$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: KSGE9bqjrNB4c+zFrhURQFxfbdgkDnkQDcBSCC+QYUI= Subject key identifier: 20:18:04:3A:82:FC:4F:90:FD:17:4F:23:3B:49:C7:1D:B6:C3:48:B2 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 010B Signing time: Fri 13 Jun 2025 03:56:00 +0000 Manifest this update: Fri 13 Jun 2025 03:56:00 +0000 Manifest next update: Fri 20 Jun 2025 03:56:00 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: iiWpNWwR49xt2neI6GpfFZsayFXsKQQQ6tie7WIG5Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: Jun 13 03:56:00 2025 GMT Not After : Jun 20 03:56:00 2025 GMT Subject: CN=684ba150-87a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:a3:98:77:62:57:d0:35:f0:ce:ea:52:80: 31:c2:f9:db:16:fa:3d:89:38:e4:ca:76:73:c5:7b: 92:90:94:6e:68:65:98:36:51:91:89:a7:d8:d2:0d: 1b:7e:50:05:b9:0d:27:84:b1:7c:64:80:34:14:52: 09:07:ca:8a:7b:e5:ef:2c:75:49:57:e0:42:55:dc: a7:75:e8:f8:db:80:92:e9:c4:4f:93:a6:a7:64:d4: 17:5d:b1:43:7a:92:03:62:38:90:97:21:95:db:e7: 51:67:68:1d:3f:f6:20:73:bc:74:cd:ae:2c:df:ca: c1:ff:60:79:82:42:e6:01:46:59:57:0a:0b:20:c1: 32:20:00:56:ec:64:df:41:18:64:64:37:43:b3:df: 32:3c:b4:8a:4c:46:68:6a:56:4b:67:0d:a8:5b:ea: e4:b1:56:65:03:3d:d7:2e:7e:7e:7d:81:0d:77:c0: 2e:bb:a8:39:49:9d:10:3e:4f:ab:6d:4e:26:09:47: ec:32:f3:ed:62:d4:63:ad:51:32:1d:4f:34:c1:a9: 39:d8:ea:a2:bf:a9:fa:82:02:03:b3:85:0e:5d:7b: 84:b1:21:2c:b9:70:57:df:3a:ba:56:27:1b:0c:fa: 5f:d2:1b:83:ea:98:50:bc:63:73:20:f3:b9:c7:85: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:04:3A:82:FC:4F:90:FD:17:4F:23:3B:49:C7:1D:B6:C3:48:B2 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:13:d7:3f:26:2f:42:ea:8b:d1:3f:1e:5c:12:7f:85:f3:a4: 62:ee:5b:4f:b1:5b:d2:29:43:3a:c3:c5:f3:2d:fd:d7:3e:ec: 64:5f:da:59:47:22:4b:e8:c2:5b:76:d2:d2:1a:a4:ec:3b:51: 0f:df:78:35:18:5e:ec:08:cb:7f:cc:5a:35:9e:c8:be:10:b1: 9f:b8:fa:da:41:7e:fb:60:75:5a:4f:ee:11:65:5c:44:d9:02: aa:ea:00:1d:94:7e:52:46:4d:3c:a2:e8:41:a1:18:d6:99:0d: 2d:70:1f:9a:56:a5:de:e8:1b:4d:ea:58:6d:70:06:f5:ec:7b: 6d:ba:94:4c:25:b2:79:16:e3:e5:56:21:e3:b6:0b:5a:5f:74: 84:f3:e0:56:fc:6f:bf:34:63:9d:a9:69:94:4e:78:07:5f:a5: e2:0e:9e:4e:90:f5:fa:62:c2:10:a4:9c:d1:e6:e9:83:02:76: 04:45:46:3b:88:aa:1f:ab:7a:3f:a7:f2:74:da:3b:7e:7d:1a: 10:53:57:00:0e:b7:fd:13:98:e8:7c:d9:d5:7d:60:5b:a5:ab: 73:33:d2:d1:93:41:0f:75:1d:ed:a8:fa:1f:a8:a1:8b:36:0c: 9a:55:27:e4:4e:08:b2:39:b1:53:d2:57:a7:1a:f8:e7:80:7a: 54:4b:13:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUwNjEzMDM1NjAwWhcNMjUwNjIwMDM1NjAwWjAYMRYwFAYD VQQDEw02ODRiYTE1MC04N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp2jmHdiV9A18M7qUoAxwvnbFvo9iTjkynZzxXuSkJRuaGWYNlGRiafY0g0b flAFuQ0nhLF8ZIA0FFIJB8qKe+XvLHVJV+BCVdyndej424CS6cRPk6anZNQXXbFD epIDYjiQlyGV2+dRZ2gdP/Ygc7x0za4s38rB/2B5gkLmAUZZVwoLIMEyIABW7GTf QRhkZDdDs98yPLSKTEZoalZLZw2oW+rksVZlAz3XLn5+fYENd8Auu6g5SZ0QPk+r bU4mCUfsMvPtYtRjrVEyHU80wak52Oqiv6n6ggIDs4UOXXuEsSEsuXBX3zq6Vicb DPpf0huD6phQvGNzIPO5x4WFvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAYBDqC /E+Q/RdPIztJxx22w0iyMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWE9c/Ji9C6ovRPx5cEn+F86Ri7ltPsVvSKUM6w8XzLf3XPuxkX9pZ RyJL6MJbdtLSGqTsO1EP33g1GF7sCMt/zFo1nsi+ELGfuPraQX77YHVaT+4RZVxE 2QKq6gAdlH5SRk08ouhBoRjWmQ0tcB+aVqXe6BtN6lhtcAb17HttupRMJbJ5FuPl ViHjtgtaX3SE8+BW/G+/NGOdqWmUTngHX6XiDp5OkPX6YsIQpJzR5umDAnYERUY7 iKofq3o/p/J02jt+fRoQU1cADrf9E5jofNnVfWBbpatzM9LRk0EPdR3tqPofqKGL NgyaVSfkTgiyObFT0lenGvjngHpUSxOD -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:34 2025 by rpki-client