$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: zAxQ2r1ppNdAwOyqXA5s3eYSWylJe6ZkAxEGMV6FLVQ= Subject key identifier: D4:88:DB:73:CB:FE:69:B7:59:3A:CA:43:66:9B:05:FF:85:AB:73:DF Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 20 Signing time: Thu 07 Aug 2025 08:31:34 +0000 Manifest this update: Thu 07 Aug 2025 08:31:34 +0000 Manifest next update: Thu 14 Aug 2025 08:31:34 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: XBVFDmQ23eK7PSi2nhzpKfe7bXbZtLXfudxMjcVx8xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Aug 7 08:31:34 2025 GMT Not After : Aug 14 08:31:34 2025 GMT Subject: CN=68946466-a54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:a8:ac:71:cf:93:f0:a9:55:5f:77:75:88: 37:29:58:f5:27:61:90:e8:ca:6c:70:ee:ac:68:28: 01:14:a0:59:a6:5b:87:bc:8f:be:c3:e8:d2:d4:e2: 0b:cd:cd:ad:79:5f:a4:df:d0:8b:9d:67:51:f8:60: 34:9a:aa:f8:2a:8b:d2:2b:34:7f:0d:f9:11:a6:42: 28:5b:2b:29:2e:ec:35:9d:9e:4d:54:2c:f1:ae:dc: 52:68:50:6f:4e:3e:08:a3:40:21:44:56:f4:c8:23: 63:b3:c4:b0:8e:6c:4e:41:a8:0c:c4:0e:e3:45:3e: 65:93:a0:85:82:0f:37:5e:21:a2:67:fa:3f:7f:d2: d5:5f:d3:fd:a7:83:6b:de:2c:2a:5d:1b:57:62:e6: 1f:35:be:85:d0:d0:6c:12:a8:4c:61:cb:65:25:9b: 89:11:37:79:ab:c4:d3:8f:c5:a9:27:0a:a3:df:15: c0:e8:6c:aa:37:4a:f8:56:cd:6f:34:23:32:cf:d4: 4c:b7:0e:a6:45:e0:c3:42:a9:12:99:6e:77:56:7f: 3b:29:a5:54:7e:f2:77:59:0f:dd:51:c3:b3:5c:a4: 19:b5:04:8d:85:bd:11:cd:2e:0a:3d:58:59:bd:a8: b0:6f:6b:e0:72:06:01:ea:f8:98:cf:94:55:7e:ea: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:DB:73:CB:FE:69:B7:59:3A:CA:43:66:9B:05:FF:85:AB:73:DF X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2f:b6:22:d5:ee:e8:0a:36:32:69:37:62:7d:ce:22:b9:f1: a3:01:14:67:6c:fb:e9:24:8b:14:c9:62:dd:3f:8e:c7:cf:22: d9:f5:c3:e9:7d:8a:ae:2e:f9:a6:56:b2:c2:59:8a:12:36:ff: a8:23:6b:77:e3:79:47:f4:cd:64:8b:87:1a:81:31:7f:48:a1: a4:87:cc:c4:eb:a1:92:7b:35:2f:75:2a:54:99:70:b2:d6:c9: fe:6c:e4:06:ee:78:ab:32:93:4e:1b:d4:f8:43:01:dd:8e:22: cf:4f:b4:1f:99:e8:d2:6c:b1:b6:31:16:1f:d8:f3:4f:f8:8b: 25:d2:62:1a:90:0c:99:86:b9:3e:51:0f:40:03:69:0b:96:a5: bc:9a:f4:26:ac:bd:c2:ad:54:d8:82:4f:62:03:1b:fb:38:3a: 22:06:cd:9f:ba:38:1f:20:ab:a0:d5:b1:5d:ba:67:ae:c8:6b: ea:67:d1:38:e7:1e:29:6e:53:e6:cb:63:dd:41:66:c9:4f:a5: 23:25:3a:98:c6:33:04:ad:19:c6:12:84:4f:eb:6c:7d:f6:d5: ca:e7:35:bf:12:38:55:71:ce:6a:76:92:f7:15:c3:33:76:e4: f6:ca:e6:d3:2c:ba:06:f8:da:19:ea:63:46:8b:b4:1e:27:ed: 6e:8e:d7:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTMwMzExMC8GA1UEBRMoM0YxNzc5MDk4OTE3MkY0MDkyNjdFMEZGRTc0NEVFNDhC MDE3OTFFNzAeFw0yNTA4MDcwODMxMzRaFw0yNTA4MTQwODMxMzRaMBgxFjAUBgNV BAMTDTY4OTQ2NDY2LWE1NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr2qiscc+T8KlVX3d1iDcpWPUnYZDoymxw7qxoKAEUoFmmW4e8j77D6NLU4gvN za15X6Tf0IudZ1H4YDSaqvgqi9IrNH8N+RGmQihbKyku7DWdnk1ULPGu3FJoUG9O PgijQCFEVvTII2OzxLCObE5BqAzEDuNFPmWToIWCDzdeIaJn+j9/0tVf0/2ng2ve LCpdG1di5h81voXQ0GwSqExhy2Ulm4kRN3mrxNOPxaknCqPfFcDobKo3SvhWzW80 IzLP1Ey3DqZF4MNCqRKZbndWfzsppVR+8ndZD91Rw7NcpBm1BI2FvRHNLgo9WFm9 qLBva+ByBgHq+JjPlFV+6nZpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Ijbc8v+ abdZOspDZpsF/4Wrc98wHwYDVR0jBBgwFoAUPxd5CYkXL0CSZ+D/50TuSLAXkecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMzAzLzlCNDI0RDMwNDY4 NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhkNUNZa1hMMENTWi1EXzUwVHVTTEFYa2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx MzAzLzlCNDI0RDMwNDY4NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBD U1otRF81MFR1U0xBWGtlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMvtiLV7ugKNjJpN2J9ziK58aMBFGds++kkixTJYt0/jsfPItn1w+l9 iq4u+aZWssJZihI2/6gja3fjeUf0zWSLhxqBMX9IoaSHzMTroZJ7NS91KlSZcLLW yf5s5AbueKsyk04b1PhDAd2OIs9PtB+Z6NJssbYxFh/Y80/4iyXSYhqQDJmGuT5R D0ADaQuWpbya9CasvcKtVNiCT2IDG/s4OiIGzZ+6OB8gq6DVsV26Z67Ia+pn0Tjn HiluU+bLY91BZslPpSMlOpjGMwStGcYShE/rbH321crnNb8SOFVxzmp2kvcVwzN2 5PbK5tMsugb42hnqY0aLtB4n7W6O12Y= -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:45 2025 by rpki-client