$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: yJCNUAJKFAlBb5sz+jWhfEeVyPPA9aFYyPEYjMmkp74= Subject key identifier: 33:1F:D0:06:28:76:B6:92:18:E2:54:AE:C9:10:91:1A:D7:CA:CB:62 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01D9 Signing time: Sun 15 Jun 2025 02:03:58 +0000 Manifest this update: Sun 15 Jun 2025 02:03:58 +0000 Manifest next update: Sun 22 Jun 2025 02:03:58 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: BEsRmflysR3fxOYm6Miu+oKnA938FOTNd2Rf9whW/UQ=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Jun 15 02:03:58 2025 GMT Not After : Jun 22 02:03:58 2025 GMT Subject: CN=684e2a0e-de8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:71:59:df:2b:a4:26:0e:05:08:99:56:65: ac:3e:4c:65:b3:e6:68:aa:f5:6d:37:32:b8:4b:a3: b6:f1:66:08:15:a6:ee:62:a0:41:1b:51:7f:53:3f: c5:d8:2d:9a:7e:87:87:a3:ad:40:b7:13:72:6b:1e: 5a:95:f2:b8:15:e7:90:51:d2:01:10:4d:41:1d:1d: 88:20:73:f2:47:de:dd:48:71:61:e2:83:8c:d6:27: 77:b9:ba:18:33:e6:31:8e:91:7c:28:cd:8c:f5:bf: 2f:cb:5e:ea:89:df:46:29:24:88:a7:e5:73:10:ea: dc:b0:fb:11:cb:a3:50:21:2c:0d:7c:93:f6:d6:41: 74:e6:14:a4:a8:bb:4c:67:ad:7f:79:2d:54:32:f8: a1:e6:ac:ff:57:49:fd:c8:54:4d:42:ff:95:52:e3: 68:75:03:29:77:d7:74:30:ea:ce:69:ad:7f:39:a8: 4c:72:df:78:1a:e0:4f:b7:d0:e1:00:ec:43:3b:50: ac:98:e4:69:0f:cb:ff:39:5f:3c:fd:4d:b3:7a:80: 7c:19:7e:15:7c:b7:b3:3d:71:09:11:04:e0:8e:8c: fd:25:2a:ad:eb:d6:5c:89:4b:a0:c8:1a:1c:59:5f: 01:dd:f8:10:6f:b9:3a:14:46:19:73:d8:4d:31:d4: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:D0:06:28:76:B6:92:18:E2:54:AE:C9:10:91:1A:D7:CA:CB:62 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1a:f2:cd:5b:32:03:d2:03:a8:c0:37:4d:31:07:20:fa:f5: 9b:cf:5e:d2:e1:c2:91:ef:37:1d:fa:6c:f4:9a:b0:d5:5b:a5: 86:10:81:d0:bc:88:17:1f:df:00:90:41:a4:82:e6:6e:1a:de: f7:bd:a9:3f:dc:f9:b0:79:84:d8:b4:69:4d:64:dd:f8:b0:9d: 7d:ce:3f:28:ab:a1:e7:03:1a:8b:e7:0a:35:df:3b:67:c6:02: 31:86:55:09:1e:78:c4:bb:a3:b8:50:fb:c0:04:0e:ff:86:59: 24:4c:65:60:47:bb:a3:d1:15:96:9a:92:4a:79:87:e1:c1:58: 2f:07:c8:7a:51:f8:e5:df:b4:64:82:1d:90:d7:ab:a6:c1:ea: 63:b5:1c:2a:bd:3f:b9:71:6a:52:18:dd:25:b3:bc:32:d7:cd: 41:e2:f1:74:fe:59:24:57:e9:d7:67:50:70:24:ba:d3:89:24: 85:c4:b1:dc:e3:a7:44:7d:c7:0f:b9:2c:bc:02:18:d4:7d:f3: 71:73:1e:4d:b5:07:5f:1c:7c:e3:6d:77:f6:08:bb:40:fe:35: cf:6d:b5:5a:d6:d2:9a:18:c3:e5:18:05:83:c9:e4:15:28:48: 58:3a:f1:1c:7b:d8:4e:48:9b:11:20:8c:eb:34:81:97:88:00: d2:c9:72:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNjE1MDIwMzU4WhcNMjUwNjIyMDIwMzU4WjAYMRYwFAYD VQQDEw02ODRlMmEwZS1kZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj1xWd8rpCYOBQiZVmWsPkxls+ZoqvVtNzK4S6O28WYIFabuYqBBG1F/Uz/F 2C2afoeHo61AtxNyax5alfK4FeeQUdIBEE1BHR2IIHPyR97dSHFh4oOM1id3uboY M+YxjpF8KM2M9b8vy17qid9GKSSIp+VzEOrcsPsRy6NQISwNfJP21kF05hSkqLtM Z61/eS1UMvih5qz/V0n9yFRNQv+VUuNodQMpd9d0MOrOaa1/OahMct94GuBPt9Dh AOxDO1CsmORpD8v/OV88/U2zeoB8GX4VfLezPXEJEQTgjoz9JSqt69ZciUugyBoc WV8B3fgQb7k6FEYZc9hNMdSBzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMf0AYo draSGOJUrskQkRrXystiMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMGvLNWzID0gOowDdNMQcg+vWbz17S4cKR7zcd+mz0mrDVW6WGEIHQ vIgXH98AkEGkguZuGt73vak/3PmweYTYtGlNZN34sJ19zj8oq6HnAxqL5wo13ztn xgIxhlUJHnjEu6O4UPvABA7/hlkkTGVgR7uj0RWWmpJKeYfhwVgvB8h6Ufjl37Rk gh2Q16umwepjtRwqvT+5cWpSGN0ls7wy181B4vF0/lkkV+nXZ1BwJLrTiSSFxLHc 46dEfccPuSy8AhjUffNxcx5NtQdfHHzjbXf2CLtA/jXPbbVa1tKaGMPlGAWDyeQV KEhYOvEce9hOSJsRIIzrNIGXiADSyXKM -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:08 2025 by rpki-client