$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json) Hash identifier: L+wOXv+n21YLd390piEQgQ5mAILfqxagZF+YHr3723g= Subject key identifier: 7F:CB:F9:5C:28:4A:24:FB:E3:0E:1B:C2:FB:9B:EC:AA:B3:6C:C1:95 Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft Manifest number: DA Signing time: Fri 25 Apr 2025 04:37:17 +0000 Manifest this update: Fri 25 Apr 2025 04:37:16 +0000 Manifest next update: Fri 02 May 2025 04:37:16 +0000 Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: 8+6pqBAFar63ieEdKm8RX+r7HBRXOltmxkYvA4m2JwA=) 2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=) 3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Validity Not Before: Apr 25 04:37:16 2025 GMT Not After : May 2 04:37:16 2025 GMT Subject: CN=680b117d-15d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:65:e6:be:36:4d:f8:8b:82:77:d5:4c:09: d8:24:75:5e:1d:a8:17:46:85:40:0a:28:7f:3f:5a: b0:76:f9:6b:5f:52:9a:28:95:33:62:3e:35:0b:e2: da:7c:85:fd:03:85:b7:34:e3:ca:1c:ef:24:00:eb: 79:ce:34:e9:0e:cb:06:4b:96:1c:79:03:21:a2:65: fb:79:5c:63:2f:f5:66:89:0f:dc:12:43:b3:c3:5d: a7:5e:fd:f9:0b:d8:ea:23:db:81:2d:7f:73:f1:96: 71:77:75:29:a7:51:2c:9f:a7:09:9e:2c:e7:4b:00: 60:1d:b9:55:da:f0:b5:b6:39:6b:4e:33:7b:3f:92: e0:9c:46:3c:d2:94:bd:4c:23:df:65:f7:52:38:87: a0:87:dc:ce:fe:7c:8f:49:f8:bf:a5:7b:3d:17:cc: 33:98:46:41:67:b5:20:b8:8f:9d:99:90:b7:de:5b: ac:bc:61:2a:b6:af:7b:50:fe:98:27:39:2a:e6:97: 4b:f3:d3:a2:d5:e8:fb:fe:b1:1d:a2:47:a3:59:32: 3e:26:e4:49:74:1e:24:ea:13:cb:84:29:b8:f2:ab: c2:10:d7:7a:63:44:4a:5b:65:49:eb:8b:0c:97:53: 14:45:ae:b9:8a:3a:94:65:99:ea:0b:b5:ee:79:66: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CB:F9:5C:28:4A:24:FB:E3:0E:1B:C2:FB:9B:EC:AA:B3:6C:C1:95 X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:83:6f:79:ec:6a:d6:8d:16:fe:5c:74:a7:e8:9a:61:e1:86: bb:ce:80:b9:e6:e3:63:92:e5:e4:7e:0d:9e:c7:d8:ef:b4:d9: 07:9a:30:23:47:a8:fb:66:28:54:9b:d9:03:bf:c2:1d:fe:4c: 08:75:f8:e5:e0:73:32:06:1a:14:86:d0:58:e8:0e:71:b5:e8: ed:b1:88:f6:09:3f:dd:ef:96:75:76:c1:72:d9:c6:a3:d1:58: e9:cd:3f:1e:08:16:f3:9d:4e:6f:bf:be:13:2a:7c:20:55:a1: 0c:4f:69:35:ce:d9:a3:d4:98:9a:6e:6c:ba:c3:ee:06:60:05: 95:9a:33:a7:50:b2:e4:de:07:59:10:57:ad:9d:5e:26:b9:80: fb:5c:f4:01:ba:84:46:e0:09:fc:81:33:b6:c1:3b:3a:dd:c2: ae:e8:ff:1f:b1:48:33:92:f4:b1:10:52:7b:97:e4:c8:6c:97: a7:fb:a5:0f:6a:c2:00:f9:53:1e:5f:8c:1f:d7:c8:24:a2:29: 72:1e:69:c3:4a:2b:20:95:e1:98:0f:50:4b:3b:db:7a:81:55: a8:61:e1:c8:5a:14:e9:33:29:03:c2:57:6e:d8:98:5e:7d:3a: 2e:5f:34:d7:d9:ce:3a:76:bc:1f:be:7f:54:b7:83:8f:6c:64: 63:3e:c2:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3 OTI1QkVGQ0YwHhcNMjUwNDI1MDQzNzE2WhcNMjUwNTAyMDQzNzE2WjAYMRYwFAYD VQQDEw02ODBiMTE3ZC0xNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC5l5r42TfiLgnfVTAnYJHVeHagXRoVACih/P1qwdvlrX1KaKJUzYj41C+La fIX9A4W3NOPKHO8kAOt5zjTpDssGS5YceQMhomX7eVxjL/VmiQ/cEkOzw12nXv35 C9jqI9uBLX9z8ZZxd3Upp1Esn6cJniznSwBgHblV2vC1tjlrTjN7P5LgnEY80pS9 TCPfZfdSOIegh9zO/nyPSfi/pXs9F8wzmEZBZ7UguI+dmZC33lusvGEqtq97UP6Y Jzkq5pdL89Oi1ej7/rEdokejWTI+JuRJdB4k6hPLhCm48qvCENd6Y0RKW2VJ64sM l1MURa65ijqUZZnqC7XueWb2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/L+Vwo SiT74w4bwvub7KqzbMGVMB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1 M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3 ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi cjVYSXd2VmM3RUY1SmI3ODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWg2957GrWjRb+XHSn6Jph4Ya7zoC55uNjkuXkfg2ex9jvtNkHmjAj R6j7ZihUm9kDv8Id/kwIdfjl4HMyBhoUhtBY6A5xtejtsYj2CT/d75Z1dsFy2caj 0VjpzT8eCBbznU5vv74TKnwgVaEMT2k1ztmj1Jiabmy6w+4GYAWVmjOnULLk3gdZ EFetnV4muYD7XPQBuoRG4An8gTO2wTs63cKu6P8fsUgzkvSxEFJ7l+TIbJen+6UP asIA+VMeX4wf18gkoilyHmnDSisgleGYD1BLO9t6gVWoYeHIWhTpMykDwldu2Jhe fTouXzTX2c46drwfvn9Ut4OPbGRjPsL2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:01 2025 by rpki-client