$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: ajl9psU4D9isIqawNM8IRl52iLvH2MorZOMKyaltfkM= Subject key identifier: 84:94:E4:49:C0:E6:2C:BE:2F:E5:2E:B3:9B:8B:F6:9A:6F:21:41:0D Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0AC1 Signing time: Fri 20 Jun 2025 19:24:30 +0000 Manifest this update: Fri 20 Jun 2025 19:24:29 +0000 Manifest next update: Fri 27 Jun 2025 19:24:29 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: cUPoM9frQfcDEPD9TZunC0ZIOc7hxGDNYwtMxHJPS6w=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: DjUQP/nHkYcgIi1MW0o7fyHbM5U6rKdni2IBdc+KG/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Jun 20 19:24:29 2025 GMT Not After : Jun 27 19:24:29 2025 GMT Subject: CN=6855b56d-bd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:65:14:b5:3c:35:19:1c:55:6e:a1:64:b5: 59:f7:f9:e3:56:11:bf:c2:b2:67:d4:c1:63:67:7b: 14:1d:1c:c9:af:16:6c:55:60:91:9d:e6:a3:57:3f: 9b:a1:0a:af:4e:33:ad:ef:78:b5:d1:09:28:a8:ea: 71:0d:44:bc:8b:03:ff:38:b1:cc:1c:b9:66:e5:4f: 7c:ef:f3:a1:ce:89:37:d5:87:cf:92:3e:48:62:2a: 6d:44:e5:19:8e:44:51:85:56:1b:4b:bb:70:b5:a8: 07:ee:7a:a7:73:ac:f5:e5:56:0e:f2:36:1c:b4:fd: 5f:c3:2e:df:1b:31:84:99:62:09:2a:bd:9f:17:c5: cf:e0:b5:b6:08:47:e1:3f:4c:db:60:95:f9:b5:58: e3:17:af:64:40:ce:62:de:58:22:5f:19:7b:03:f2: 9f:5b:de:a9:fe:16:55:98:96:1a:2b:59:2d:31:51: 41:8d:6e:59:43:be:4d:88:dc:6e:ab:a2:3b:11:ea: 72:34:c4:18:fb:03:00:76:97:3b:01:50:5a:5c:9c: 51:f7:b1:47:8a:7e:46:0d:47:1d:61:00:b4:c3:92: 37:7b:37:16:1a:b4:da:d1:ff:87:16:73:81:ad:9f: 57:cc:15:16:8e:08:2d:33:4b:5a:0d:e4:85:2c:f6: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:E4:49:C0:E6:2C:BE:2F:E5:2E:B3:9B:8B:F6:9A:6F:21:41:0D X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:74:0b:b3:ac:4d:49:75:ca:83:19:26:3c:95:53:13:66:d6: f3:96:5d:20:a3:ec:ca:c5:29:da:2d:a8:1a:d1:e2:0d:c4:1e: 1f:bb:eb:56:c9:49:84:ae:04:9a:b7:66:7d:3e:97:a8:cd:7d: 83:a9:46:cc:96:51:6b:21:75:78:3d:95:65:de:9b:88:41:9d: 85:a5:30:9f:7a:24:23:a7:98:7c:17:a3:f2:ad:ce:be:50:09: da:b5:d2:41:04:77:ca:01:77:38:56:86:ac:02:3d:e0:9d:93: 07:68:3a:18:59:02:8d:80:cd:b5:2c:09:a0:ec:b2:68:eb:c4: 0a:29:2f:c6:70:24:10:23:c7:35:1d:cb:df:2b:19:ca:32:da: 82:5a:48:93:72:8e:54:3d:51:81:e7:78:74:db:48:16:76:b8: 45:6c:36:06:1b:d1:21:72:0b:1f:3e:38:e7:bd:f0:9c:de:f9: 5d:97:35:6b:1b:ae:f6:f1:17:cc:d4:c6:99:88:3c:b2:eb:94: b4:c4:af:7b:26:23:a3:ed:d1:13:83:01:2a:28:ba:d0:c9:a0: 07:4b:15:13:2d:fd:c3:a4:47:fe:1a:67:7a:03:f4:5e:11:76: b4:5a:e8:5e:4c:7c:f4:cc:bd:fa:79:27:30:b0:97:92:99:4c: 21:da:ea:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjUwNjIwMTkyNDI5WhcNMjUwNjI3MTkyNDI5WjAYMRYwFAYD VQQDEw02ODU1YjU2ZC1iZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW9lFLU8NRkcVW6hZLVZ9/njVhG/wrJn1MFjZ3sUHRzJrxZsVWCRneajVz+b oQqvTjOt73i10QkoqOpxDUS8iwP/OLHMHLlm5U987/Ohzok31YfPkj5IYiptROUZ jkRRhVYbS7twtagH7nqnc6z15VYO8jYctP1fwy7fGzGEmWIJKr2fF8XP4LW2CEfh P0zbYJX5tVjjF69kQM5i3lgiXxl7A/KfW96p/hZVmJYaK1ktMVFBjW5ZQ75NiNxu q6I7EepyNMQY+wMAdpc7AVBaXJxR97FHin5GDUcdYQC0w5I3ezcWGrTa0f+HFnOB rZ9XzBUWjggtM0taDeSFLPaPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISU5EnA 5iy+L+Uus5uL9ppvIUENMB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdAuzrE1JdcqDGSY8lVMTZtbzll0go+zKxSnaLaga0eINxB4fu+tW yUmErgSat2Z9PpeozX2DqUbMllFrIXV4PZVl3puIQZ2FpTCfeiQjp5h8F6Pyrc6+ UAnatdJBBHfKAXc4VoasAj3gnZMHaDoYWQKNgM21LAmg7LJo68QKKS/GcCQQI8c1 HcvfKxnKMtqCWkiTco5UPVGB53h020gWdrhFbDYGG9EhcgsfPjjnvfCc3vldlzVr G6728RfM1MaZiDyy65S0xK97JiOj7dETgwEqKLrQyaAHSxUTLf3DpEf+Gmd6A/Re EXa0WuheTHz0zL36eScwsJeSmUwh2urJ -----END CERTIFICATE-----Generated at Sat Jun 21 14:11:10 2025 by rpki-client