$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: rENdgQetXuOiiDycVnRhd8edP/wx21/pOCze0sJ1ZJ8= Subject key identifier: D3:2B:B8:F1:F8:E9:CF:4B:42:9A:67:A7:20:15:F6:09:C0:2C:6B:7F Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 04BE Signing time: Sat 14 Jun 2025 23:39:24 +0000 Manifest this update: Sat 14 Jun 2025 23:39:24 +0000 Manifest next update: Sat 21 Jun 2025 23:39:24 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: 0lB3GV4PAhJvnLtTVRFzeKNBCLXk28KzujRCWx52Pt4=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Jun 14 23:39:24 2025 GMT Not After : Jun 21 23:39:24 2025 GMT Subject: CN=684e082c-167f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:6a:87:7e:e6:44:4d:57:e7:ea:93:e6:be: 75:9f:aa:06:4a:24:c7:bf:af:df:5e:0f:9f:8b:e5: 8e:30:e8:41:07:3a:70:52:f5:4f:37:e2:ab:b0:6e: 0a:0d:74:9e:7e:e3:6f:79:ba:06:d3:97:89:52:14: 0a:0f:1f:e9:6e:58:d3:4d:7b:9a:c0:64:16:66:7f: 08:d9:5d:84:5c:78:59:27:59:ee:74:dc:bf:47:6c: 43:89:21:fa:50:e2:f2:3e:d7:3e:61:63:4e:02:3b: c7:ea:bb:18:f8:af:95:42:bb:f3:7a:d7:4c:09:05: b9:27:fa:75:6a:f4:fa:08:9d:ab:bc:98:bc:1c:24: 19:a3:ad:f6:17:8b:9d:cd:89:4a:30:21:0f:46:df: 17:0d:f5:fd:72:cf:73:10:60:83:31:73:3a:58:09: b9:2b:3e:f7:7a:de:45:be:bb:89:10:c7:1b:cd:cb: a4:57:e5:92:b9:50:d4:ca:07:ee:c4:6a:f5:99:9e: 24:b7:6f:e5:bc:0d:8d:b4:62:91:0d:b5:f8:8c:bc: 68:bc:69:ce:cf:f6:55:da:d6:95:0e:f8:ec:2d:2e: c0:db:e1:63:a3:00:b2:f2:68:d2:70:b4:74:f8:1d: d1:07:0f:ba:17:ba:72:f3:ac:c9:37:d4:14:b0:76: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:B8:F1:F8:E9:CF:4B:42:9A:67:A7:20:15:F6:09:C0:2C:6B:7F X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:31:50:cd:02:6b:b7:59:54:3d:6a:e2:81:be:3b:3c:62:1d: d1:a1:4b:d6:d3:cc:70:aa:01:06:b5:0b:85:6c:fd:7e:11:e2: ca:64:8b:fd:2a:d2:9d:7b:b0:27:ad:87:5c:06:d6:36:1d:c7: f8:e7:62:7f:9a:3e:6d:b2:d4:f4:d7:08:1e:8a:06:f1:fd:36: ad:5f:f3:06:67:6c:96:ba:75:22:a6:46:3e:27:d3:9e:9c:84: 1e:2c:a0:b2:98:ec:1f:e6:4e:4a:82:5d:00:85:23:fd:a2:3e: 90:b8:ea:2a:d1:e9:a7:9a:16:27:ee:cb:e4:bb:59:ac:af:b7: a9:6d:5e:16:67:93:b2:b6:89:a3:e7:5e:7c:23:4e:71:93:1b: 1c:d2:e4:3f:40:5c:27:3a:bc:86:ad:bd:f9:6e:75:f7:04:3f: 43:27:cd:c0:6c:93:95:15:6d:63:71:9a:45:9b:d8:fa:91:4c: 45:f2:f3:b2:dc:d4:0f:7e:45:b8:9e:0f:9d:0c:77:11:a5:6a: e5:6e:37:36:bb:c1:9f:95:f1:f0:e9:59:58:77:43:51:a9:bf: 77:cf:67:83:8f:2c:51:e7:7a:75:c6:40:b8:53:20:99:be:18: 49:b7:35:c4:62:28:51:4d:91:98:db:94:17:37:ac:20:30:36: a3:41:c0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUwNjE0MjMzOTI0WhcNMjUwNjIxMjMzOTI0WjAYMRYwFAYD VQQDEw02ODRlMDgyYy0xNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l1qh37mRE1X5+qT5r51n6oGSiTHv6/fXg+fi+WOMOhBBzpwUvVPN+KrsG4K DXSefuNveboG05eJUhQKDx/pbljTTXuawGQWZn8I2V2EXHhZJ1nudNy/R2xDiSH6 UOLyPtc+YWNOAjvH6rsY+K+VQrvzetdMCQW5J/p1avT6CJ2rvJi8HCQZo632F4ud zYlKMCEPRt8XDfX9cs9zEGCDMXM6WAm5Kz73et5FvruJEMcbzcukV+WSuVDUygfu xGr1mZ4kt2/lvA2NtGKRDbX4jLxovGnOz/ZV2taVDvjsLS7A2+FjowCy8mjScLR0 +B3RBw+6F7py86zJN9QUsHaJ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMruPH4 6c9LQppnpyAV9gnALGt/MB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTMVDNAmu3WVQ9auKBvjs8Yh3RoUvW08xwqgEGtQuFbP1+EeLKZIv9 KtKde7AnrYdcBtY2Hcf452J/mj5tstT01wgeigbx/TatX/MGZ2yWunUipkY+J9Oe nIQeLKCymOwf5k5Kgl0AhSP9oj6QuOoq0emnmhYn7svku1msr7epbV4WZ5Oytomj 5158I05xkxsc0uQ/QFwnOryGrb35bnX3BD9DJ83AbJOVFW1jcZpFm9j6kUxF8vOy 3NQPfkW4ng+dDHcRpWrlbjc2u8GflfHw6VlYd0NRqb93z2eDjyxR53p1xkC4UyCZ vhhJtzXEYihRTZGY25QXN6wgMDajQcAY -----END CERTIFICATE-----Generated at Sun Jun 15 09:55:07 2025 by rpki-client