$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: BECxmZe5c361msGEIMgmnU59XiBq2IbfDctlV7Wg+Vw= Subject key identifier: 13:3F:6C:51:E1:44:F6:63:43:A6:EC:1E:97:D6:5B:04:45:4C:82:A8 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 04DB Signing time: Sun 10 Aug 2025 23:58:38 +0000 Manifest this update: Sun 10 Aug 2025 23:58:38 +0000 Manifest next update: Sun 17 Aug 2025 23:58:38 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: JgN5SCf1L0MHLMBM1N5QNOK1fYgMdbhP/qJ/MBQeS8w=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Aug 10 23:58:38 2025 GMT Not After : Aug 17 23:58:38 2025 GMT Subject: CN=6899322e-5ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:2a:a6:80:ca:00:cd:be:3f:88:9c:8f:d6: 9b:5d:f8:c3:dd:56:77:cc:1a:53:b5:52:55:d0:78: 57:59:e9:7d:ce:90:68:09:3f:c9:54:68:10:f2:f0: 73:b6:ce:95:24:b4:11:7e:73:17:d8:33:cb:09:45: d9:74:16:53:96:a1:16:98:b7:b5:da:b6:e8:b5:da: 44:38:97:b4:18:15:03:65:af:50:82:15:ea:a8:d3: 93:d3:07:58:be:a2:a8:1e:60:6a:ee:2e:92:b2:80: c4:ce:aa:2c:97:e3:4d:92:44:cd:bb:be:59:94:8b: b0:94:48:26:03:64:74:85:23:57:e9:b4:41:36:66: 69:21:dc:fd:bd:8d:65:2f:6e:b3:63:a1:09:8b:5a: 2a:33:24:f8:3f:82:58:7c:c0:cc:c3:37:a0:ea:29: 95:e5:49:60:08:04:05:f7:01:da:58:a4:ae:3a:dd: 88:bd:d7:db:0f:d5:7a:6c:49:70:44:87:a4:0b:7b: b6:e6:04:d7:f0:cb:58:8a:d1:0f:9c:63:95:cb:56: 49:a9:7e:33:a7:51:eb:25:09:5a:84:84:88:79:fa: 68:fa:e9:f1:0f:36:54:95:49:b0:b2:6c:58:73:05: 5f:9b:be:78:aa:b7:50:e5:e2:b2:6f:bf:4e:72:fd: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:6C:51:E1:44:F6:63:43:A6:EC:1E:97:D6:5B:04:45:4C:82:A8 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:6b:a3:3d:cf:b2:b4:d1:e5:a9:b8:41:99:30:a1:a7:28:fb: f4:57:df:e8:e7:0c:4c:36:26:ef:75:a5:24:f8:74:6c:ec:9d: 62:8b:78:10:88:b7:7e:96:05:c9:ac:47:e4:27:f7:2c:9e:dc: ff:7a:5f:a1:c1:33:fc:43:b6:07:f6:25:9a:ee:db:2a:f2:e6: 0b:70:c1:dd:59:74:67:ea:99:9f:02:7b:18:bc:13:56:b7:e2: 63:a3:68:73:ce:49:d0:90:cb:f6:42:f5:c6:57:9a:a9:5e:b6: de:c1:c1:bf:7a:9f:24:55:ad:40:47:4c:14:61:ef:8e:f6:d1: 20:bc:1a:ae:d3:21:b9:77:df:17:15:23:a1:02:97:ac:85:54: 90:bd:4a:59:e1:a0:c7:c9:3b:c8:1d:df:10:2e:e5:94:af:df: 9e:81:18:2f:e7:8c:dd:a0:c0:79:44:09:25:a0:8f:13:03:95: 60:69:8d:41:0f:02:11:ad:b4:01:b2:e9:9a:23:33:87:80:12: be:b6:e7:7b:b9:37:dd:b2:22:86:eb:dc:e0:7b:ec:60:75:d0: dd:d9:e8:d9:aa:57:92:fd:05:41:2b:9b:83:a6:bb:22:c3:7c: d6:d3:c3:f7:5e:39:eb:9a:62:16:5b:ae:77:79:1e:94:fb:6c: 6f:6e:be:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUwODEwMjM1ODM4WhcNMjUwODE3MjM1ODM4WjAYMRYwFAYD VQQDEw02ODk5MzIyZS01YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JwqpoDKAM2+P4icj9abXfjD3VZ3zBpTtVJV0HhXWel9zpBoCT/JVGgQ8vBz ts6VJLQRfnMX2DPLCUXZdBZTlqEWmLe12rbotdpEOJe0GBUDZa9QghXqqNOT0wdY vqKoHmBq7i6SsoDEzqosl+NNkkTNu75ZlIuwlEgmA2R0hSNX6bRBNmZpIdz9vY1l L26zY6EJi1oqMyT4P4JYfMDMwzeg6imV5UlgCAQF9wHaWKSuOt2IvdfbD9V6bElw RIekC3u25gTX8MtYitEPnGOVy1ZJqX4zp1HrJQlahISIefpo+unxDzZUlUmwsmxY cwVfm754qrdQ5eKyb79Ocv1j4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBM/bFHh RPZjQ6bsHpfWWwRFTIKoMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCia6M9z7K00eWpuEGZMKGnKPv0V9/o5wxMNibvdaUk+HRs7J1ii3gQ iLd+lgXJrEfkJ/csntz/el+hwTP8Q7YH9iWa7tsq8uYLcMHdWXRn6pmfAnsYvBNW t+Jjo2hzzknQkMv2QvXGV5qpXrbewcG/ep8kVa1AR0wUYe+O9tEgvBqu0yG5d98X FSOhApeshVSQvUpZ4aDHyTvIHd8QLuWUr9+egRgv54zdoMB5RAkloI8TA5VgaY1B DwIRrbQBsumaIzOHgBK+tud7uTfdsiKG69zge+xgddDd2ejZqleS/QVBK5uDprsi w3zW08P3XjnrmmIWW653eR6U+2xvbr4D -----END CERTIFICATE-----Generated at Tue Aug 12 22:50:27 2025 by rpki-client