$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json) Hash identifier: +IKVX68n8PPEDN0temv/jwN69mcrHbE71xPY41Pv8rc= Subject key identifier: BA:32:4C:4E:65:B9:71:9F:B9:57:95:F0:C8:CA:A5:BB:E4:C6:D3:64 Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft Manifest number: FB Signing time: Tue 01 Jul 2025 05:41:49 +0000 Manifest this update: Tue 01 Jul 2025 05:41:49 +0000 Manifest next update: Tue 08 Jul 2025 05:41:49 +0000 Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: VYeQr9AW7mc7PRJMY7uTnEb6KTWEj7PIqHPGDVVMzXY=) 2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=) 3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Validity Not Before: Jul 1 05:41:49 2025 GMT Not After : Jul 8 05:41:49 2025 GMT Subject: CN=6863751d-5ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:60:6c:50:4e:f4:63:a3:4e:60:f8:f4:63: db:36:5f:bf:31:0d:4d:e4:f1:71:50:ea:f0:02:41: 39:16:66:9e:01:d9:39:ec:05:eb:4f:8e:3a:a1:8c: 56:4d:8e:02:0c:0e:9e:14:85:9a:a2:85:97:61:9a: 2c:33:60:d0:30:c9:91:ad:a9:04:21:04:01:80:e0: 62:07:e5:c9:06:30:e8:bc:dc:2d:39:20:5a:f8:b5: 11:f3:8a:3d:d8:5b:f5:f1:e9:b5:f5:c9:48:8f:19: 43:40:d2:e2:13:27:b7:48:b4:c5:42:8f:d0:ed:99: dd:41:a4:57:2d:17:97:e7:7b:9c:1d:b2:08:73:c1: 4b:5b:e0:b0:04:5a:97:8a:84:ba:7b:bb:85:05:7b: 82:21:59:fa:d7:44:f4:0d:74:c9:2f:eb:2f:4f:d3: 2c:8b:bd:04:8b:e1:ee:13:81:38:6d:6b:89:11:41: 7a:99:09:4b:ab:e3:34:0e:ee:fa:04:2a:8f:af:01: 6a:42:78:75:ce:16:c9:3b:28:fa:35:53:ba:c2:d9: 38:9b:f1:a4:85:45:f7:d9:e9:7d:5e:9e:42:6a:7b: 5e:2f:95:c6:9e:8d:59:4c:d7:72:6d:c9:1d:19:79: 35:30:9c:2c:b3:28:e8:dd:99:8f:93:a4:12:15:3f: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:32:4C:4E:65:B9:71:9F:B9:57:95:F0:C8:CA:A5:BB:E4:C6:D3:64 X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:55:34:bb:32:34:f8:d5:02:3f:65:ab:b4:0a:0a:cc:a9:70: d4:af:2a:44:7e:5d:55:33:da:21:58:d7:dd:b8:11:c2:3e:bf: b7:c9:99:22:f4:71:9d:75:1c:11:9e:0a:b8:59:e3:2d:c4:38: 21:1e:f1:8d:e0:25:24:00:89:97:e0:fa:5e:03:95:ed:d8:59: ac:19:68:d0:0c:95:2d:65:72:c1:7a:73:cc:9e:67:50:c3:04: b8:6f:ef:d1:cb:d2:5f:24:ed:dd:02:9d:3d:82:74:3c:c6:be: c5:14:69:6b:1e:63:4a:ff:a4:b0:b5:03:ed:2e:a2:1d:e3:69: 1e:79:b3:fa:c9:38:c0:19:31:0d:ba:99:33:13:88:cd:9a:03: 24:c4:a7:25:01:5b:dd:34:7c:7f:4b:93:00:6c:d0:2e:1d:7c: 9a:2d:b0:2b:68:e0:a0:71:58:f2:b5:1e:f7:d1:eb:94:66:e4: f8:68:a1:a1:db:70:74:67:a8:46:c7:d4:4a:bb:00:59:2d:ac: b7:db:f3:41:15:47:6d:cb:3c:6e:7a:c9:14:e0:bf:79:61:db: fd:8e:ad:82:cd:8d:7e:86:79:02:6f:ee:09:d8:f7:d4:fa:6d: d4:9e:53:57:fa:f3:69:68:74:83:5c:4c:6a:20:41:53:33:db: 4e:44:93:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3 OTI1QkVGQ0YwHhcNMjUwNzAxMDU0MTQ5WhcNMjUwNzA4MDU0MTQ5WjAYMRYwFAYD VQQDEw02ODYzNzUxZC01ZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIdgbFBO9GOjTmD49GPbNl+/MQ1N5PFxUOrwAkE5FmaeAdk57AXrT446oYxW TY4CDA6eFIWaooWXYZosM2DQMMmRrakEIQQBgOBiB+XJBjDovNwtOSBa+LUR84o9 2Fv18em19clIjxlDQNLiEye3SLTFQo/Q7ZndQaRXLReX53ucHbIIc8FLW+CwBFqX ioS6e7uFBXuCIVn610T0DXTJL+svT9Msi70Ei+HuE4E4bWuJEUF6mQlLq+M0Du76 BCqPrwFqQnh1zhbJOyj6NVO6wtk4m/GkhUX32el9Xp5CanteL5XGno1ZTNdybckd GXk1MJwssyjo3ZmPk6QSFT+1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoyTE5l uXGfuVeV8MjKpbvkxtNkMB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1 M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3 ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi cjVYSXd2VmM3RUY1SmI3ODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNVTS7MjT41QI/Zau0CgrMqXDUrypEfl1VM9ohWNfduBHCPr+3yZki 9HGddRwRngq4WeMtxDghHvGN4CUkAImX4PpeA5Xt2FmsGWjQDJUtZXLBenPMnmdQ wwS4b+/Ry9JfJO3dAp09gnQ8xr7FFGlrHmNK/6SwtQPtLqId42keebP6yTjAGTEN upkzE4jNmgMkxKclAVvdNHx/S5MAbNAuHXyaLbAraOCgcVjytR730euUZuT4aKGh 23B0Z6hGx9RKuwBZLay32/NBFUdtyzxueskU4L95Ydv9jq2CzY1+hnkCb+4J2PfU +m3UnlNX+vNpaHSDXExqIEFTM9tORJMJ -----END CERTIFICATE-----Generated at Tue Jul 1 18:02:10 2025 by rpki-client