$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: OouigJUy0HuGq5WmzClbjzzZj/Oy1nLAD6vUVsSy1Wc= Subject key identifier: B7:35:9E:98:DF:96:33:42:C9:BD:6A:6B:0C:E4:FD:E6:91:DD:57:C7 Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 043C Signing time: Mon 11 Aug 2025 00:27:54 +0000 Manifest this update: Mon 11 Aug 2025 00:27:53 +0000 Manifest next update: Mon 18 Aug 2025 00:27:53 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: reZzNTHQ80MJwCqhU8kr0OTsji0eSARAf0cQri6b8jk=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Aug 11 00:27:53 2025 GMT Not After : Aug 18 00:27:53 2025 GMT Subject: CN=6899390a-b1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:02:95:59:3b:24:42:b9:16:55:44:3a:58: a3:e3:6d:60:77:b1:b7:f3:49:28:7f:b8:8d:43:15: 36:63:43:dc:75:6d:a4:84:4c:a5:07:e6:45:40:62: 81:88:76:81:b5:24:c8:44:79:30:6b:be:43:ee:f3: d2:ff:4f:d0:54:c9:09:2b:3f:2d:24:d2:a6:a5:2b: c2:b1:c1:83:09:32:76:34:34:aa:c6:3e:e1:fa:5c: 76:fc:5e:d9:26:49:d5:02:a7:8a:f1:21:35:8d:98: 9d:b6:65:97:f0:c8:3f:8d:20:47:84:c4:4c:9d:69: d2:9f:25:63:03:36:cf:fd:c3:02:59:26:a1:63:b8: 35:c5:7a:c4:98:1c:61:c9:6d:2e:d3:fc:6d:b1:ba: 4b:0c:65:f4:2c:4f:5e:76:4d:b9:ab:d7:2c:d0:92: 70:ec:26:4d:3c:d4:6b:ac:2e:64:80:f1:93:b7:93: 4e:cb:f5:0d:9f:c5:f9:bf:38:87:ee:d8:7c:56:9c: 91:8c:1c:db:02:58:5d:c0:e9:a0:3f:29:ca:54:86: f1:a0:25:1d:c9:a0:af:a0:c8:3c:46:34:ad:2d:c1: f5:27:8f:47:ea:59:ac:e7:68:d8:2c:a7:ff:61:71: 1b:91:53:29:64:8b:73:ff:4c:33:68:a8:ea:b2:78: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:9E:98:DF:96:33:42:C9:BD:6A:6B:0C:E4:FD:E6:91:DD:57:C7 X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:8c:a4:78:df:e9:8f:4e:69:0f:0b:99:14:7a:de:60:96:65: d6:b6:e0:e8:79:a2:b0:1d:da:b0:df:eb:83:cf:5d:a3:a6:3f: 67:be:b2:9c:38:20:bb:96:3e:18:85:86:38:c9:e2:68:3a:70: 6b:12:fb:c8:d0:0e:59:d5:e1:1b:51:38:ca:41:d6:16:81:dc: c5:fb:5d:45:83:2e:c1:07:df:03:a4:2f:ed:49:57:97:a2:c0: b3:55:48:60:4d:53:6f:0b:85:3a:a3:af:09:99:bb:bf:e5:13: ef:fe:7d:f2:59:b0:8d:45:d5:ab:0b:d6:29:ab:19:11:1a:a1: fe:bb:71:e4:17:85:34:9e:a6:fc:ae:73:28:92:cc:42:f4:b5: e3:ab:ad:64:81:2c:3e:1c:b3:81:5a:02:44:f8:57:2a:8f:7c: 7f:48:97:c9:60:6f:fc:03:e9:6f:3e:25:23:48:71:df:0e:a9: 70:ef:ac:6e:0a:78:fc:35:58:20:4e:db:11:c5:4a:8a:1d:43: 02:af:5b:c9:d1:77:5f:05:fc:07:56:54:55:b1:45:dc:6f:3f: 32:6f:f0:cd:bb:4d:5e:8a:87:ec:7b:80:49:32:aa:db:ed:23: 5f:81:52:23:df:ab:2e:6d:d6:2b:fb:a4:c8:aa:62:e2:04:c9: 20:fc:c1:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUwODExMDAyNzUzWhcNMjUwODE4MDAyNzUzWjAYMRYwFAYD VQQDEw02ODk5MzkwYS1iMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt60ClVk7JEK5FlVEOlij421gd7G380kof7iNQxU2Y0PcdW2khEylB+ZFQGKB iHaBtSTIRHkwa75D7vPS/0/QVMkJKz8tJNKmpSvCscGDCTJ2NDSqxj7h+lx2/F7Z JknVAqeK8SE1jZidtmWX8Mg/jSBHhMRMnWnSnyVjAzbP/cMCWSahY7g1xXrEmBxh yW0u0/xtsbpLDGX0LE9edk25q9cs0JJw7CZNPNRrrC5kgPGTt5NOy/UNn8X5vziH 7th8VpyRjBzbAlhdwOmgPynKVIbxoCUdyaCvoMg8RjStLcH1J49H6lms52jYLKf/ YXEbkVMpZItz/0wzaKjqsngb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc1npjf ljNCyb1qawzk/eaR3VfHMB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBjKR43+mPTmkPC5kUet5glmXWtuDoeaKwHdqw3+uDz12jpj9nvrKc OCC7lj4YhYY4yeJoOnBrEvvI0A5Z1eEbUTjKQdYWgdzF+11Fgy7BB98DpC/tSVeX osCzVUhgTVNvC4U6o68Jmbu/5RPv/n3yWbCNRdWrC9YpqxkRGqH+u3HkF4U0nqb8 rnMoksxC9LXjq61kgSw+HLOBWgJE+Fcqj3x/SJfJYG/8A+lvPiUjSHHfDqlw76xu Cnj8NVggTtsRxUqKHUMCr1vJ0XdfBfwHVlRVsUXcbz8yb/DNu01eiofse4BJMqrb 7SNfgVIj36subdYr+6TIqmLiBMkg/MH7 -----END CERTIFICATE-----Generated at Tue Aug 12 14:44:40 2025 by rpki-client