$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json) Hash identifier: JS5pJ1HYS59AkUf5pRZgBv4r7IvnqbBjS4ND7da/2HI= Subject key identifier: F3:F6:44:0A:13:F3:EA:1D:A3:B4:CE:23:9E:56:A1:65:12:BB:5C:38 Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft Manifest number: 0116 Signing time: Sat 23 Aug 2025 05:00:50 +0000 Manifest this update: Sat 23 Aug 2025 05:00:49 +0000 Manifest next update: Sat 30 Aug 2025 05:00:49 +0000 Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: mnUdSaLumuXG+vLPERx1jqpJ8EKrFPoD4wLxVyppv7k=) 2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=) 3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Validity Not Before: Aug 23 05:00:49 2025 GMT Not After : Aug 30 05:00:49 2025 GMT Subject: CN=68a94b02-8a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:03:4b:ec:c6:32:93:db:88:35:9e:5c:8a: ca:b9:66:88:51:bb:0d:56:6e:4f:95:b3:ac:c5:d5: 5f:74:56:33:ac:c7:a3:82:e3:8c:f1:00:a8:71:e2: 71:3d:1c:96:60:e9:c7:5f:ad:67:b6:8c:4a:c3:a0: 40:3a:86:8f:0e:2f:0d:49:e7:4d:01:f0:0f:66:3b: d3:d2:42:c9:be:ab:1c:4b:aa:6d:67:72:27:2d:a9: bc:71:07:98:d5:bc:43:21:85:3f:b6:fe:06:05:37: 35:bc:24:b3:26:6a:fd:66:f4:ba:ce:0c:0e:ba:c5: 30:27:37:d6:cd:07:6a:13:48:a5:f7:2c:e6:e8:bf: 1b:95:a4:15:29:e8:31:34:45:c8:3d:bb:cc:8e:e1: db:2e:e8:0b:db:5f:d5:3a:db:07:34:47:16:11:19: fe:a8:c3:c6:eb:b6:5b:0f:9e:3c:8c:fe:72:c3:d2: 36:7e:61:56:88:e1:e8:85:ae:d4:2c:02:30:82:4e: bb:70:bf:18:52:96:9c:c1:18:d4:2e:75:c3:ce:63: 1b:39:c3:71:d4:af:17:e9:fa:bb:f8:85:02:ac:b4: f6:8e:08:7d:71:cf:2c:d5:2b:98:dd:c0:8f:1b:7c: ef:8e:21:9f:7c:db:82:02:78:2b:81:d0:7a:74:f2: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F6:44:0A:13:F3:EA:1D:A3:B4:CE:23:9E:56:A1:65:12:BB:5C:38 X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:5a:93:1a:4c:74:d6:cb:99:e7:c9:02:1c:69:22:d5:06:72: 84:3d:73:8a:02:80:e9:38:98:60:28:fe:9e:e1:92:51:d8:6e: 22:e8:22:31:c4:89:6b:08:58:be:f9:75:8a:3d:23:50:80:cc: 90:df:82:16:f9:9f:1e:58:83:88:77:94:7d:81:ed:af:91:ec: 77:99:86:47:d9:90:2e:1a:3c:c5:7d:6d:9c:5c:c3:96:a6:72: d7:c2:bc:3e:ef:de:72:97:ed:21:24:8d:82:cf:b6:4d:40:8c: e7:70:69:19:1d:40:77:d5:21:5b:88:fe:8f:56:30:f3:ef:18: 3a:c6:0c:48:2a:cd:be:5d:cf:3e:57:09:73:1a:f6:29:91:7a: fe:26:49:54:10:5a:1c:c2:95:d3:ae:c9:a0:b4:f9:44:46:aa: 8c:4e:2b:80:11:72:b1:66:15:a0:80:82:20:7e:36:99:60:ac: d7:cb:bf:70:73:43:71:98:b3:16:33:77:18:dd:ed:12:9c:c5: 4d:b3:49:be:80:a1:0b:4c:84:71:99:31:b3:4e:9a:76:f2:c8: f8:fa:7b:98:27:23:13:74:fd:68:25:ad:35:ec:e3:23:c6:e7: 0f:64:cc:da:1c:53:c8:0a:d2:f4:0c:21:fc:73:2b:92:54:cf: e5:cc:4b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3 OTI1QkVGQ0YwHhcNMjUwODIzMDUwMDQ5WhcNMjUwODMwMDUwMDQ5WjAYMRYwFAYD VQQDEw02OGE5NGIwMi04YTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEEDS+zGMpPbiDWeXIrKuWaIUbsNVm5PlbOsxdVfdFYzrMejguOM8QCoceJx PRyWYOnHX61ntoxKw6BAOoaPDi8NSedNAfAPZjvT0kLJvqscS6ptZ3InLam8cQeY 1bxDIYU/tv4GBTc1vCSzJmr9ZvS6zgwOusUwJzfWzQdqE0il9yzm6L8blaQVKegx NEXIPbvMjuHbLugL21/VOtsHNEcWERn+qMPG67ZbD548jP5yw9I2fmFWiOHoha7U LAIwgk67cL8YUpacwRjULnXDzmMbOcNx1K8X6fq7+IUCrLT2jgh9cc8s1SuY3cCP G3zvjiGffNuCAngrgdB6dPJnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP2RAoT 8+odo7TOI55WoWUSu1w4MB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1 M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3 ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi cjVYSXd2VmM3RUY1SmI3ODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUWpMaTHTWy5nnyQIcaSLVBnKEPXOKAoDpOJhgKP6e4ZJR2G4i6CIx xIlrCFi++XWKPSNQgMyQ34IW+Z8eWIOId5R9ge2vkex3mYZH2ZAuGjzFfW2cXMOW pnLXwrw+795yl+0hJI2Cz7ZNQIzncGkZHUB31SFbiP6PVjDz7xg6xgxIKs2+Xc8+ VwlzGvYpkXr+JklUEFocwpXTrsmgtPlERqqMTiuAEXKxZhWggIIgfjaZYKzXy79w c0NxmLMWM3cY3e0SnMVNs0m+gKELTIRxmTGzTpp28sj4+nuYJyMTdP1oJa017OMj xucPZMzaHFPICtL0DCH8cyuSVM/lzEvQ -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:53 2025 by rpki-client