$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json) Hash identifier: sKKNEz9xgYYr7eyctxoXpT3kcRs4QD8y6HaRb+HoD0I= Subject key identifier: DD:84:B8:08:1C:D1:F5:4E:8C:E1:9E:83:26:80:19:67:BE:A0:85:FE Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft Manifest number: 29D1 Signing time: Wed 18 Jun 2025 16:57:22 +0000 Manifest this update: Wed 18 Jun 2025 16:57:22 +0000 Manifest next update: Wed 25 Jun 2025 16:57:22 +0000 Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: x/nik7OJ86RmiICRqH6liAF8JwvGdLF0anbGpfAqN3U=) 2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: rZyJvAvO0YwkG/MbAGqJuB8AX+WqxTqTjs14toCdU2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E Validity Not Before: Jun 18 16:57:22 2025 GMT Not After : Jun 25 16:57:22 2025 GMT Subject: CN=6852eff2-f456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:fb:83:3c:5f:97:dc:73:68:9a:4a:f6:ef: 64:0f:48:ad:de:c6:96:8d:84:c3:39:e7:6a:5c:cb: 66:47:ad:37:4c:c1:b9:15:16:a5:45:59:0d:74:dd: 1f:6b:55:96:85:e0:ae:6b:a8:0a:32:b4:93:23:6e: 6f:e7:4c:29:66:aa:97:e0:4f:f2:16:68:9f:71:db: 6a:81:e1:d2:98:89:7d:5c:b3:6d:35:d9:de:c1:88: cb:7f:5c:3a:93:fe:d0:9e:3a:1a:6a:8d:a0:2d:79: 97:c2:26:3f:d3:f7:89:8b:dd:be:0d:7a:ef:bb:d1: 32:22:05:db:a6:a2:60:2e:3a:70:9c:86:8c:56:4a: 9e:13:3f:9e:aa:39:40:bf:53:84:d4:67:4f:a3:17: 91:a1:03:ae:b1:f4:eb:a1:45:50:63:5f:ed:fe:96: e0:a2:68:e8:5c:cf:bc:1c:bd:9b:e4:7a:82:67:a3: ee:e5:84:b6:f2:0f:73:75:ef:21:d7:b9:0a:65:de: 05:02:e9:c2:b7:52:1f:88:2c:5e:26:d0:1f:ee:5d: 3b:d0:6c:52:12:ce:6f:1a:96:c7:83:e4:cf:4f:d3: 3d:b1:47:72:e9:67:d6:ec:23:64:d9:24:e6:0c:c4: 5d:88:84:57:42:21:3d:08:76:1f:0f:65:4f:e0:0b: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:84:B8:08:1C:D1:F5:4E:8C:E1:9E:83:26:80:19:67:BE:A0:85:FE X509v3 Authority Key Identifier: keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:70:91:33:6d:4a:67:18:ba:62:7e:ae:00:b7:85:d1:2b:49: 10:7a:43:36:5d:94:ef:71:1d:d5:aa:62:83:bb:ef:1f:93:50: e4:62:96:b0:83:dc:9d:f2:cf:fd:a7:79:af:68:d9:2a:29:29: 20:06:fc:a2:86:6c:42:6b:f2:76:9e:11:75:ca:0f:c1:6a:0a: 7c:06:79:79:bd:f6:21:ab:69:7f:ad:77:67:3d:d3:ef:9d:78: 64:38:28:0a:e2:29:50:a1:e7:10:7f:93:b9:bd:ae:26:08:21: 48:69:95:9a:43:8c:06:d6:23:e6:20:d8:d2:e1:b8:b1:21:d6: 0a:d8:10:e8:f9:97:48:6b:15:ab:ec:7a:9c:04:c2:b2:4b:45: d6:ff:d3:b7:86:de:d1:35:67:db:5f:6d:65:a5:54:c3:8e:b4: f4:ae:9e:5a:57:0d:2d:65:13:4f:d1:3e:c8:bb:ec:4f:45:61: 10:92:58:b4:e1:53:e2:96:25:c6:25:a9:bd:4c:4b:30:03:0e: 98:03:f5:a7:95:85:9f:58:18:a6:14:b7:8f:00:df:1a:ee:ae: e3:7e:c7:24:97:e1:8b:53:c9:07:71:c7:a4:26:bc:3e:9d:62: cf:e6:43:9f:c6:a5:70:0b:04:a2:bb:e2:51:93:70:4d:85:39: 1f:59:13:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1 NzhBMEVENUUwHhcNMjUwNjE4MTY1NzIyWhcNMjUwNjI1MTY1NzIyWjAYMRYwFAYD VQQDEw02ODUyZWZmMi1mNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRv7gzxfl9xzaJpK9u9kD0it3saWjYTDOedqXMtmR603TMG5FRalRVkNdN0f a1WWheCua6gKMrSTI25v50wpZqqX4E/yFmifcdtqgeHSmIl9XLNtNdnewYjLf1w6 k/7Qnjoaao2gLXmXwiY/0/eJi92+DXrvu9EyIgXbpqJgLjpwnIaMVkqeEz+eqjlA v1OE1GdPoxeRoQOusfTroUVQY1/t/pbgomjoXM+8HL2b5HqCZ6Pu5YS28g9zde8h 17kKZd4FAunCt1IfiCxeJtAf7l070GxSEs5vGpbHg+TPT9M9sUdy6WfW7CNk2STm DMRdiIRXQiE9CHYfD2VP4As3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2EuAgc 0fVOjOGegyaAGWe+oIX+MB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ cHppQ09QTHRNRlZYaWc3VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVcJEzbUpnGLpifq4At4XRK0kQekM2XZTvcR3VqmKDu+8fk1DkYpaw g9yd8s/9p3mvaNkqKSkgBvyihmxCa/J2nhF1yg/Bagp8Bnl5vfYhq2l/rXdnPdPv nXhkOCgK4ilQoecQf5O5va4mCCFIaZWaQ4wG1iPmINjS4bixIdYK2BDo+ZdIaxWr 7HqcBMKyS0XW/9O3ht7RNWfbX21lpVTDjrT0rp5aVw0tZRNP0T7Iu+xPRWEQkli0 4VPiliXGJam9TEswAw6YA/WnlYWfWBimFLePAN8a7q7jfsckl+GLU8kHccekJrw+ nWLP5kOfxqVwCwSiu+JRk3BNhTkfWRP2 -----END CERTIFICATE-----Generated at Fri Jun 20 01:20:37 2025 by rpki-client