$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: gE8mH8mfzjCZvzaaxkOrQW/UK5z+6eMZZC5G9Hd1ohk= Subject key identifier: 2D:C1:44:60:7C:71:7E:31:94:85:34:70:7A:47:AA:9B:9C:3B:82:CD Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 0399 Signing time: Sun 15 Jun 2025 00:30:01 +0000 Manifest this update: Sun 15 Jun 2025 00:30:00 +0000 Manifest next update: Sun 22 Jun 2025 00:30:00 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: 9WvV2k+H/hxOvX9daWvRSYitCrwsj7ExUFq+aRu4sws=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Jun 15 00:30:00 2025 GMT Not After : Jun 22 00:30:00 2025 GMT Subject: CN=684e1409-7c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:4b:8d:d2:40:b4:c9:b2:ef:f4:61:12:bb: c2:8f:ac:08:b5:77:38:0f:09:63:25:18:84:1e:93: 0a:06:2f:56:a8:36:a6:3b:1f:26:b1:df:87:d5:95: 62:34:36:46:8a:85:f0:35:ee:32:9e:95:47:5e:55: 2b:5d:87:89:47:35:77:d6:95:1a:dc:92:19:fe:3c: c7:31:2b:96:ee:bc:19:0e:c2:b0:ff:f0:24:32:f1: d2:d4:ea:f5:e3:6e:b2:ed:75:bf:05:44:a8:c7:cc: 94:10:63:d2:d8:a7:cc:c8:ad:7a:ef:fd:43:d5:14: d3:17:49:3e:ee:18:fb:fd:95:9d:39:aa:eb:2d:79: 39:b8:82:33:27:90:dc:7b:1c:6d:60:a7:8f:70:2a: 4a:f1:0f:bc:1b:2f:22:4e:50:c4:47:3a:40:f9:4e: 04:c9:97:d6:90:fc:f6:71:fd:ab:96:7d:39:73:da: bc:f0:e2:54:6b:4a:a2:d7:70:ce:48:8d:27:f6:9d: 09:8d:48:a5:17:46:91:b6:63:fd:94:50:15:8b:ae: e3:88:c1:32:8c:24:0c:d9:13:8b:81:2b:f6:d6:69: 86:c2:d0:e6:36:0c:7d:67:89:05:4b:08:e3:12:72: e3:1f:82:c5:46:ad:50:84:ff:91:c9:55:e9:8e:73: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:44:60:7C:71:7E:31:94:85:34:70:7A:47:AA:9B:9C:3B:82:CD X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:ac:60:36:8f:4b:f2:03:cd:31:9f:56:6a:93:3a:5c:c5: 53:5a:4d:35:cb:b5:66:be:80:5b:02:8c:97:1c:04:7c:ac:a0: 23:9a:4a:df:6d:b3:57:c1:ec:2c:88:92:7a:21:3b:f1:26:6a: 7b:e9:66:bf:8c:90:6b:d7:68:fe:11:c0:70:3a:86:a3:e4:3d: ef:09:ea:a0:33:18:c8:de:61:33:91:4e:04:00:d5:49:11:46: cd:be:a7:08:da:a5:74:a9:3d:ad:61:cc:ca:59:78:d0:32:a9: f1:89:cc:09:ed:da:55:7d:cf:8e:a7:82:b5:02:43:c6:60:cb: 59:b2:56:0d:ee:c3:0e:97:3e:9e:e1:bc:d1:9a:5e:83:be:34: 8a:00:2e:66:30:58:d0:cd:50:c6:96:a8:a3:d9:ca:31:b9:0a: 3b:2b:e8:80:53:21:b9:23:4d:39:0d:6f:04:3b:1e:a1:7c:0a: 90:ac:33:6a:cb:12:c8:09:bf:b2:12:cb:1e:21:db:5e:4e:dc: fa:85:0c:40:88:bc:1e:64:4a:2b:00:70:65:1e:bb:bc:85:9a: 66:d0:ee:c6:e3:42:d5:5b:06:11:6f:77:84:c2:8b:09:3b:a2: e5:b4:f4:a8:85:01:75:22:3c:ba:58:cf:89:55:87:81:5d:a4: bf:2c:f2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwNjE1MDAzMDAwWhcNMjUwNjIyMDAzMDAwWjAYMRYwFAYD VQQDEw02ODRlMTQwOS03YzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumZLjdJAtMmy7/RhErvCj6wItXc4DwljJRiEHpMKBi9WqDamOx8msd+H1ZVi NDZGioXwNe4ynpVHXlUrXYeJRzV31pUa3JIZ/jzHMSuW7rwZDsKw//AkMvHS1Or1 426y7XW/BUSox8yUEGPS2KfMyK167/1D1RTTF0k+7hj7/ZWdOarrLXk5uIIzJ5Dc exxtYKePcCpK8Q+8Gy8iTlDERzpA+U4EyZfWkPz2cf2rln05c9q88OJUa0qi13DO SI0n9p0JjUilF0aRtmP9lFAVi67jiMEyjCQM2ROLgSv21mmGwtDmNgx9Z4kFSwjj EnLjH4LFRq1QhP+RyVXpjnO6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3BRGB8 cX4xlIU0cHpHqpucO4LNMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR8qxgNo9L8gPNMZ9WapM6XMVTWk01y7VmvoBbAoyXHAR8rKAjmkrf bbNXwewsiJJ6ITvxJmp76Wa/jJBr12j+EcBwOoaj5D3vCeqgMxjI3mEzkU4EANVJ EUbNvqcI2qV0qT2tYczKWXjQMqnxicwJ7dpVfc+Op4K1AkPGYMtZslYN7sMOlz6e 4bzRml6DvjSKAC5mMFjQzVDGlqij2coxuQo7K+iAUyG5I005DW8EOx6hfAqQrDNq yxLICb+yEsseIdteTtz6hQxAiLweZEorAHBlHru8hZpm0O7G40LVWwYRb3eEwosJ O6LltPSohQF1Ijy6WM+JVYeBXaS/LPLE -----END CERTIFICATE-----Generated at Sun Jun 15 05:10:47 2025 by rpki-client