$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: 55JRZ9YpnrGXLvcS6WyYOT5OanFlt+z+mlLkF6RQYMk= Subject key identifier: 1B:B3:89:5C:D4:07:15:07:C6:83:19:7E:58:BD:E9:A8:39:50:15:DB Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 0898 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 0891 Signing time: Sat 14 Jun 2025 20:22:53 +0000 Manifest this update: Sat 14 Jun 2025 20:22:53 +0000 Manifest next update: Sat 21 Jun 2025 20:22:53 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: q1QAb+sLDwS9ei5qA99B6yZ76+Ew3lk/oPcoWrtOo/o=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200 (0x898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: Jun 14 20:22:53 2025 GMT Not After : Jun 21 20:22:53 2025 GMT Subject: CN=684dda1d-f33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:50:96:f8:b5:c6:d8:97:a6:45:30:b7:07: 8c:5a:e5:5f:8b:e5:6a:06:5e:80:9e:8b:fd:31:9e: 94:57:b5:8c:6b:5c:8e:b7:f9:fc:8e:ca:40:3e:d3: ca:43:e3:99:9d:4b:a5:5e:0d:b7:d7:f8:bb:24:2e: 75:e1:41:72:5c:2e:3c:bb:01:c9:32:bc:b7:35:c2: 68:31:a3:7a:ca:20:63:bb:f7:f2:ac:96:e4:75:c1: 91:a5:6d:c1:85:24:e2:77:5f:e4:75:35:4f:00:15: 75:36:cd:33:47:d5:f0:7f:cc:7b:c9:04:4d:93:9c: 98:90:a1:b9:84:fa:6a:59:31:24:69:53:db:38:82: d3:3f:f3:3a:b3:4c:c4:97:f3:69:76:66:03:56:51: 15:25:d9:b1:f9:13:79:0a:93:42:b3:11:f7:80:b1: e9:4a:64:5a:5e:3a:d1:bb:8c:ae:d7:6a:6f:fa:8d: 35:48:ea:53:05:52:a6:10:a7:04:a8:97:58:4e:74: e0:bf:8f:14:71:c2:c1:c0:05:81:26:a0:5f:14:32: bd:a0:0c:d8:43:2b:7c:98:3a:e0:92:a9:40:6c:ca: c8:50:5c:db:d1:5e:2a:65:e3:8e:20:84:33:fc:81: c1:97:f8:0a:38:43:8c:41:f1:34:db:d8:44:59:57: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:89:5C:D4:07:15:07:C6:83:19:7E:58:BD:E9:A8:39:50:15:DB X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:35:43:4e:a2:00:37:f8:40:5b:b5:8b:e1:59:1a:6e:30: 79:9b:e6:40:27:c0:53:50:51:89:96:e5:ed:12:e0:81:35:f2: aa:66:8a:2b:8e:e2:e3:58:f7:31:d7:41:62:df:21:e0:c2:00: f9:01:a0:ab:78:7e:6f:3b:3d:41:a6:4c:5f:87:ed:55:7b:27: 74:31:b5:93:3a:98:10:f8:68:dd:66:17:ea:d5:39:66:ea:19: 5e:27:da:99:1b:c9:7e:9d:40:54:22:62:da:12:01:21:fa:09: de:03:90:05:ab:74:5b:dd:4e:fe:17:db:49:fc:a3:c2:1d:97: 38:47:2b:ec:69:76:4a:31:13:c7:6c:74:f1:82:dc:89:99:1f: c1:aa:98:47:d1:04:f3:a5:f4:e5:a5:14:4f:9a:48:85:a1:70: f9:6f:d1:df:0a:08:f0:52:a6:93:83:98:f3:e4:86:57:0d:f8: 05:43:38:a1:a9:34:36:a5:24:c9:66:d2:d4:79:cb:1b:13:07: 00:55:69:fa:b9:a7:71:ea:f6:14:87:71:84:9a:9c:ec:c2:7e: 8c:31:97:6f:32:e8:21:ba:bd:0d:c4:f7:67:db:f3:ec:16:18: 33:a4:9b:30:00:03:1c:08:23:08:18:ed:5c:04:c0:f4:92:f6: 68:ee:08:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjUwNjE0MjAyMjUzWhcNMjUwNjIxMjAyMjUzWjAYMRYwFAYD VQQDEw02ODRkZGExZC1mMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudtQlvi1xtiXpkUwtweMWuVfi+VqBl6Anov9MZ6UV7WMa1yOt/n8jspAPtPK Q+OZnUulXg231/i7JC514UFyXC48uwHJMry3NcJoMaN6yiBju/fyrJbkdcGRpW3B hSTid1/kdTVPABV1Ns0zR9Xwf8x7yQRNk5yYkKG5hPpqWTEkaVPbOILTP/M6s0zE l/NpdmYDVlEVJdmx+RN5CpNCsxH3gLHpSmRaXjrRu4yu12pv+o01SOpTBVKmEKcE qJdYTnTgv48UccLBwAWBJqBfFDK9oAzYQyt8mDrgkqlAbMrIUFzb0V4qZeOOIIQz /IHBl/gKOEOMQfE029hEWVcuXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuziVzU BxUHxoMZfli96ag5UBXbMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLzVDTqIAN/hAW7WL4VkabjB5m+ZAJ8BTUFGJluXtEuCBNfKqZoor juLjWPcx10Fi3yHgwgD5AaCreH5vOz1Bpkxfh+1Veyd0MbWTOpgQ+GjdZhfq1Tlm 6hleJ9qZG8l+nUBUImLaEgEh+gneA5AFq3Rb3U7+F9tJ/KPCHZc4RyvsaXZKMRPH bHTxgtyJmR/BqphH0QTzpfTlpRRPmkiFoXD5b9HfCgjwUqaTg5jz5IZXDfgFQzih qTQ2pSTJZtLUecsbEwcAVWn6uadx6vYUh3GEmpzswn6MMZdvMughur0NxPdn2/Ps FhgzpJswAAMcCCMIGO1cBMD0kvZo7gie -----END CERTIFICATE-----Generated at Sun Jun 15 08:13:07 2025 by rpki-client