$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: 3l3rbDDqdWtVGmMv5ggTtUi9yikrvf0PMSC4B362qzk= Subject key identifier: 7C:B6:17:CB:E6:A2:13:FA:D4:36:FF:CE:FE:F7:46:F1:4F:A5:79:90 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 03B4 Signing time: Thu 07 Aug 2025 01:16:38 +0000 Manifest this update: Thu 07 Aug 2025 01:16:38 +0000 Manifest next update: Thu 14 Aug 2025 01:16:38 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: cmWjDaSJaFgosAzIFteQFfFe/hOKPFtKteIK/VNRYGQ=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Aug 7 01:16:38 2025 GMT Not After : Aug 14 01:16:38 2025 GMT Subject: CN=6893fe76-987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:d0:84:7f:24:1f:12:6f:4c:bd:ac:c6:13: f8:71:12:a0:52:d0:cf:d5:21:74:62:51:c9:66:3b: 76:24:bc:0e:e0:de:6d:69:d0:c7:2b:f6:c9:87:44: e4:f4:64:f6:98:d2:48:bc:0d:81:ca:79:18:39:23: d2:77:03:3b:dd:55:aa:57:66:e9:dc:e1:9d:ff:0d: 6b:68:1e:1c:e6:b2:d4:63:92:f0:a4:4d:e3:1a:a2: a2:54:c9:26:42:7f:29:48:29:3d:f0:2d:f2:ee:bf: eb:c9:3c:89:70:f3:c4:08:86:dc:01:18:82:b0:e5: 86:aa:f5:8b:1a:a5:5c:57:ab:ff:59:d0:86:66:63: 06:f9:c1:b3:42:4a:89:2d:c8:fa:85:a6:8c:1b:9c: f7:68:3f:39:40:1e:47:25:45:35:f7:0f:a2:a7:b7: ba:ba:7b:42:2c:0e:62:de:d5:20:ed:57:ed:de:37: 35:7d:5f:77:1e:be:6f:fc:e1:a9:1a:d4:5a:81:4b: b0:89:ee:68:d8:30:fc:21:c1:cc:3f:e2:32:0c:c6: c6:d0:56:63:f0:00:63:fe:fa:d5:7f:57:f6:31:77: b6:c9:30:4d:0f:5f:c3:d5:39:31:4e:28:d9:e5:40: d3:03:38:40:d2:51:db:6e:76:bc:85:dc:5c:8b:69: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:17:CB:E6:A2:13:FA:D4:36:FF:CE:FE:F7:46:F1:4F:A5:79:90 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:96:80:16:85:ea:eb:74:96:b7:6a:82:cb:be:b6:83:8d:be: 5a:ab:d3:35:e6:e8:e4:3a:ba:66:82:48:da:44:f5:5f:36:52: 9f:6d:3f:fb:7c:75:0e:5e:17:d4:7a:f9:4d:d4:3f:46:52:27: db:36:27:69:51:e9:4e:06:84:66:34:dc:4f:b0:fd:1f:26:df: d9:21:ea:36:a3:47:db:78:a9:e2:94:4c:8a:ae:ae:96:23:ac: d0:20:0b:4a:77:5d:3e:3e:05:ae:65:e3:51:a3:22:ec:66:9a: 8e:41:94:ce:d9:1f:3a:4c:14:3c:d4:d6:4f:6f:19:b2:7d:54: e5:f6:cc:2c:ad:dc:e9:08:2b:29:7b:44:81:67:0c:6d:e5:f1: cd:cb:b9:3a:0a:73:7a:66:9c:97:72:bc:d4:6d:03:f1:ca:81: a7:39:8b:56:1c:38:fc:ac:57:0b:46:03:33:ba:a6:e8:18:46: 05:b7:d2:db:a6:22:f0:af:bc:5f:34:6c:2d:4a:76:cd:8e:a1: e2:1e:d6:1f:f5:b7:97:d7:f0:43:dd:2d:b6:d2:c0:7e:e6:99: 5b:41:90:f1:cd:74:2a:01:d6:79:f3:f7:a0:bf:5f:62:47:7a: 9d:1e:1b:b8:b6:48:8f:9a:60:5c:eb:33:70:72:9a:05:c5:4e: a4:a4:c3:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwODA3MDExNjM4WhcNMjUwODE0MDExNjM4WjAYMRYwFAYD VQQDEw02ODkzZmU3Ni05ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CLQhH8kHxJvTL2sxhP4cRKgUtDP1SF0YlHJZjt2JLwO4N5tadDHK/bJh0Tk 9GT2mNJIvA2BynkYOSPSdwM73VWqV2bp3OGd/w1raB4c5rLUY5LwpE3jGqKiVMkm Qn8pSCk98C3y7r/ryTyJcPPECIbcARiCsOWGqvWLGqVcV6v/WdCGZmMG+cGzQkqJ Lcj6haaMG5z3aD85QB5HJUU19w+ip7e6untCLA5i3tUg7Vft3jc1fV93Hr5v/OGp GtRagUuwie5o2DD8IcHMP+IyDMbG0FZj8ABj/vrVf1f2MXe2yTBND1/D1TkxTijZ 5UDTAzhA0lHbbna8hdxci2mGPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy2F8vm ohP61Db/zv73RvFPpXmQMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTloAWherrdJa3aoLLvraDjb5aq9M15ujkOrpmgkjaRPVfNlKfbT/7 fHUOXhfUevlN1D9GUifbNidpUelOBoRmNNxPsP0fJt/ZIeo2o0fbeKnilEyKrq6W I6zQIAtKd10+PgWuZeNRoyLsZpqOQZTO2R86TBQ81NZPbxmyfVTl9swsrdzpCCsp e0SBZwxt5fHNy7k6CnN6ZpyXcrzUbQPxyoGnOYtWHDj8rFcLRgMzuqboGEYFt9Lb piLwr7xfNGwtSnbNjqHiHtYf9beX1/BD3S220sB+5plbQZDxzXQqAdZ58/egv19i R3qdHhu4tkiPmmBc6zNwcpoFxU6kpMPB -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:26 2025 by rpki-client