$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: riJ4EixUuC2yeSm6nrkcreR1H3/EJQ7JpSqc9wIXnsQ= Subject key identifier: 9D:75:A5:91:0C:E9:F1:34:06:78:5A:42:35:F2:26:A9:B9:43:E1:77 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 0354 Signing time: Mon 11 Aug 2025 01:11:54 +0000 Manifest this update: Mon 11 Aug 2025 01:11:54 +0000 Manifest next update: Mon 18 Aug 2025 01:11:54 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: 03sk3bZyLaRojN0H5H6nstuxYnyzhPUNWNK7hJvYVgc=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: hQOYHlCjx2ScuN+oMwFJ/ejTbPq4orU4F7qi3kUTHdM=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: 7Gmx6aG6mVa6tW4ZmRdx25+Dm056uxm4nK4BIHzJbm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Aug 11 01:11:54 2025 GMT Not After : Aug 18 01:11:54 2025 GMT Subject: CN=6899435a-a723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:62:4f:42:ea:c8:e6:ff:10:da:e3:52:31: 7a:87:12:7b:b1:1b:36:bb:57:d1:b7:7c:d7:16:3b: b2:c0:7e:3f:17:6d:3e:b3:15:59:ec:aa:1d:0c:be: 15:6c:f1:e0:48:0d:39:22:b9:d9:15:51:0a:fe:66: 1b:2c:7d:7e:17:68:06:fe:bc:44:51:3b:24:f9:68: 00:f0:01:b8:11:b9:4a:60:9c:62:b3:67:e3:8a:42: aa:03:7b:87:9e:5e:0e:ac:c8:93:64:6a:bf:30:32: 8e:dc:1a:d4:b5:b6:d7:e5:ce:d3:47:21:6d:51:42: 71:b0:97:77:48:0d:34:d2:d0:f6:ce:dc:ed:eb:a2: eb:97:fd:00:9f:bf:7b:2c:a2:4c:bd:ae:4f:bf:ca: 87:13:d3:bf:87:3c:7b:e9:e4:87:72:f2:32:06:82: 6f:d1:61:3c:42:38:cc:4b:82:2b:78:b8:27:2d:3e: 0b:63:a7:5c:0d:6e:68:ed:94:28:c6:e8:95:19:d8: 5f:cf:8e:b1:68:56:d0:80:9e:0f:98:d7:7c:c4:c6: e4:90:89:5c:05:cd:3f:40:27:08:e3:a7:91:a6:a5: ae:52:32:93:e3:ca:f5:be:4c:8c:3b:53:83:6b:7f: 3c:ae:ee:39:49:2e:ec:fb:4d:6a:64:f8:bb:cc:8e: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:A5:91:0C:E9:F1:34:06:78:5A:42:35:F2:26:A9:B9:43:E1:77 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:17:3a:37:00:87:61:ab:cf:17:d4:6d:de:73:f9:2a:8f:cb: 77:4b:fc:c3:e4:f9:52:71:ae:74:18:b2:e1:5e:38:71:1f:d8: 15:85:42:04:a0:50:26:ec:0e:99:ed:4c:56:81:f7:d1:d4:f2: 65:c1:b1:92:6d:8d:b0:e2:c1:3c:5e:56:ea:d0:1e:d6:a2:03: 82:b8:04:63:fb:71:c8:cc:4f:7b:ac:07:43:f8:48:8d:1f:3b: a2:03:58:38:e5:4e:d0:be:ef:b9:f9:7c:4b:cf:91:48:7c:e3: 54:8d:50:d2:ad:3c:c5:9c:01:23:1f:65:94:65:4f:c5:43:f4: 96:8e:e1:a6:63:c6:53:50:f5:4c:5e:86:e8:2b:16:24:15:2f: 55:e4:b7:30:a5:bc:aa:a8:e8:4d:6f:75:b0:b2:9e:b1:bf:9f: 60:ed:27:08:78:92:1e:d2:3b:7b:21:73:85:ad:1d:dc:7e:ef: c2:a3:af:ff:73:58:2d:4f:ea:34:a6:d2:b6:9e:62:16:83:0a: f3:93:a5:45:c1:87:72:71:7f:7e:c1:bb:87:bc:e0:ae:e0:44: 56:d8:d8:70:9f:6c:49:34:a4:8a:b3:6a:46:d5:33:09:15:79: 7f:ad:7f:02:19:59:41:0a:e8:c1:4b:b8:1c:49:b3:18:26:0d: ff:cf:31:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjUwODExMDExMTU0WhcNMjUwODE4MDExMTU0WjAYMRYwFAYD VQQDEw02ODk5NDM1YS1hNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqNiT0LqyOb/ENrjUjF6hxJ7sRs2u1fRt3zXFjuywH4/F20+sxVZ7KodDL4V bPHgSA05IrnZFVEK/mYbLH1+F2gG/rxEUTsk+WgA8AG4EblKYJxis2fjikKqA3uH nl4OrMiTZGq/MDKO3BrUtbbX5c7TRyFtUUJxsJd3SA000tD2ztzt66Lrl/0An797 LKJMva5Pv8qHE9O/hzx76eSHcvIyBoJv0WE8QjjMS4IreLgnLT4LY6dcDW5o7ZQo xuiVGdhfz46xaFbQgJ4PmNd8xMbkkIlcBc0/QCcI46eRpqWuUjKT48r1vkyMO1OD a388ru45SS7s+01qZPi7zI7CYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ11pZEM 6fE0BnhaQjXyJqm5Q+F3MB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArFzo3AIdhq88X1G3ec/kqj8t3S/zD5PlSca50GLLhXjhxH9gVhUIE oFAm7A6Z7UxWgffR1PJlwbGSbY2w4sE8Xlbq0B7WogOCuARj+3HIzE97rAdD+EiN HzuiA1g45U7Qvu+5+XxLz5FIfONUjVDSrTzFnAEjH2WUZU/FQ/SWjuGmY8ZTUPVM XoboKxYkFS9V5LcwpbyqqOhNb3Wwsp6xv59g7ScIeJIe0jt7IXOFrR3cfu/Co6// c1gtT+o0ptK2nmIWgwrzk6VFwYdycX9+wbuHvOCu4ERW2Nhwn2xJNKSKs2pG1TMJ FXl/rX8CGVlBCujBS7gcSbMYJg3/zzGt -----END CERTIFICATE-----Generated at Wed Aug 13 00:30:20 2025 by rpki-client