$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json) Hash identifier: bTR8hw+2k5JcCpzUtD5PmiFVTUje+T5hhw/CIut+4kQ= Subject key identifier: 61:E9:B1:16:63:DA:C9:B1:F8:64:1D:85:A2:34:E9:89:EA:2A:96:2F Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft Manifest number: E2 Signing time: Sun 11 May 2025 04:18:06 +0000 Manifest this update: Sun 11 May 2025 04:18:06 +0000 Manifest next update: Sun 18 May 2025 04:18:06 +0000 Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: Cw/WajDl+DjaDOoqNruIMtJR1tI0Mb95+W6mQ4NQXT4=) 2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=) 3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Validity Not Before: May 11 04:18:06 2025 GMT Not After : May 18 04:18:06 2025 GMT Subject: CN=682024fe-8ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:07:96:25:19:ed:6a:27:9e:c2:8e:54:d0: 03:e4:6c:36:26:a7:2c:27:5c:2b:e4:1a:7c:72:51: f1:5b:6d:78:5c:76:d5:1b:cd:05:4a:4d:32:3b:17: a9:95:a5:e7:d7:72:15:f8:5e:d5:4b:ae:e0:b4:04: 14:12:ae:87:ba:96:55:86:04:34:7b:7b:19:fc:ba: d6:15:95:d4:dd:4c:dd:36:70:88:0e:07:c0:70:bb: 2d:4f:bc:a8:f2:32:4c:78:10:0d:3c:e1:28:cd:a3: 85:69:bd:81:c7:75:b8:50:2a:4f:d1:eb:7d:fc:90: ab:c6:eb:51:48:d7:a7:a8:bd:15:05:fd:7b:f9:d1: d8:82:c0:b4:a1:fd:06:33:be:8b:bf:1a:33:93:ca: ce:5e:49:25:c6:0e:e0:7b:cf:c0:e7:37:75:86:5c: d5:59:0b:dc:fc:94:89:86:28:15:3b:a7:f0:8a:d3: cc:e9:a5:12:4b:17:ff:71:ed:8b:80:74:a9:68:d5: 55:08:cb:4f:59:0a:8b:4f:6b:fa:32:7f:49:da:33: ab:a7:bc:29:0f:0c:06:09:79:ac:69:50:5d:fc:c3: 7d:46:48:a8:ad:22:5a:28:02:86:67:eb:56:d7:c2: b8:64:51:44:7b:49:87:71:fa:c6:22:5d:fc:6d:71: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E9:B1:16:63:DA:C9:B1:F8:64:1D:85:A2:34:E9:89:EA:2A:96:2F X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:a0:b0:3a:94:16:a2:71:a3:05:03:2b:ad:88:9a:b5:5d:26: c9:6d:c9:61:cd:51:03:df:81:0b:90:3e:82:87:d9:8e:62:a6: 4c:b7:2b:19:0b:a9:49:b9:02:5e:d0:92:a8:bd:41:02:1e:8a: 52:c8:79:7b:09:a3:80:9c:86:d8:8a:25:8a:51:d1:ad:a8:97: 9d:08:a2:60:ff:05:ca:0a:be:6d:0e:3e:af:bc:92:3c:78:2f: ff:f5:c8:33:0e:3c:8b:79:77:37:d2:5d:34:64:ec:85:d5:f3: 6f:c2:52:96:89:7d:93:4c:94:b3:e9:a4:12:bf:a4:11:f9:1b: ed:5d:a2:9f:ca:8b:79:2d:dd:72:c6:ca:5e:2f:0e:b2:6c:ff: a6:d8:21:63:42:21:a6:24:e8:49:2e:04:58:04:f5:35:39:a9: 40:92:93:a0:95:7b:f9:80:3c:26:45:94:03:a0:e8:83:4a:ca: f3:e9:15:fd:df:cd:3f:ab:35:9b:d9:66:d9:0a:0d:71:5a:b9: 74:4c:ed:9e:38:8f:db:df:62:4e:e1:97:d7:19:ca:e7:b9:0b: 2d:bf:fb:ec:b2:9c:d3:0d:41:23:6f:4f:e5:cf:8e:e4:9c:06: d6:54:62:9f:6a:52:ef:db:69:7e:d9:60:2a:20:fc:9b:e8:aa: f8:93:0a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3 OTI1QkVGQ0YwHhcNMjUwNTExMDQxODA2WhcNMjUwNTE4MDQxODA2WjAYMRYwFAYD VQQDEw02ODIwMjRmZS04ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSwHliUZ7WonnsKOVNAD5Gw2JqcsJ1wr5Bp8clHxW214XHbVG80FSk0yOxep laXn13IV+F7VS67gtAQUEq6HupZVhgQ0e3sZ/LrWFZXU3UzdNnCIDgfAcLstT7yo 8jJMeBANPOEozaOFab2Bx3W4UCpP0et9/JCrxutRSNenqL0VBf17+dHYgsC0of0G M76Lvxozk8rOXkklxg7ge8/A5zd1hlzVWQvc/JSJhigVO6fwitPM6aUSSxf/ce2L gHSpaNVVCMtPWQqLT2v6Mn9J2jOrp7wpDwwGCXmsaVBd/MN9RkiorSJaKAKGZ+tW 18K4ZFFEe0mHcfrGIl38bXGdBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHpsRZj 2smx+GQdhaI06YnqKpYvMB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1 M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3 ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi cjVYSXd2VmM3RUY1SmI3ODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKoLA6lBaicaMFAyutiJq1XSbJbclhzVED34ELkD6Ch9mOYqZMtysZ C6lJuQJe0JKovUECHopSyHl7CaOAnIbYiiWKUdGtqJedCKJg/wXKCr5tDj6vvJI8 eC//9cgzDjyLeXc30l00ZOyF1fNvwlKWiX2TTJSz6aQSv6QR+RvtXaKfyot5Ld1y xspeLw6ybP+m2CFjQiGmJOhJLgRYBPU1OalAkpOglXv5gDwmRZQDoOiDSsrz6RX9 380/qzWb2WbZCg1xWrl0TO2eOI/b32JO4ZfXGcrnuQstv/vsspzTDUEjb0/lz47k nAbWVGKfalLv22l+2WAqIPyb6Kr4kwq4 -----END CERTIFICATE-----Generated at Sun May 11 10:33:09 2025 by rpki-client