$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: bxDqCcb9L6D0ZFKViK1F+/sycQrH/wMkZGGf1UshTG8= Subject key identifier: BE:8A:0E:68:D4:1A:AC:0B:F4:D4:17:9A:91:82:03:96:EC:05:E9:A0 Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: 01C5 Signing time: Thu 03 Jul 2025 03:11:22 +0000 Manifest this update: Thu 03 Jul 2025 03:11:22 +0000 Manifest next update: Thu 10 Jul 2025 03:11:22 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: 8rw3LePFH2ascrzQ3+Li4qqKqmWnmjcu0+M+BVPfPA0=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 1FbgogUKsuIfXEKaTsa4RV0e3CNtC1HQdrvDxgG3fiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Jul 3 03:11:22 2025 GMT Not After : Jul 10 03:11:22 2025 GMT Subject: CN=6865f4da-b6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:8b:b4:33:d1:6a:e7:96:3c:68:09:88:b1: 0a:3c:bc:ff:f6:cd:6e:54:92:af:29:06:85:17:dc: 27:bf:b1:d3:b5:83:3b:a4:55:47:15:cd:2e:f5:3a: 8d:ef:76:42:95:91:85:72:a4:e4:12:d4:9e:08:b1: 70:a9:5b:7f:1d:54:31:12:64:c4:76:4e:33:e1:83: 47:f9:70:1b:20:9e:e7:d1:d5:70:79:dd:fa:3e:be: eb:5a:99:ac:bb:36:37:23:8e:86:34:40:60:37:0d: 46:9a:33:39:50:b9:52:5d:16:6c:e5:ec:65:b8:29: 81:fc:4c:c6:7c:86:6d:04:e6:ac:6f:f0:85:10:32: 6f:54:b6:d5:ce:07:49:f0:82:2f:af:89:5a:3a:c8: 1a:1e:54:7c:d5:a8:bb:59:b1:58:00:e9:d7:b9:bb: da:17:78:ca:ee:3f:f5:5d:80:f1:a9:55:b7:6b:4c: 3d:2e:c6:1a:49:f4:c6:72:68:ce:3e:a6:c8:bd:da: e7:cd:71:c3:c4:0e:71:e4:f9:42:7e:94:11:48:df: 5d:58:e7:a6:af:5d:22:cc:e2:56:ad:82:b6:96:d2: 63:82:41:f2:38:a6:7f:b2:4b:3b:52:f1:cd:fb:ce: 13:d4:89:3d:2c:54:de:be:28:8c:13:7b:2a:24:3c: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8A:0E:68:D4:1A:AC:0B:F4:D4:17:9A:91:82:03:96:EC:05:E9:A0 X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:28:d3:92:2a:f8:23:14:a1:f1:1d:60:2e:91:55:9f:ff:51: 36:67:7c:db:06:1c:cd:c0:8d:c5:ba:97:00:ca:b4:d5:4e:27: 24:70:5a:e4:02:a4:8f:71:52:20:c6:72:18:42:fb:68:bb:e8: 41:ac:8e:b0:90:89:8c:ff:1b:83:da:56:a9:29:10:cd:b5:c9: 42:5d:70:a6:ae:c1:20:f4:14:94:91:11:2d:91:2d:b6:00:e7: 42:31:2c:9a:18:d8:aa:ee:a3:b8:c5:b9:e6:80:7d:0f:17:b6: 64:a4:f3:53:6e:cd:44:a9:d0:92:e3:d8:bc:69:8a:80:8f:64: 6b:99:ac:c4:3b:13:2b:03:4c:30:ad:04:60:9c:26:4b:c8:84: f7:d2:bf:67:69:32:2e:78:9e:7f:f3:fc:a7:bb:43:a9:63:84: ef:5d:c8:e2:46:00:b6:59:34:e9:2c:4c:00:50:f1:9f:63:14: 62:39:d8:bd:86:7c:22:77:64:13:b8:4b:61:bd:83:72:17:d8: 7e:b0:12:63:f4:ab:ec:46:4d:b3:e7:70:b2:c2:fd:78:ca:12: 21:1f:4c:4c:58:a5:f0:9b:4e:c3:eb:91:99:d0:ff:14:3d:3c: 36:77:74:1e:f3:b6:11:42:e9:36:59:9c:fb:c4:57:1a:ef:2e: 03:30:31:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjUwNzAzMDMxMTIyWhcNMjUwNzEwMDMxMTIyWjAYMRYwFAYD VQQDEw02ODY1ZjRkYS1iNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEOLtDPRaueWPGgJiLEKPLz/9s1uVJKvKQaFF9wnv7HTtYM7pFVHFc0u9TqN 73ZClZGFcqTkEtSeCLFwqVt/HVQxEmTEdk4z4YNH+XAbIJ7n0dVwed36Pr7rWpms uzY3I46GNEBgNw1GmjM5ULlSXRZs5exluCmB/EzGfIZtBOasb/CFEDJvVLbVzgdJ 8IIvr4laOsgaHlR81ai7WbFYAOnXubvaF3jK7j/1XYDxqVW3a0w9LsYaSfTGcmjO PqbIvdrnzXHDxA5x5PlCfpQRSN9dWOemr10izOJWrYK2ltJjgkHyOKZ/sks7UvHN +84T1Ik9LFTeviiME3sqJDxIBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6KDmjU GqwL9NQXmpGCA5bsBemgMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUKNOSKvgjFKHxHWAukVWf/1E2Z3zbBhzNwI3FupcAyrTVTickcFrk AqSPcVIgxnIYQvtou+hBrI6wkImM/xuD2lapKRDNtclCXXCmrsEg9BSUkREtkS22 AOdCMSyaGNiq7qO4xbnmgH0PF7ZkpPNTbs1EqdCS49i8aYqAj2RrmazEOxMrA0ww rQRgnCZLyIT30r9naTIueJ5/8/ynu0OpY4TvXcjiRgC2WTTpLEwAUPGfYxRiOdi9 hnwid2QTuEthvYNyF9h+sBJj9KvsRk2z53Cywv14yhIhH0xMWKXwm07D65GZ0P8U PTw2d3Qe87YRQuk2WZz7xFca7y4DMDEg -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:12 2025 by rpki-client