$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: YdpAMixA+hhEdug239J8bT4+TkhtIraFnBCR0QwxMcQ= Subject key identifier: DC:7B:90:9C:99:41:FA:E9:E6:E1:FE:CD:28:80:86:57:B8:45:4A:50 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 16E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 2006 Signing time: Wed 06 Aug 2025 16:45:25 +0000 Manifest this update: Wed 06 Aug 2025 16:45:25 +0000 Manifest next update: Wed 13 Aug 2025 16:45:25 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: mnSuiZtJIbvLKMdAh4TdPRL4Ve5BROLu2mOj/FxVWFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5863 (0x16e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Aug 6 16:45:25 2025 GMT Not After : Aug 13 16:45:25 2025 GMT Subject: CN=689386a5-290f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:ea:9f:19:14:98:02:f3:6a:75:f0:19:89: 3d:1b:99:fe:68:3e:57:29:9a:4c:78:8e:12:1f:02: 9c:f3:fe:c7:13:2d:a7:fd:b5:f9:5b:dc:5f:69:07: e9:92:48:ba:18:30:91:e9:3b:22:8f:6f:fe:81:7b: 2a:6d:1b:71:cb:7b:ef:f7:d0:79:fd:f9:18:a8:b7: 04:f9:1c:bf:cb:c6:48:53:b5:62:9e:ea:55:75:b4: fc:52:3a:f6:13:55:47:7f:14:56:4e:aa:d0:b8:27: 8b:bd:c9:e6:ed:56:5c:28:44:ff:a5:cf:53:fb:b1: 79:42:ee:52:2a:fa:b0:e1:46:14:1c:4d:f5:d2:7a: e8:25:69:d6:19:ec:ae:2f:8b:39:50:e7:00:54:1d: 77:ec:b2:d8:51:5e:8b:cb:f6:82:3a:50:70:a1:64: ee:03:e6:6a:8a:29:6a:f3:f1:47:79:d6:7c:84:c8: 37:2f:d7:b9:3e:89:41:d3:bf:df:0c:e4:ba:54:d4: d6:07:1f:9e:3e:8e:0d:31:db:56:7f:f1:48:60:24: 02:1c:19:7b:a6:46:ca:37:30:a3:fb:c2:cd:11:c2: f9:d6:9d:e2:21:19:2f:cf:c2:f1:e6:5b:6f:93:9a: a3:17:71:b8:bc:dd:36:e3:d0:80:d1:7c:29:a9:0a: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7B:90:9C:99:41:FA:E9:E6:E1:FE:CD:28:80:86:57:B8:45:4A:50 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:3a:53:3d:2a:b0:1c:3a:3e:c2:08:6a:c3:16:82:f5:44:92: ec:53:fc:47:76:ae:61:8b:f5:9b:6c:3e:0a:cb:a6:3c:47:29: cc:29:53:b6:5c:1e:85:ce:4a:04:e5:ae:49:a9:82:bb:77:99: 66:0a:35:24:84:12:b9:07:37:78:16:85:54:6e:60:11:34:90: 1c:69:76:c8:2a:eb:64:94:f9:1f:40:13:98:3f:87:f6:6d:95: 81:06:98:42:35:fa:cc:ba:b4:83:cc:7d:28:00:c1:f9:d6:36: af:be:92:6c:35:01:43:87:5a:b7:66:88:25:a7:ac:2e:14:d3: b6:f7:1d:3f:a6:d9:51:b4:87:f9:5c:19:bd:c0:de:49:88:2b: 7d:e4:b5:fe:fa:64:35:25:03:3f:a6:48:92:75:00:3b:7c:f0: d7:e1:d7:18:12:8f:de:46:93:0c:d7:fa:eb:5a:5c:68:5c:35: 7e:91:a0:9a:40:86:44:98:5e:b5:3c:05:08:e2:d0:87:89:79: 4b:ca:6b:99:55:9b:95:69:46:22:2e:de:ef:a6:5a:6f:06:66: 38:4b:5c:c0:c9:ff:de:62:c9:c0:bd:99:4e:aa:84:8d:f8:1a: 73:ea:66:54:20:86:95:53:a3:12:55:93:0e:63:87:4e:7c:60: ae:f6:3e:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUwODA2MTY0NTI1WhcNMjUwODEzMTY0NTI1WjAYMRYwFAYD VQQDEw02ODkzODZhNS0yOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4/qnxkUmALzanXwGYk9G5n+aD5XKZpMeI4SHwKc8/7HEy2n/bX5W9xfaQfp kki6GDCR6Tsij2/+gXsqbRtxy3vv99B5/fkYqLcE+Ry/y8ZIU7VinupVdbT8Ujr2 E1VHfxRWTqrQuCeLvcnm7VZcKET/pc9T+7F5Qu5SKvqw4UYUHE310nroJWnWGeyu L4s5UOcAVB137LLYUV6Ly/aCOlBwoWTuA+Zqiilq8/FHedZ8hMg3L9e5PolB07/f DOS6VNTWBx+ePo4NMdtWf/FIYCQCHBl7pkbKNzCj+8LNEcL51p3iIRkvz8Lx5ltv k5qjF3G4vN0249CA0XwpqQqegwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx7kJyZ Qfrp5uH+zSiAhle4RUpQMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBOlM9KrAcOj7CCGrDFoL1RJLsU/xHdq5hi/WbbD4Ky6Y8RynMKVO2 XB6FzkoE5a5JqYK7d5lmCjUkhBK5Bzd4FoVUbmARNJAcaXbIKutklPkfQBOYP4f2 bZWBBphCNfrMurSDzH0oAMH51javvpJsNQFDh1q3Zoglp6wuFNO29x0/ptlRtIf5 XBm9wN5JiCt95LX++mQ1JQM/pkiSdQA7fPDX4dcYEo/eRpMM1/rrWlxoXDV+kaCa QIZEmF61PAUI4tCHiXlLymuZVZuVaUYiLt7vplpvBmY4S1zAyf/eYsnAvZlOqoSN +Bpz6mZUIIaVU6MSVZMOY4dOfGCu9j6F -----END CERTIFICATE-----Generated at Thu Aug 7 11:22:15 2025 by rpki-client