$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: 1cDiEGbzj1kiOWcTwhnZqZ6eAkqi29+aGNxU0yAhx6o= Subject key identifier: 1F:C5:9F:14:77:AE:7B:C5:2F:8A:BD:85:7D:F3:7A:80:1D:FD:35:8D Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0E89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0E7D Signing time: Sat 14 Jun 2025 17:37:38 +0000 Manifest this update: Sat 14 Jun 2025 17:37:38 +0000 Manifest next update: Sat 21 Jun 2025 17:37:38 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: U0lGPXn7hfs9N11XOJh9aCUTVErCAMYsNMbEVjdcErg=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: vN4eTkgE+NqzrGCF55MmLQiQ1U4uCoJcvi6VZO9X/KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3721 (0xe89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Jun 14 17:37:38 2025 GMT Not After : Jun 21 17:37:38 2025 GMT Subject: CN=684db362-2de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:d6:78:62:69:3d:a8:00:8f:2b:f7:81:d0: b2:67:89:d2:60:9b:13:e5:36:23:9c:d9:7a:32:73: cd:84:e6:56:2f:91:ea:05:d5:7d:e2:6c:27:d8:e2: 3d:e5:ce:c4:99:af:bd:3b:a7:5b:f4:a4:ce:6a:a1: 00:ac:16:59:27:7b:e4:4e:38:99:ed:98:81:c1:b7: 09:79:bc:e7:a1:16:ec:03:d7:5d:3c:fa:2c:8e:36: 5f:62:a1:39:ef:18:c8:aa:84:8a:98:1f:a5:8c:dd: d7:cf:d8:b8:3c:56:f5:e4:f0:22:20:49:27:b1:52: c2:dd:a9:fb:27:c1:11:a5:c6:da:4b:63:43:e4:41: 0a:ef:30:60:b3:04:bc:df:50:bd:56:4e:38:35:97: 75:47:f9:90:ee:8d:3e:9f:23:5a:82:90:ce:df:8e: ac:6a:f4:3a:b1:6b:6d:b1:dc:81:80:b3:96:9e:6b: 75:ff:63:73:52:b2:a8:0a:58:f7:93:ae:11:f5:2d: b2:92:e2:c2:f4:b4:69:eb:25:a1:97:15:c8:ef:d0: 04:18:fa:16:9d:f4:7f:9f:13:2e:d8:c2:39:57:fd: dd:7d:16:c9:9f:25:48:32:e0:48:70:6d:74:32:60: bb:5e:58:02:35:bb:c6:b5:c9:18:4c:5d:6e:70:b1: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C5:9F:14:77:AE:7B:C5:2F:8A:BD:85:7D:F3:7A:80:1D:FD:35:8D X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a2:ec:95:91:aa:45:72:a0:9d:aa:0c:d2:f6:04:c6:f6:46: ae:2a:14:72:ff:7f:47:56:7c:a8:ac:b5:9b:98:76:c6:b3:d0: 1a:e4:2b:56:5a:ee:d4:c7:42:87:bf:59:fc:75:57:16:1c:e1: dd:0e:41:c0:ca:f2:81:51:c7:5b:83:d6:cf:46:17:b9:22:6d: ee:38:4d:0e:a3:0c:5a:53:d6:98:df:cc:7d:d2:7b:6a:ef:75: ec:03:0e:26:7d:e9:f7:b0:a2:70:5c:ff:8b:25:53:77:46:9d: 0f:c6:8d:8b:db:58:55:34:85:01:0a:f3:72:01:24:dd:3b:08: d2:38:c1:dd:30:bf:49:d9:b0:da:cf:aa:30:96:ba:30:8d:46: a1:63:a3:98:10:5d:e0:9e:e3:54:ff:75:36:2b:27:7e:c9:c4: 68:6d:46:61:28:e3:9d:ae:ef:11:2b:ef:f5:fd:03:03:a4:c7: 05:73:5a:41:bd:fd:01:91:37:6c:93:bc:af:67:ef:f2:e7:84: 3f:57:04:15:c1:08:ba:8a:0f:79:64:2d:02:2b:ab:af:bc:d9: f7:0e:c0:41:d0:a9:ad:11:ed:6f:28:e1:d3:40:ee:d5:da:7c: 03:47:c5:e1:5f:aa:5e:a8:67:27:ba:fb:66:fe:d5:80:10:f9: ee:06:ef:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjUwNjE0MTczNzM4WhcNMjUwNjIxMTczNzM4WjAYMRYwFAYD VQQDEw02ODRkYjM2Mi0yZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyfWeGJpPagAjyv3gdCyZ4nSYJsT5TYjnNl6MnPNhOZWL5HqBdV94mwn2OI9 5c7Ema+9O6db9KTOaqEArBZZJ3vkTjiZ7ZiBwbcJebznoRbsA9ddPPosjjZfYqE5 7xjIqoSKmB+ljN3Xz9i4PFb15PAiIEknsVLC3an7J8ERpcbaS2ND5EEK7zBgswS8 31C9Vk44NZd1R/mQ7o0+nyNagpDO346savQ6sWttsdyBgLOWnmt1/2NzUrKoClj3 k64R9S2ykuLC9LRp6yWhlxXI79AEGPoWnfR/nxMu2MI5V/3dfRbJnyVIMuBIcG10 MmC7XlgCNbvGtckYTF1ucLG5ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/FnxR3 rnvFL4q9hX3zeoAd/TWNMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbouyVkapFcqCdqgzS9gTG9kauKhRy/39HVnyorLWbmHbGs9Aa5CtW Wu7Ux0KHv1n8dVcWHOHdDkHAyvKBUcdbg9bPRhe5Im3uOE0OowxaU9aY38x90ntq 73XsAw4mfen3sKJwXP+LJVN3Rp0Pxo2L21hVNIUBCvNyASTdOwjSOMHdML9J2bDa z6owlrowjUahY6OYEF3gnuNU/3U2Kyd+ycRobUZhKOOdru8RK+/1/QMDpMcFc1pB vf0BkTdsk7yvZ+/y54Q/VwQVwQi6ig95ZC0CK6uvvNn3DsBB0KmtEe1vKOHTQO7V 2nwDR8XhX6peqGcnuvtm/tWAEPnuBu9t -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:15 2025 by rpki-client