2b:92:9d:68:ae:78:85:4f:0b:9e:97:36:d2:2c:1f: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8F:A7:D5:C5:F0:05:F1:21:FB:12:89:E3:14:76:C4:30:91:43:BB X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e2:19:a9:11:69:c8:4f:9a:f8:42:75:b4:dd:04:86:fa:59: ec:15:fc:9c:da:74:9b:3d:20:4f:1c:9c:44:ec:90:18:74:ab: 74:e5:a7:26:72:3d:31:46:b3:96:b3:f8:14:b2:ed:92:ea:40: 31:34:28:a0:dc:be:b1:1f:cb:4c:65:48:de:17:08:ee:59:42: fd:bc:51:36:8b:a6:4a:14:0b:ad:17:9e:38:1a:8c:eb:c0:cf: be:a8:23:4f:27:85:5e:27:2c:54:b1:77:cc:8e:e5:f7:d4:d6: 09:0e:2f:54:3d:48:23:9a:79:a1:0c:d6:1a:57:34:4f:6a:a9: ce:6c:ae:7e:3b:d2:74:74:b1:ee:0e:97:89:cb:39:37:54:10: 3a:0d:c9:84:a7:1c:cf:86:17:1a:2d:f7:d6:e4:2f:80:e7:c3: e7:40:d1:d9:90:7e:2a:c9:2b:8e:31:b3:1d:00:16:1b:a1:94: 08:a3:e9:bd:19:9c:20:1a:a3:0c:ff:e0:81:09:9a:28:56:6c: a0:61:ce:33:b7:1d:ae:24:85:15:ad:65:3d:2f:09:e8:c0:88: 8f:5e:87:61:cd:37:27:76:23:a6:67:90:80:66:42:38:5e:42: 53:66:c2:d9:09:cd:91:e9:76:a5:30:21:e6:69:21:74:83:35: 25:99:20:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjUwODA3MDE0NjI0WhcNMjUwODE0MDE0NjI0WjAYMRYwFAYD VQQDEw02ODk0MDU3MC00ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6n5DA8qGLASd/6N6qYxCTRAAEZsd5q0bNBhmXuN8PwbEmSgoFKWBWtJiF1V 1kqSkVu8HEPfkz9KtVCzXYb7XfVtMcbFUh/9CscFzw+9r9O1zmV9+ZxwJMms5Wfu TpWwupdZA4Q40OQZtmtSK/uJHfocadVWBzmeHR82wr2zCjExnj1O0s7aejjOSn81 kJNOhVbjmHcaH5vib07SEAfgZ2CzyNNBXhBE2QdGmsoaLt6uxDh1tZnV4/K+kbpg ucL2jRyAuJIGaikzbzNLbg9LAHz3kRLyebzbQGvU5haOZmvCV9NKsGz3wm4CBFna AhErkp1orniFTwuelzbSLB/BTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWPp9XF 8AXxIfsSieMUdsQwkUO7MB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK4hmpEWnIT5r4QnW03QSG+lnsFfyc2nSbPSBPHJxE7JAYdKt05acm cj0xRrOWs/gUsu2S6kAxNCig3L6xH8tMZUjeFwjuWUL9vFE2i6ZKFAutF544Gozr wM++qCNPJ4VeJyxUsXfMjuX31NYJDi9UPUgjmnmhDNYaVzRPaqnObK5+O9J0dLHu DpeJyzk3VBA6DcmEpxzPhhcaLffW5C+A58PnQNHZkH4qySuOMbMdABYboZQIo+m9 GZwgGqMM/+CBCZooVmygYc4ztx2uJIUVrWU9LwnowIiPXodhzTcndiOmZ5CAZkI4 XkJTZsLZCc2R6XalMCHmaSF0gzUlmSA+ -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:17 2025 by rpki-client