$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json) Hash identifier: 0CYtYRIxYx5zutb3TtbO+GwI4gwNyhDtwSooagVtEvw= Subject key identifier: 35:FC:33:91:29:97:C9:B9:CF:66:A8:46:29:25:02:22:AD:07:37:D9 Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft Manifest number: 01B8 Signing time: Mon 11 Aug 2025 03:10:35 +0000 Manifest this update: Mon 11 Aug 2025 03:10:34 +0000 Manifest next update: Mon 18 Aug 2025 03:10:34 +0000 Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: Lr6X5PmTPfBoYj4ddxzZgTsBZzWL4ti/0wobNb3N+Bc=) 2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Validity Not Before: Aug 11 03:10:34 2025 GMT Not After : Aug 18 03:10:34 2025 GMT Subject: CN=68995f2a-cd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:d5:e1:9e:21:7a:d0:14:aa:5d:97:18:df: 6b:da:15:ee:f4:8c:1e:0d:88:53:e1:75:a0:65:65: 47:7e:b8:f7:42:83:ea:36:b3:c6:73:9a:b1:90:d4: e3:71:22:04:f9:8f:82:f5:33:8d:aa:6c:0c:e6:5c: e0:99:7c:cc:03:a2:76:ea:12:c4:49:67:a5:ae:ac: 6a:9d:4d:35:a5:a0:3d:cf:ad:4a:12:8c:ed:26:38: a7:58:cf:73:82:15:8a:d6:7e:09:4f:8d:4a:21:93: 2a:5a:b1:aa:fe:70:ec:88:6f:65:9d:d0:0f:0a:6b: c9:ee:87:b6:8b:ed:74:0d:03:f6:f9:ae:fe:f5:c7: 1d:c1:f1:05:42:22:ef:4d:a4:69:75:6c:dc:89:ed: a1:4b:a2:89:2d:5f:3b:ef:2a:5a:08:00:ba:f6:a7: ae:d8:51:0d:77:cb:86:11:29:87:42:0a:64:e9:36: da:4c:c1:bf:d8:91:17:03:e5:19:e5:67:c5:3f:14: 1c:57:c2:a7:ab:4e:cb:12:4e:4d:6d:08:40:99:14: fe:45:26:fa:c7:67:14:5d:b2:67:8d:b6:a1:c7:74: 81:b0:d6:4c:1a:18:21:dc:ec:9a:ff:19:c4:89:f0: d8:6c:f6:7c:f5:be:a6:0d:40:de:c1:5e:e2:f1:5a: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:33:91:29:97:C9:B9:CF:66:A8:46:29:25:02:22:AD:07:37:D9 X509v3 Authority Key Identifier: keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:80:c6:d1:82:ec:f1:bf:0b:0f:f6:b6:a8:27:2e:7c:59:7f: 98:ef:ec:8c:6e:c8:44:c8:ce:b1:72:8f:1b:78:23:d5:6c:a3: 03:6f:00:c3:38:59:34:90:04:f1:06:f1:f8:f3:88:97:90:8f: 72:ea:6d:67:c3:ff:f7:5e:71:d8:34:4a:14:ea:9a:9d:3d:49: a7:40:37:6e:04:b4:ae:9d:79:3b:25:0a:5d:f9:a2:ef:1b:a9: 57:8c:88:3b:00:33:ac:72:8a:f2:42:eb:7d:7e:e4:4d:33:ad: 41:b8:bb:31:a8:72:89:4f:b5:3d:4f:e7:8c:5e:6b:4d:bb:d9: 48:d5:fa:3d:5a:4e:35:eb:90:15:e6:b0:e3:55:b3:e8:70:b7: 91:00:39:0b:c0:52:68:df:fe:49:82:99:48:f8:7b:ad:2c:30: 64:33:ef:f5:f6:33:4a:9c:af:86:7f:27:fd:2c:a7:73:99:29: 50:21:45:aa:6d:fe:ad:51:d5:6f:7f:9b:07:43:8c:ca:50:e0: 9b:8c:05:13:78:11:c7:13:55:ab:41:87:a2:3b:be:d8:7b:17: 7b:4c:44:7a:f2:63:e5:24:92:5f:30:62:62:16:12:eb:9e:b3: a7:88:58:13:c9:5b:cf:55:5f:ab:f5:c6:32:82:c2:6f:4d:51: 53:6f:48:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBREUxMTAvBgNVBAUTKEE2MEY4REE0NzhCRDc3MkY0RjJCM0U0Qzc5RDVDMTgx RERFNTY4OTMwHhcNMjUwODExMDMxMDM0WhcNMjUwODE4MDMxMDM0WjAYMRYwFAYD VQQDEw02ODk5NWYyYS1jZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlHV4Z4hetAUql2XGN9r2hXu9IweDYhT4XWgZWVHfrj3QoPqNrPGc5qxkNTj cSIE+Y+C9TONqmwM5lzgmXzMA6J26hLESWelrqxqnU01paA9z61KEoztJjinWM9z ghWK1n4JT41KIZMqWrGq/nDsiG9lndAPCmvJ7oe2i+10DQP2+a7+9ccdwfEFQiLv TaRpdWzcie2hS6KJLV877ypaCAC69qeu2FENd8uGESmHQgpk6TbaTMG/2JEXA+UZ 5WfFPxQcV8Knq07LEk5NbQhAmRT+RSb6x2cUXbJnjbahx3SBsNZMGhgh3Oya/xnE ifDYbPZ89b6mDUDewV7i8VqdTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX8M5Ep l8m5z2aoRiklAiKtBzfZMB8GA1UdIwQYMBaAFKYPjaR4vXcvTys+THnVwYHd5WiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREFERS83MDk4RjREQ0Qy OTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5OVBLejVNZWRYQmdkM2xh Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnLU5wSGk5ZHk5UEt6NU1lZFhCZ2QzbGFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REFERS83MDk4RjREQ0QyOTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5 OVBLejVNZWRYQmdkM2xhSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsgMbRguzxvwsP9raoJy58WX+Y7+yMbshEyM6xco8beCPVbKMDbwDD OFk0kATxBvH484iXkI9y6m1nw//3XnHYNEoU6pqdPUmnQDduBLSunXk7JQpd+aLv G6lXjIg7ADOscoryQut9fuRNM61BuLsxqHKJT7U9T+eMXmtNu9lI1fo9Wk4165AV 5rDjVbPocLeRADkLwFJo3/5JgplI+HutLDBkM+/19jNKnK+Gfyf9LKdzmSlQIUWq bf6tUdVvf5sHQ4zKUOCbjAUTeBHHE1WrQYeiO77Yexd7TER68mPlJJJfMGJiFhLr nrOniFgTyVvPVV+r9cYygsJvTVFTb0iE -----END CERTIFICATE-----Generated at Tue Aug 12 14:34:51 2025 by rpki-client