$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: lWvaKiUdhLMQB5Eh2NxBGvfEKMM3BCRh8l1CowASmE4= Subject key identifier: F0:AC:0B:F9:B9:EA:3C:D4:CA:82:6C:D9:4E:E2:F8:DA:3B:CB:33:61 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 014D Signing time: Thu 19 Jun 2025 04:06:02 +0000 Manifest this update: Thu 19 Jun 2025 04:06:01 +0000 Manifest next update: Thu 26 Jun 2025 04:06:01 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: sgQVuTPR0BWy76w+s2ZHsEI/gIHKnc6uZQkX+49SgTg=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Jun 19 04:06:01 2025 GMT Not After : Jun 26 04:06:01 2025 GMT Subject: CN=68538ca9-b0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:6e:56:7b:be:9f:4a:fe:0d:72:61:e0:96: 99:2d:31:bb:db:75:27:03:9c:c9:c2:e7:49:27:4c: c1:29:73:6d:37:5f:5e:40:ab:fb:a7:72:ce:5b:78: fe:65:f3:aa:75:ec:8f:e4:5c:e9:ba:e4:8f:34:bb: b9:87:d0:4d:e8:5a:35:48:b2:5f:28:c8:25:b6:16: cb:01:62:ea:02:92:8a:f0:6f:1e:ec:fd:61:20:98: 9a:a7:83:be:9e:1e:d7:d2:69:81:b6:88:9b:29:75: 49:4a:48:3c:68:7f:90:93:8d:d2:98:d1:45:bc:94: 64:60:bb:fe:d8:e6:77:d7:16:0a:c5:c0:44:48:bd: 9f:bf:26:7a:5f:58:6c:85:48:05:6b:e7:97:b4:6c: 61:f7:c6:fd:b6:80:63:b4:87:89:ab:e3:d8:75:be: 9c:7e:2e:b9:42:e8:27:2d:b9:9f:80:b0:44:f2:96: 2e:3f:1d:52:a4:66:e0:8f:41:96:11:1e:69:2e:bf: 67:82:d7:2c:99:49:e0:75:49:63:1e:23:ac:d9:4a: fd:71:e4:c4:aa:ca:95:13:05:c2:ca:c4:c5:e8:b4: f3:09:7c:78:b7:7b:53:22:15:74:f4:e1:16:c3:0d: 9d:6f:52:11:0b:f0:0d:b8:e8:8b:01:38:ff:2e:6a: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:0B:F9:B9:EA:3C:D4:CA:82:6C:D9:4E:E2:F8:DA:3B:CB:33:61 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f6:ad:7b:d4:8f:3e:37:7d:0d:f8:4c:72:38:c1:b8:00:80: 0c:f1:1c:2f:21:46:91:ee:d6:da:5c:d0:5c:73:40:67:92:59: ed:fa:ca:08:b7:79:40:29:98:ab:4b:d3:04:9d:0b:44:8b:6e: 06:28:e9:8d:f2:76:af:15:3b:e1:01:a7:e0:9d:f9:3b:25:d0: 93:b5:c6:dc:bf:b8:dc:f2:15:57:74:71:fa:71:fe:2b:73:7d: 47:1e:fd:1e:d3:6d:10:38:32:e3:15:d0:c4:db:0e:69:fb:a3: cc:f5:8f:5b:af:41:1b:6d:7d:a5:e0:7e:9d:55:39:a8:ae:32: 2f:4f:c7:dd:f5:ac:17:24:4a:94:25:be:11:eb:4a:79:33:7d: c9:a3:e4:64:4a:16:14:03:e5:c8:29:a4:6a:54:bc:ee:06:e9: e3:7f:9c:bf:07:ac:8b:ea:24:6c:95:ed:18:bf:20:ed:cd:9b: 94:68:32:e9:8e:c4:06:b2:30:58:62:dd:a3:98:8e:e9:4e:c0: 78:4c:e7:e6:a0:c3:8a:54:82:5c:c9:ca:30:2e:cf:2d:81:06: 50:ca:1c:e0:7b:b4:79:13:ed:d8:b0:bc:91:5d:55:b0:e2:fe: b1:e8:cc:7b:db:9d:e6:72:7e:fe:77:a3:e0:b7:e1:d6:04:3b: 83:86:23:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUwNjE5MDQwNjAxWhcNMjUwNjI2MDQwNjAxWjAYMRYwFAYD VQQDEw02ODUzOGNhOS1iMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFRuVnu+n0r+DXJh4JaZLTG723UnA5zJwudJJ0zBKXNtN19eQKv7p3LOW3j+ ZfOqdeyP5FzpuuSPNLu5h9BN6Fo1SLJfKMglthbLAWLqApKK8G8e7P1hIJiap4O+ nh7X0mmBtoibKXVJSkg8aH+Qk43SmNFFvJRkYLv+2OZ31xYKxcBESL2fvyZ6X1hs hUgFa+eXtGxh98b9toBjtIeJq+PYdb6cfi65QugnLbmfgLBE8pYuPx1SpGbgj0GW ER5pLr9ngtcsmUngdUljHiOs2Ur9ceTEqsqVEwXCysTF6LTzCXx4t3tTIhV09OEW ww2db1IRC/ANuOiLATj/Lmr6YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCsC/m5 6jzUyoJs2U7i+No7yzNhMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS9q171I8+N30N+ExyOMG4AIAM8RwvIUaR7tbaXNBcc0Bnklnt+soI t3lAKZirS9MEnQtEi24GKOmN8navFTvhAafgnfk7JdCTtcbcv7jc8hVXdHH6cf4r c31HHv0e020QODLjFdDE2w5p+6PM9Y9br0EbbX2l4H6dVTmorjIvT8fd9awXJEqU Jb4R60p5M33Jo+RkShYUA+XIKaRqVLzuBunjf5y/B6yL6iRsle0YvyDtzZuUaDLp jsQGsjBYYt2jmI7pTsB4TOfmoMOKVIJcycowLs8tgQZQyhzge7R5E+3YsLyRXVWw 4v6x6Mx7253mcn7+d6Pgt+HWBDuDhiNz -----END CERTIFICATE-----Generated at Thu Jun 19 10:11:43 2025 by rpki-client