$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: q3ww/w/7wxV/9/LZ4ZegzI59nvFg1RKCHWP1cvuZgRU= Subject key identifier: 53:24:F2:E8:04:66:1B:3D:1E:03:AF:29:CF:98:27:36:80:18:8E:4F Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 16CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 1FD0 Signing time: Sat 14 Jun 2025 16:36:58 +0000 Manifest this update: Sat 14 Jun 2025 16:36:57 +0000 Manifest next update: Sat 21 Jun 2025 16:36:57 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: tAhHoOInWS5YUJO/GkOj2bbpk3tZuGPQVtFKPSHUwHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5836 (0x16cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Jun 14 16:36:57 2025 GMT Not After : Jun 21 16:36:57 2025 GMT Subject: CN=684da529-7945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:c2:63:5e:7b:6f:75:cd:1e:77:dc:0c:4c: cf:ed:e0:0c:52:38:62:5e:8d:5c:12:74:ae:fa:08: 48:c1:27:56:a8:9a:82:88:19:15:4c:36:39:f7:f0: 74:c7:87:7b:c9:fe:a2:06:de:27:fa:2c:95:9a:e8: 57:a7:d9:57:1f:dc:d5:25:5b:4b:39:6d:a1:01:b1: 96:ab:d4:14:7e:e6:c5:3c:46:c9:de:4f:57:b8:f9: d4:d9:f5:64:84:a7:58:ea:1f:00:87:e1:55:79:c9: 13:5b:6d:33:02:f5:bb:67:11:79:a6:eb:45:81:20: 3d:34:74:b3:08:f1:90:16:9a:6e:27:2c:56:a7:18: 47:74:4a:74:c3:2f:d4:19:55:ae:02:25:91:85:96: a4:d9:94:cd:1d:f2:bc:f1:0b:87:64:68:39:c8:11: 2d:f3:00:99:9e:ab:75:7d:09:6d:42:ae:8f:38:f3: c9:cd:4e:c9:07:56:c5:9f:82:6b:8b:11:95:a6:63: bb:aa:71:be:f5:60:24:53:5a:94:ba:b3:a9:b1:f4: 86:64:e7:e7:7d:7f:78:f5:c6:38:bc:fa:69:6e:b5: a0:fb:9e:b8:8a:e3:4c:0f:b3:95:77:be:43:5f:f0: 0c:2f:85:4e:f8:81:95:fb:c9:18:bd:69:58:2e:55: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:24:F2:E8:04:66:1B:3D:1E:03:AF:29:CF:98:27:36:80:18:8E:4F X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1f:60:e2:08:80:aa:4f:22:f4:d3:f0:65:32:e7:74:42:a6: 5b:48:6d:39:43:4c:28:06:07:c7:2c:12:d2:a9:53:20:66:53: 7c:64:5a:3d:e7:60:16:f9:af:54:4a:b9:f2:3d:14:7b:59:2a: 27:00:7f:f0:5e:51:b9:89:23:66:d1:ba:6c:59:ef:2d:0d:97: 2c:ef:f0:1f:27:87:7a:23:ff:b5:1a:8b:0a:03:da:fe:2e:b5: 45:c8:05:be:47:b1:d2:4c:37:ea:59:7c:b5:fa:75:38:81:d6: 51:3f:4a:8b:ce:13:91:b5:41:60:00:4c:09:9a:29:fa:a4:b5: aa:7d:d6:d7:b0:b3:86:f5:01:2a:e2:d4:e1:62:37:02:1f:a7: d5:39:63:12:e6:6b:ba:8a:48:d9:77:56:2a:a8:9b:bf:c5:4d: 0f:9c:8a:f1:26:8a:f6:41:4f:5c:42:54:ec:7b:db:7f:a1:5c: 90:50:2d:0d:e6:d7:d4:4f:bd:ca:54:7d:64:fe:ca:55:84:4e: 68:a6:d2:70:09:14:db:25:ed:6a:28:06:d9:70:6f:21:e5:67: f0:2f:bc:aa:33:8c:a0:e8:a4:a3:05:f6:5b:10:b7:f7:0b:74: 51:9d:01:4d:09:96:89:d6:96:0c:32:75:a8:8a:0b:3d:17:2a: 07:9a:9b:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUwNjE0MTYzNjU3WhcNMjUwNjIxMTYzNjU3WjAYMRYwFAYD VQQDEw02ODRkYTUyOS03OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzbCY157b3XNHnfcDEzP7eAMUjhiXo1cEnSu+ghIwSdWqJqCiBkVTDY59/B0 x4d7yf6iBt4n+iyVmuhXp9lXH9zVJVtLOW2hAbGWq9QUfubFPEbJ3k9XuPnU2fVk hKdY6h8Ah+FVeckTW20zAvW7ZxF5putFgSA9NHSzCPGQFppuJyxWpxhHdEp0wy/U GVWuAiWRhZak2ZTNHfK88QuHZGg5yBEt8wCZnqt1fQltQq6POPPJzU7JB1bFn4Jr ixGVpmO7qnG+9WAkU1qUurOpsfSGZOfnfX949cY4vPppbrWg+564iuNMD7OVd75D X/AML4VO+IGV+8kYvWlYLlVdtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMk8ugE Zhs9HgOvKc+YJzaAGI5PMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClH2DiCICqTyL00/BlMud0QqZbSG05Q0woBgfHLBLSqVMgZlN8ZFo9 52AW+a9USrnyPRR7WSonAH/wXlG5iSNm0bpsWe8tDZcs7/AfJ4d6I/+1GosKA9r+ LrVFyAW+R7HSTDfqWXy1+nU4gdZRP0qLzhORtUFgAEwJmin6pLWqfdbXsLOG9QEq 4tThYjcCH6fVOWMS5mu6ikjZd1YqqJu/xU0PnIrxJor2QU9cQlTse9t/oVyQUC0N 5tfUT73KVH1k/spVhE5optJwCRTbJe1qKAbZcG8h5WfwL7yqM4yg6KSjBfZbELf3 C3RRnQFNCZaJ1pYMMnWoigs9FyoHmpuy -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:23 2025 by rpki-client