$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: gfNc6W3ogEgHN7k96eUIhfXyLX0y/63eqhf8IaW/C4o= Subject key identifier: B1:13:64:71:60:9E:E7:12:9F:AB:CA:B9:5D:71:31:47:D1:ED:E1:22 Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0ADB Signing time: Sun 10 Aug 2025 19:27:24 +0000 Manifest this update: Sun 10 Aug 2025 19:27:24 +0000 Manifest next update: Sun 17 Aug 2025 19:27:24 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: OPzUIl1xG1vaKjujqCuv3t+0fsvYCyf9vwRUFJBfKoM=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: DjUQP/nHkYcgIi1MW0o7fyHbM5U6rKdni2IBdc+KG/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Aug 10 19:27:24 2025 GMT Not After : Aug 17 19:27:24 2025 GMT Subject: CN=6898f29c-6645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:c2:4f:66:1e:b8:7c:48:96:fd:8a:e6:5a: f6:c5:47:fd:79:0e:77:27:d3:f3:f1:9a:10:1f:c7: 98:d8:66:a0:de:1a:8f:40:2a:bb:81:b3:c4:24:30: e3:5c:3f:01:87:c5:1f:c2:e7:20:6d:06:6b:56:b4: 53:e1:2e:a2:71:1f:af:2b:b5:aa:1c:65:96:8d:d8: c1:84:cf:4c:6a:b1:92:92:3e:ef:56:e0:4a:1f:2d: f3:50:d8:bd:33:b7:15:f3:11:c9:de:53:be:48:83: 1b:2a:d8:12:b6:d9:1a:8e:92:00:06:3e:fb:95:24: 79:54:11:31:42:e5:85:49:f9:4e:75:d5:06:14:57: 4f:7e:d1:4f:b4:a8:f1:cf:e9:73:87:99:68:46:a2: 01:75:7a:79:00:85:9e:1e:2c:4b:05:c1:6a:13:d0: d3:04:35:4e:70:55:6a:56:e2:cb:03:c6:90:ab:4b: 45:07:1d:af:e6:29:53:5e:2d:52:c7:b6:94:d5:49: df:93:ef:c3:24:41:9b:d2:a9:1c:3d:87:58:5d:8f: d2:0e:c0:5a:89:f9:3b:5e:9c:b7:76:b0:60:40:f3: 6f:17:48:84:53:bf:2f:76:a7:82:64:ef:35:b9:4d: cd:e8:83:38:bc:78:c4:b1:29:96:94:0c:59:41:7b: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:64:71:60:9E:E7:12:9F:AB:CA:B9:5D:71:31:47:D1:ED:E1:22 X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bc:54:11:27:8a:37:1a:99:6e:2b:00:fd:17:d2:08:5d:8a: df:dc:99:9b:b9:a1:c2:5f:de:a5:39:12:d0:5a:a4:68:df:e0: 27:78:79:c0:36:3b:e3:44:e2:16:05:91:ac:3b:80:ae:35:49: 9f:ca:3c:9e:f8:77:72:24:45:19:f3:f9:20:03:06:84:9a:63: de:15:9b:05:4b:51:ba:07:b8:07:5f:03:32:fe:8e:1e:9e:b0: 05:be:81:ff:f9:35:ac:43:c5:1b:e7:c3:df:f5:25:cb:b6:74: 46:3a:42:89:dc:f6:2c:f2:28:b8:38:28:58:4a:28:2f:54:d7: 67:fe:73:5c:20:3c:1f:4d:8c:19:c3:28:ad:4a:6b:90:6e:02: 79:be:9b:1e:29:1f:1e:de:58:8e:57:91:3f:5a:c0:25:be:cf: 69:d7:3d:b0:59:ab:03:59:9b:c3:58:ea:37:e9:87:bb:d9:09: 97:68:7d:d7:d9:2e:97:70:4c:4b:32:14:ee:61:44:09:56:e0: 58:be:a6:b9:a5:bf:67:30:a5:70:0b:e2:05:67:74:04:78:84: 13:e3:bb:5c:49:73:65:a1:85:e8:a4:66:ed:fa:c7:d2:47:77: 24:03:d1:37:06:cc:4a:a3:16:c3:07:a2:2e:78:23:f2:1c:25: 5e:9c:c8:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjUwODEwMTkyNzI0WhcNMjUwODE3MTkyNzI0WjAYMRYwFAYD VQQDEw02ODk4ZjI5Yy02NjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMTCT2YeuHxIlv2K5lr2xUf9eQ53J9Pz8ZoQH8eY2Gag3hqPQCq7gbPEJDDj XD8Bh8UfwucgbQZrVrRT4S6icR+vK7WqHGWWjdjBhM9MarGSkj7vVuBKHy3zUNi9 M7cV8xHJ3lO+SIMbKtgSttkajpIABj77lSR5VBExQuWFSflOddUGFFdPftFPtKjx z+lzh5loRqIBdXp5AIWeHixLBcFqE9DTBDVOcFVqVuLLA8aQq0tFBx2v5ilTXi1S x7aU1Unfk+/DJEGb0qkcPYdYXY/SDsBaifk7Xpy3drBgQPNvF0iEU78vdqeCZO81 uU3N6IM4vHjEsSmWlAxZQXuuqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLETZHFg nucSn6vKuV1xMUfR7eEiMB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSvFQRJ4o3GpluKwD9F9IIXYrf3JmbuaHCX96lORLQWqRo3+AneHnA NjvjROIWBZGsO4CuNUmfyjye+HdyJEUZ8/kgAwaEmmPeFZsFS1G6B7gHXwMy/o4e nrAFvoH/+TWsQ8Ub58Pf9SXLtnRGOkKJ3PYs8ii4OChYSigvVNdn/nNcIDwfTYwZ wyitSmuQbgJ5vpseKR8e3liOV5E/WsAlvs9p1z2wWasDWZvDWOo36Ye72QmXaH3X 2S6XcExLMhTuYUQJVuBYvqa5pb9nMKVwC+IFZ3QEeIQT47tcSXNloYXopGbt+sfS R3ckA9E3BsxKoxbDB6IueCPyHCVenMj2 -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:24 2025 by rpki-client