$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: WRLYWPdLwxF645vtw74UMzH2/n0T0Y7b05AsXdXJy9I= Subject key identifier: 46:A8:C8:2F:05:E8:E5:20:82:04:32:AF:AF:A5:63:6D:0B:6D:4E:67 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 53 Signing time: Tue 05 Aug 2025 07:52:14 +0000 Manifest this update: Tue 05 Aug 2025 07:52:14 +0000 Manifest next update: Tue 12 Aug 2025 07:52:14 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: E8rfmWJ+zhIwsHSB/DEUo++4o777Qj6VuxdMtC7F27Q=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Aug 5 07:52:14 2025 GMT Not After : Aug 12 07:52:14 2025 GMT Subject: CN=6891b82e-c208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:cc:9c:3c:bf:7d:1c:48:59:35:fa:b7:d9: 4c:31:f5:32:25:c1:9c:43:d7:2c:f2:89:9e:97:ab: b1:c4:08:c3:62:12:fd:26:1c:00:48:20:e1:b5:7b: f2:2e:65:12:4d:b4:e2:44:6d:28:75:c3:0b:4a:ec: c3:61:fd:ff:f6:81:45:bf:39:35:cf:31:f2:e8:33: d5:aa:88:fd:77:41:b1:0f:7b:0e:8b:d2:44:d6:65: a0:37:22:8b:ad:97:5b:bc:5c:b7:79:31:96:25:bd: e0:a8:de:2e:93:1c:18:f1:a6:76:30:86:f6:87:b2: bf:2b:61:01:d7:1b:7a:6b:d3:56:f8:29:05:b8:d0: 7d:07:ff:0e:77:cc:e9:c1:fa:55:f1:d1:87:2f:f0: c9:7a:c3:3b:18:d3:bd:3c:d8:c8:e5:cf:7d:cc:09: 40:bf:6d:24:a1:f1:d1:5d:25:fd:ee:dc:e8:8c:79: 47:6e:da:77:71:e9:77:19:1f:25:75:c6:69:cf:a4: 63:0d:61:f3:20:d8:d6:cb:7a:04:42:0d:d7:a9:99: 46:ca:ed:c7:97:c5:29:22:41:eb:f0:49:06:bb:06: d2:37:8f:fc:33:d1:14:31:e0:43:35:60:9e:54:6b: 2f:34:7f:07:23:d7:3f:c4:aa:8d:62:a1:06:59:63: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:C8:2F:05:E8:E5:20:82:04:32:AF:AF:A5:63:6D:0B:6D:4E:67 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:51:6e:49:6a:c9:a0:2a:fb:c0:36:aa:eb:61:63:e6:a0:31: 3e:ea:f5:c9:a6:2a:6d:9e:27:28:4f:19:65:e4:bb:7c:a4:e8: 96:ce:1e:24:20:4c:2a:a2:33:f6:ef:6e:fa:cd:98:c2:2c:09: d3:64:74:b6:b3:14:3d:bf:a3:c2:3b:55:d5:87:08:0a:b0:23: 68:d7:b3:a5:43:17:f2:cb:10:89:32:72:5e:d4:80:04:2e:a4: c2:f5:00:14:2a:4e:99:53:c2:e1:c6:00:a4:21:5d:b1:34:d6: 81:b1:2d:04:5b:87:b8:7f:0f:fe:70:1a:36:4b:9c:db:bc:50: cb:53:8f:38:3e:e8:52:fb:16:ae:ef:80:de:49:05:69:7b:40: 75:15:d6:3e:32:3f:06:6e:e8:cc:1b:34:55:06:9c:89:8b:54: e0:bb:ee:35:32:3f:bb:26:30:1f:a1:0d:db:ce:e0:7c:59:32: 40:74:30:7c:e6:23:3e:27:7e:3d:d1:0b:22:a0:80:cc:81:55: 6a:7e:04:b1:69:35:e6:cc:77:42:1e:49:5c:70:33:de:65:f5: 55:ac:29:93:e8:ff:91:7f:9b:c6:7e:30:39:4c:c1:bc:1b:a6: b3:0a:ca:21:e8:29:37:6c:1d:b3:70:58:69:3e:cd:79:2a:fc: dc:9c:60:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTA4MDUwNzUyMTRaFw0yNTA4MTIwNzUyMTRaMBgxFjAUBgNV BAMTDTY4OTFiODJlLWMyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuKcycPL99HEhZNfq32Uwx9TIlwZxD1yzyiZ6Xq7HECMNiEv0mHABIIOG1e/Iu ZRJNtOJEbSh1wwtK7MNh/f/2gUW/OTXPMfLoM9WqiP13QbEPew6L0kTWZaA3Iout l1u8XLd5MZYlveCo3i6THBjxpnYwhvaHsr8rYQHXG3pr01b4KQW40H0H/w53zOnB +lXx0Ycv8Ml6wzsY07082Mjlz33MCUC/bSSh8dFdJf3u3OiMeUdu2ndx6XcZHyV1 xmnPpGMNYfMg2NbLegRCDdepmUbK7ceXxSkiQevwSQa7BtI3j/wz0RQx4EM1YJ5U ay80fwcj1z/Eqo1ioQZZYxy5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURqjILwXo 5SCCBDKvr6VjbQttTmcwHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3 SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKRRbklqyaAq+8A2quthY+agMT7q9cmmKm2eJyhPGWXku3yk6JbOHiQg TCqiM/bvbvrNmMIsCdNkdLazFD2/o8I7VdWHCAqwI2jXs6VDF/LLEIkycl7UgAQu pML1ABQqTplTwuHGAKQhXbE01oGxLQRbh7h/D/5wGjZLnNu8UMtTjzg+6FL7Fq7v gN5JBWl7QHUV1j4yPwZu6MwbNFUGnImLVOC77jUyP7smMB+hDdvO4HxZMkB0MHzm Iz4nfj3RCyKggMyBVWp+BLFpNebMd0IeSVxwM95l9VWsKZPo/5F/m8Z+MDlMwbwb prMKyiHoKTdsHbNwWGk+zXkq/NycYJ0= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:42 2025 by rpki-client