$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json) Hash identifier: M8ipyF2KIAJ6//uCrPl8hAfK12/Nbxb9T5UOoV0Y4uA= Subject key identifier: BB:F8:38:16:34:69:36:95:31:F6:65:31:E8:54:66:B7:2E:3F:47:43 Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft Manifest number: 3499 Signing time: Wed 18 Jun 2025 14:25:18 +0000 Manifest this update: Wed 18 Jun 2025 14:25:17 +0000 Manifest next update: Wed 25 Jun 2025 14:25:17 +0000 Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: w8y+CBxwoinP6h1KPNSYM+C6oDe61jE1br7US/GfwcA=) 2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: 1ODdrQTl4q6/w7rtOls+USY+PM8yOp3Wfi9ftx6zA0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A Validity Not Before: Jun 18 14:25:17 2025 GMT Not After : Jun 25 14:25:17 2025 GMT Subject: CN=6852cc4e-035f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:cc:0b:95:c7:16:5a:ee:f5:80:4c:1b:cd: 7b:43:c1:ef:bc:b9:08:a6:c6:12:9c:90:85:b9:55: 69:15:10:d2:73:06:76:9d:29:ac:9b:fc:84:53:35: 8c:0f:a2:34:2f:9c:c9:78:8c:b4:86:a9:96:51:73: 27:8c:db:19:f9:ad:e2:60:a7:02:d7:63:b2:8b:32: 40:5d:07:ac:97:05:be:70:e7:bf:d1:65:27:37:d7: 24:29:8e:43:85:79:61:6a:8f:12:33:7d:c1:44:62: ef:d6:d0:2f:a8:6b:79:d7:7f:2e:2b:36:e7:99:f2: fd:64:c6:36:7a:21:26:fe:79:27:90:4d:43:ca:ab: 86:49:0d:83:15:63:d2:43:85:31:c7:bc:22:cb:be: 89:70:3b:e3:40:fb:b7:0b:bd:cd:01:02:b1:ba:11: 73:ab:a9:7b:90:f9:c0:5c:a0:28:8b:91:27:d3:e4: 13:ba:82:97:99:90:21:bb:a8:1f:db:7f:82:4d:60: cd:b3:b9:72:fa:05:ff:26:20:44:fd:f2:e0:19:66: 4c:25:e3:06:84:d1:62:5a:c0:c2:a3:9f:58:ce:40: a1:db:6c:8e:c6:28:82:a6:11:5d:2e:2e:62:55:30: c4:87:3e:dd:f2:6d:1e:4d:e2:f7:3b:03:a5:b4:f4: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F8:38:16:34:69:36:95:31:F6:65:31:E8:54:66:B7:2E:3F:47:43 X509v3 Authority Key Identifier: keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:74:03:c3:10:03:22:81:5e:aa:2f:57:24:a0:ab:0b:41:76: 30:28:f8:8a:29:da:be:a8:15:a3:94:75:e9:93:74:a5:54:23: 9c:cc:06:b4:b2:78:d6:63:9f:ef:6c:f5:8d:c1:89:0c:51:6c: 66:53:fc:ee:4b:26:cd:3b:e4:93:3b:23:ae:95:b3:4d:ca:c2: b3:22:32:6d:4e:ff:cc:a5:8c:b9:84:67:5a:01:33:ca:a7:1b: 28:9d:1b:38:fb:36:b6:10:4e:ee:4e:b1:c3:57:26:57:34:96: 77:34:4a:d3:c5:d1:17:d8:af:4c:45:71:98:69:58:f8:47:b2: b6:b3:62:c5:a4:da:f4:76:b0:99:aa:7f:0b:f2:28:ce:a4:09: 64:f0:c4:cc:3c:18:b2:08:d3:11:d3:c0:44:96:5f:43:f9:99: 67:15:9b:98:cf:10:c1:d1:e3:75:94:60:dc:88:5c:21:5f:2c: 97:66:09:f5:3e:66:49:5f:0c:43:01:84:9c:0a:83:b3:97:ff: fe:92:94:62:c5:5f:02:2e:14:31:b9:d5:99:ec:43:c4:29:67: 31:25:37:8c:44:f8:b6:04:15:79:87:e2:60:06:d8:b3:15:1a: 79:90:20:db:12:09:6c:bd:2d:93:8b:63:00:2e:4a:6d:b3:6f: d9:d2:c4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDNFMENBMzNENzZBNzVCQTY0RjBERDZCMDZBNDQyQkU2 OTU4NjQ0MUEwHhcNMjUwNjE4MTQyNTE3WhcNMjUwNjI1MTQyNTE3WjAYMRYwFAYD VQQDEw02ODUyY2M0ZS0wMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzfMC5XHFlru9YBMG817Q8HvvLkIpsYSnJCFuVVpFRDScwZ2nSmsm/yEUzWM D6I0L5zJeIy0hqmWUXMnjNsZ+a3iYKcC12OyizJAXQeslwW+cOe/0WUnN9ckKY5D hXlhao8SM33BRGLv1tAvqGt5138uKzbnmfL9ZMY2eiEm/nknkE1DyquGSQ2DFWPS Q4Uxx7wiy76JcDvjQPu3C73NAQKxuhFzq6l7kPnAXKAoi5En0+QTuoKXmZAhu6gf 23+CTWDNs7ly+gX/JiBE/fLgGWZMJeMGhNFiWsDCo59YzkCh22yOxiiCphFdLi5i VTDEhz7d8m0eTeL3OwOltPS6SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv4OBY0 aTaVMfZlMehUZrcuP0dDMB8GA1UdIwQYMBaAFD4Moz12p1umTw3WsGpEK+aVhkQa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi9BMkM3Mzg2ODFE ODUxMUUyODcwMzZBREMwOEIwMkNEMi9QZ3lqUFhhblc2WlBEZGF3YWtRcjVwV0dS Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BneWpQWGFuVzZaUERkYXdha1FyNXBXR1JCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi9BMkM3Mzg2ODFEODUxMUUyODcwMzZBREMwOEIwMkNEMi9QZ3lqUFhhblc2 WlBEZGF3YWtRcjVwV0dSQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPdAPDEAMigV6qL1ckoKsLQXYwKPiKKdq+qBWjlHXpk3SlVCOczAa0 snjWY5/vbPWNwYkMUWxmU/zuSybNO+STOyOulbNNysKzIjJtTv/MpYy5hGdaATPK pxsonRs4+za2EE7uTrHDVyZXNJZ3NErTxdEX2K9MRXGYaVj4R7K2s2LFpNr0drCZ qn8L8ijOpAlk8MTMPBiyCNMR08BEll9D+ZlnFZuYzxDB0eN1lGDciFwhXyyXZgn1 PmZJXwxDAYScCoOzl//+kpRixV8CLhQxudWZ7EPEKWcxJTeMRPi2BBV5h+JgBtiz FRp5kCDbEglsvS2Ti2MALkpts2/Z0sTw -----END CERTIFICATE-----Generated at Thu Jun 19 06:48:25 2025 by rpki-client