$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: duE09Qc9DQyTBpD9VW3VaKTCihBhZN7FDgAEgCxzK98= Subject key identifier: F7:E3:0B:F0:77:9F:02:B2:99:4F:A7:6A:84:32:79:21:07:18:4A:75 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: D9 Signing time: Sun 15 Jun 2025 04:50:11 +0000 Manifest this update: Sun 15 Jun 2025 04:50:11 +0000 Manifest next update: Sun 22 Jun 2025 04:50:11 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: SUS16tFoIGRjO69g7UAYnuog/5SN7E9t8Jgj6+XwM8A=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Jun 15 04:50:11 2025 GMT Not After : Jun 22 04:50:11 2025 GMT Subject: CN=684e5103-acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:f2:8b:9e:be:e3:e4:38:0b:66:81:62:a1: be:26:a5:bb:23:38:54:7e:91:a1:15:82:c2:d6:7f: 49:ed:c5:ea:73:cb:c1:5b:da:6e:63:01:ff:e1:f9: 28:9a:10:7d:1f:23:5d:d0:19:6a:02:81:fa:6d:ae: 34:97:b9:65:79:25:4b:e7:51:57:a4:62:a0:8c:b3: 66:d4:ac:40:56:96:fe:50:49:62:61:76:1f:b1:9c: 41:5c:28:9d:8c:53:c1:bb:40:15:87:8d:bd:3d:05: fc:10:c0:c1:4a:c4:d9:09:0e:51:f7:48:15:7b:1c: d5:2b:e9:f1:48:f6:3e:37:77:9b:4b:99:e9:2b:98: 2e:a4:b5:42:1a:e9:c2:51:ab:3a:e4:8d:8f:3a:46: 60:fa:9a:22:df:0a:a5:19:82:ca:e8:c3:d6:9f:ef: c6:48:3e:64:05:a7:f8:ec:a9:6a:53:7a:53:f5:f4: e1:3f:3f:49:96:a0:08:d7:50:f3:d2:3c:a4:e3:ff: 45:dc:75:e7:91:bd:5f:50:25:cf:08:ea:bc:ff:8b: 3d:8a:50:af:f4:0e:d0:01:49:e7:62:a9:6e:e3:62: a2:e9:66:cb:ed:c1:5d:6e:90:0b:39:e1:15:e5:e1: 7a:cd:9f:aa:b9:94:81:34:93:4a:a0:45:39:62:0b: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:0B:F0:77:9F:02:B2:99:4F:A7:6A:84:32:79:21:07:18:4A:75 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:86:32:e3:ab:6f:fa:f4:f0:e8:c9:a7:ec:8a:1f:93:43: b1:87:e6:8c:95:a2:96:eb:83:57:df:53:be:69:92:94:60:43: a5:25:9a:03:78:8b:d6:58:27:4a:3e:6c:dd:67:24:7a:dd:11: b5:59:75:8b:25:56:f5:ac:0f:eb:3a:77:7f:70:e5:45:d1:16: 07:27:66:e7:cc:d5:0e:69:dd:53:8a:c8:3b:b3:89:75:50:11: 59:42:32:e3:83:2b:1d:e0:a7:94:44:dc:13:e0:7a:8d:c8:9a: 9d:7a:b0:a8:9d:e2:ca:d3:01:da:71:27:5b:69:0b:fc:d1:37: 98:07:b9:f0:35:2b:0c:cd:35:7b:d4:eb:3c:71:76:a8:39:f3: 21:92:ce:94:c3:70:1d:cd:ff:9d:3e:d2:50:ca:08:0d:5b:4a: d8:49:f2:23:bc:24:c2:e0:29:3e:5c:92:31:36:d5:e8:6a:69: e4:bc:5e:0e:98:7e:77:27:a9:4a:d5:37:13:10:a7:8f:7b:f2: 54:7b:22:80:8a:41:5e:f1:57:ac:6d:0d:54:8a:f3:ab:00:3b: 48:fb:61:d9:ce:5c:66:3e:a2:6b:17:c8:e9:a4:3c:dc:42:a1: 68:c3:78:0e:66:c0:90:ab:a0:29:15:06:ab:53:95:be:82:96: 0d:68:50:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwNjE1MDQ1MDExWhcNMjUwNjIyMDQ1MDExWjAYMRYwFAYD VQQDEw02ODRlNTEwMy1hY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDPyi56+4+Q4C2aBYqG+JqW7IzhUfpGhFYLC1n9J7cXqc8vBW9puYwH/4fko mhB9HyNd0BlqAoH6ba40l7lleSVL51FXpGKgjLNm1KxAVpb+UEliYXYfsZxBXCid jFPBu0AVh429PQX8EMDBSsTZCQ5R90gVexzVK+nxSPY+N3ebS5npK5gupLVCGunC Uas65I2POkZg+poi3wqlGYLK6MPWn+/GSD5kBaf47KlqU3pT9fThPz9JlqAI11Dz 0jyk4/9F3HXnkb1fUCXPCOq8/4s9ilCv9A7QAUnnYqlu42Ki6WbL7cFdbpALOeEV 5eF6zZ+quZSBNJNKoEU5YgsfCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfjC/B3 nwKymU+naoQyeSEHGEp1MB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgzIYy46tv+vTw6Mmn7Iofk0Oxh+aMlaKW64NX31O+aZKUYEOlJZoD eIvWWCdKPmzdZyR63RG1WXWLJVb1rA/rOnd/cOVF0RYHJ2bnzNUOad1Tisg7s4l1 UBFZQjLjgysd4KeURNwT4HqNyJqderConeLK0wHacSdbaQv80TeYB7nwNSsMzTV7 1Os8cXaoOfMhks6Uw3Adzf+dPtJQyggNW0rYSfIjvCTC4Ck+XJIxNtXoamnkvF4O mH53J6lK1TcTEKePe/JUeyKAikFe8VesbQ1UivOrADtI+2HZzlxmPqJrF8jppDzc QqFow3gOZsCQq6ApFQarU5W+gpYNaFDA -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:52 2025 by rpki-client