$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: stUH0A9sjeQNOOayohVqm4FTYXO+40ja/3x5jGFjiN0= Subject key identifier: 3B:62:F7:FC:CF:4A:01:75:3C:4F:E2:6C:1A:9C:BD:D9:4E:5E:D2:21 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 1177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 1163 Signing time: Fri 08 Aug 2025 17:25:49 +0000 Manifest this update: Fri 08 Aug 2025 17:25:48 +0000 Manifest next update: Fri 15 Aug 2025 17:25:48 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: InR0Z0/0yyM0xS582mWg+KoxrKnitJSAfTQUvsGI2Vg=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4471 (0x1177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Aug 8 17:25:48 2025 GMT Not After : Aug 15 17:25:48 2025 GMT Subject: CN=6896331c-85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:e6:89:ab:f1:c6:19:ec:fb:88:6c:84:52: d2:f6:7a:2f:fb:a6:d2:32:23:f2:e4:b6:83:89:44: 42:39:dc:f6:dc:49:e0:ce:7d:a3:ab:cd:56:16:09: 5d:98:c1:2b:a2:a1:b4:78:73:19:41:4f:7a:d3:70: 20:ee:bc:96:5d:d8:fa:43:b6:93:ae:93:e2:54:04: 5c:e6:ff:be:96:40:c6:4e:c6:19:93:31:f3:09:f2: 58:e3:ad:2d:f5:5f:f0:f5:c7:0f:dc:4d:a7:f2:fa: 30:69:2c:1e:e8:f4:3e:41:0e:06:76:89:28:79:60: 26:72:32:22:65:58:bd:c9:45:c8:5c:04:23:ad:d0: 66:f6:1a:6b:41:ba:b9:46:19:a1:c9:12:e7:1e:9f: 65:1d:77:c5:24:44:e7:57:8d:de:49:ec:9b:ec:a4: 3e:ea:06:f6:b9:ce:5d:ef:e9:36:93:66:82:0c:da: 37:dd:00:f0:3b:9a:07:29:4a:44:79:6a:10:49:bf: dc:f1:3f:e8:42:0f:8e:01:6c:4c:99:dc:9d:20:2a: bc:08:ca:3d:4b:a5:03:1b:f9:78:f4:d1:8b:2e:27: 7a:c8:28:fd:6a:97:ce:ed:2d:4d:cd:ec:5a:df:4c: c7:18:c3:86:2d:0b:78:37:a4:e3:02:83:a2:59:05: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:62:F7:FC:CF:4A:01:75:3C:4F:E2:6C:1A:9C:BD:D9:4E:5E:D2:21 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:76:88:57:39:f0:b8:b8:d9:a6:d7:46:c0:16:f5:89:63:0f: 61:22:bc:b1:55:1d:c5:30:47:ff:22:b2:3c:81:2f:c6:bb:3b: ac:75:08:78:07:a0:2c:a5:17:bc:29:96:2b:68:85:de:5e:99: d3:02:8a:d3:0c:6f:63:56:9f:83:c6:9d:fe:c8:8c:69:f7:5c: d3:ab:df:27:95:4d:ea:dd:ba:89:ce:d3:ba:8e:87:7a:8a:5b: 88:61:33:93:01:3e:ff:2f:92:ab:33:5f:ba:79:47:53:2b:2b: f7:6f:5d:ce:93:38:63:8b:8c:5a:30:ba:96:c4:f8:97:41:cc: 29:55:85:a0:07:09:17:e8:73:eb:4d:0e:33:1c:38:66:c6:27: 8b:e8:40:56:ed:af:a8:ee:1c:4e:0b:50:c5:43:51:59:fa:51: 5a:0f:3f:c3:82:b8:9c:e4:80:15:51:50:52:8a:da:c7:00:36: e9:50:30:13:38:91:2c:68:3d:59:0d:71:e5:06:28:a9:93:81: a7:4a:d9:dc:cc:64:0c:00:bc:4b:3d:60:a4:bf:b0:57:f9:4d: cc:cb:83:88:80:b4:ed:68:2b:6a:be:20:57:d3:23:9d:4c:a2: 10:ff:9b:29:9d:c8:da:e8:09:08:cc:3e:c3:80:35:a4:68:e3: 9a:45:de:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUwODA4MTcyNTQ4WhcNMjUwODE1MTcyNTQ4WjAYMRYwFAYD VQQDEw02ODk2MzMxYy04NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqzmiavxxhns+4hshFLS9nov+6bSMiPy5LaDiURCOdz23Engzn2jq81WFgld mMEroqG0eHMZQU9603Ag7ryWXdj6Q7aTrpPiVARc5v++lkDGTsYZkzHzCfJY460t 9V/w9ccP3E2n8vowaSwe6PQ+QQ4GdokoeWAmcjIiZVi9yUXIXAQjrdBm9hprQbq5 RhmhyRLnHp9lHXfFJETnV43eSeyb7KQ+6gb2uc5d7+k2k2aCDNo33QDwO5oHKUpE eWoQSb/c8T/oQg+OAWxMmdydICq8CMo9S6UDG/l49NGLLid6yCj9apfO7S1Nzexa 30zHGMOGLQt4N6TjAoOiWQVQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDti9/zP SgF1PE/ibBqcvdlOXtIhMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmdohXOfC4uNmm10bAFvWJYw9hIryxVR3FMEf/IrI8gS/GuzusdQh4 B6AspRe8KZYraIXeXpnTAorTDG9jVp+Dxp3+yIxp91zTq98nlU3q3bqJztO6jod6 iluIYTOTAT7/L5KrM1+6eUdTKyv3b13Okzhji4xaMLqWxPiXQcwpVYWgBwkX6HPr TQ4zHDhmxieL6EBW7a+o7hxOC1DFQ1FZ+lFaDz/Dgric5IAVUVBSitrHADbpUDAT OJEsaD1ZDXHlBiipk4GnStnczGQMALxLPWCkv7BX+U3My4OIgLTtaCtqviBX0yOd TKIQ/5spncja6AkIzD7DgDWkaOOaRd4d -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:52 2025 by rpki-client