$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: Pqgf5AqW/SNEUn3xfq+mPmpEtiCLbv4ECMji6mayfbc= Subject key identifier: DC:C2:62:D0:34:2E:12:79:19:9D:26:E5:41:29:9E:2E:CB:C4:5E:11 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 39 Signing time: Sun 15 Jun 2025 06:40:01 +0000 Manifest this update: Sun 15 Jun 2025 06:40:00 +0000 Manifest next update: Sun 22 Jun 2025 06:40:00 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: sULBKgpmkg7Sgl7YAWEOraBWxrg5GR5KFNOH1OZ86bI=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Jun 15 06:40:00 2025 GMT Not After : Jun 22 06:40:00 2025 GMT Subject: CN=684e6ac1-a162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:bd:2c:0f:65:7c:05:99:37:24:3e:51:6c: 32:92:d9:cb:0d:d4:55:9c:c3:d2:72:f4:db:60:a2: 4a:32:f8:2c:5f:f8:e9:6f:ad:16:58:16:41:0b:f5: 26:28:6a:a3:c7:6a:fa:3c:26:38:15:41:96:39:39: 36:40:46:69:72:06:0d:f7:77:20:c2:5c:0c:c8:7c: 63:79:d8:13:03:ad:22:7a:40:4a:fa:27:f7:d5:09: d6:de:78:be:82:89:e1:db:8c:37:97:bf:1d:88:eb: bc:4a:c2:1e:1d:90:c7:3e:78:80:24:7a:80:22:e3: ff:c3:d3:f4:b3:e6:d4:8f:a7:24:c5:bb:c7:28:2d: 3c:dc:f4:55:91:74:34:b4:1d:73:6f:78:1f:b8:37: dc:35:c9:e1:b0:ed:c2:90:3d:8e:30:d6:55:1e:53: d2:fb:6e:ee:23:6a:89:67:b6:28:f4:52:0a:69:85: 9d:d1:51:d7:11:47:5d:05:80:f7:06:4a:d0:cc:82: ad:18:fb:a3:97:54:f0:36:b1:95:4b:ff:92:f9:14: 6e:4c:46:e0:b3:c0:6e:e7:c8:be:df:e4:7b:e5:00: ad:05:e0:3f:b4:8b:7a:69:07:98:82:3f:9d:8c:44: 7b:35:99:f0:5f:04:04:2c:4e:de:f6:fb:59:fc:38: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:62:D0:34:2E:12:79:19:9D:26:E5:41:29:9E:2E:CB:C4:5E:11 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:9f:24:c6:a2:29:c6:f3:97:83:6c:01:01:e9:a3:33:ec: ac:8d:27:26:a6:84:5d:fc:35:48:5a:0b:4b:66:63:49:81:01: 80:bc:3b:b7:25:ce:98:c9:ab:ca:59:45:0d:c1:24:cb:c2:ca: b4:ba:b6:37:55:9a:a1:4f:1b:49:ea:c8:c1:b9:6a:2a:ad:b3: df:f8:b1:00:7b:39:b1:89:bb:8e:e1:ae:bf:e3:fa:e7:f3:3f: 9d:06:1e:2e:1c:c6:b1:6f:9d:56:ea:e6:3a:61:6c:61:72:da: b8:b6:ef:f4:da:0c:72:9b:ba:36:7b:e0:d5:9d:0c:e2:3e:4e: 6d:7e:6b:c5:5b:5f:2d:8f:3a:b1:06:d0:3c:67:6e:e6:a5:b7: b5:66:ce:66:36:17:53:a9:43:72:1e:08:0b:22:2b:aa:34:16: fe:2e:33:7a:6d:69:8f:b4:c4:e3:02:da:19:65:50:a6:f8:1f: a0:16:b0:b6:97:a0:98:2e:70:8a:95:9a:b8:a9:78:d4:e7:bd: 3d:d3:10:f6:57:5a:e4:b4:24:04:ee:de:6d:f5:bf:cd:2f:5d: 75:8c:8b:02:65:68:26:0a:93:86:5a:15:5f:ea:ac:cb:a7:3e: 03:ba:72:9b:b5:25:17:2d:8a:a7:ee:66:72:80:c6:f1:f0:ce: 13:bc:df:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTA2MTUwNjQwMDBaFw0yNTA2MjIwNjQwMDBaMBgxFjAUBgNV BAMTDTY4NGU2YWMxLWExNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Wr0sD2V8BZk3JD5RbDKS2csN1FWcw9Jy9Ntgokoy+Cxf+OlvrRZYFkEL9SYo aqPHavo8JjgVQZY5OTZARmlyBg33dyDCXAzIfGN52BMDrSJ6QEr6J/fVCdbeeL6C ieHbjDeXvx2I67xKwh4dkMc+eIAkeoAi4//D0/Sz5tSPpyTFu8coLTzc9FWRdDS0 HXNveB+4N9w1yeGw7cKQPY4w1lUeU9L7bu4jaolntij0UgpphZ3RUdcRR10FgPcG StDMgq0Y+6OXVPA2sZVL/5L5FG5MRuCzwG7nyL7f5HvlAK0F4D+0i3ppB5iCP52M RHs1mfBfBAQsTt72+1n8OGdXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3MJi0DQu EnkZnSblQSmeLsvEXhEwHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3 SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMSnyTGoinG85eDbAEB6aMz7KyNJyamhF38NUhaC0tmY0mBAYC8O7cl zpjJq8pZRQ3BJMvCyrS6tjdVmqFPG0nqyMG5aiqts9/4sQB7ObGJu47hrr/j+ufz P50GHi4cxrFvnVbq5jphbGFy2ri27/TaDHKbujZ74NWdDOI+Tm1+a8VbXy2POrEG 0Dxnbualt7VmzmY2F1OpQ3IeCAsiK6o0Fv4uM3ptaY+0xOMC2hllUKb4H6AWsLaX oJgucIqVmripeNTnvT3TEPZXWuS0JATu3m31v80vXXWMiwJlaCYKk4ZaFV/qrMun PgO6cpu1JRctiqfuZnKAxvHwzhO833I= -----END CERTIFICATE-----Generated at Mon Jun 16 21:30:53 2025 by rpki-client