$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: 8kQ3JMAo5NkyzNA+Kvia7uJp6F2sw+QP+YQGwIBe1jQ= Subject key identifier: AF:29:B4:39:6A:8D:7A:C6:9E:F4:E2:FD:54:75:16:92:10:C9:92:A3 Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: 01DF Signing time: Sat 23 Aug 2025 02:56:28 +0000 Manifest this update: Sat 23 Aug 2025 02:56:27 +0000 Manifest next update: Sat 30 Aug 2025 02:56:27 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: FR8HhoSQho/Nr1HK+/IKTHleKdN9c9NRmQqvGBzSmco=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 1FbgogUKsuIfXEKaTsa4RV0e3CNtC1HQdrvDxgG3fiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Aug 23 02:56:27 2025 GMT Not After : Aug 30 02:56:27 2025 GMT Subject: CN=68a92ddc-e6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:e5:d3:dc:b7:fb:93:33:2e:c1:18:bb:1e: 65:09:3d:86:3c:8e:82:a2:ea:a7:59:58:52:40:09: 76:8e:0c:4b:89:9b:6b:7c:b0:be:52:5b:57:ab:60: 0e:7f:93:d0:62:4f:c2:c4:37:63:db:7b:16:1d:1e: 93:03:98:44:4c:f9:05:5f:b8:c4:3c:4a:05:59:f5: 61:8d:f2:c5:f8:8e:67:f5:a3:53:94:f1:23:7d:a4: 66:c6:2f:d9:a2:61:c4:09:95:bc:dc:d9:4d:7e:60: 90:f6:c0:d8:ea:cf:e2:95:11:d5:d4:37:5c:a2:1f: f3:d7:a8:58:2c:06:74:90:a9:66:51:ba:77:14:75: eb:fa:8a:7c:72:99:d6:fa:13:ca:f8:1b:a4:9d:a5: 8a:24:96:90:51:30:bf:d3:1d:7e:dd:bc:6c:5e:8e: 52:67:e7:26:64:56:a2:c3:aa:62:80:1a:5c:da:38: d7:36:39:a5:15:ad:cc:e8:7a:87:e4:e7:3b:f9:66: fa:a2:c2:71:c2:7d:1c:e9:72:48:86:cb:07:b0:c6: a8:b8:25:37:16:3e:c3:14:be:e0:39:b1:1d:12:3c: 4d:84:a2:11:95:b4:f7:6d:57:8e:86:40:37:82:a4: 56:14:a2:bf:99:bb:e2:e5:46:07:50:d4:3e:39:36: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:B4:39:6A:8D:7A:C6:9E:F4:E2:FD:54:75:16:92:10:C9:92:A3 X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d5:b3:ad:5a:29:8c:75:cf:ee:39:38:fd:a2:81:fc:78:f6: c3:c2:cb:29:c9:fe:ee:3a:f1:cb:89:52:85:a5:95:a8:34:fa: 9c:db:21:9f:c4:9f:76:a1:93:8f:73:11:11:51:79:85:aa:5c: 03:d2:02:a5:ef:b9:58:22:69:f9:b7:22:87:77:e4:7d:94:9c: f0:9a:88:7e:35:dd:b7:8d:b1:0a:90:5c:93:a7:91:6a:ed:54: c1:fc:ff:f3:17:5e:6e:e6:f1:05:c8:2d:6f:08:25:c8:d0:ca: 08:59:9a:e6:e7:0b:6f:98:e8:31:ce:7d:a6:9b:13:73:82:74: 75:cf:88:e4:75:02:e5:1e:a7:95:d6:08:75:22:4e:7e:74:6d: cc:51:2f:57:8d:4f:98:3c:2f:a5:a2:e5:d3:fa:9d:55:76:3c: a3:d5:46:a9:c8:71:a8:49:05:86:8e:37:cd:23:54:77:7b:44: 5c:44:d4:94:ec:b1:e5:8f:50:be:8f:a0:3d:a6:3b:c2:40:04: 32:a3:2b:fb:2b:33:36:12:a7:42:ba:42:f8:23:47:58:b4:8e: 30:6e:81:42:b8:f3:4a:e8:dd:9f:21:f3:ec:41:e1:7b:08:2f: 02:91:e6:f4:1b:ae:7d:1f:28:29:0e:f9:d0:bb:76:fc:4a:a8: 8b:d0:01:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjUwODIzMDI1NjI3WhcNMjUwODMwMDI1NjI3WjAYMRYwFAYD VQQDEw02OGE5MmRkYy1lNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNXl09y3+5MzLsEYux5lCT2GPI6CouqnWVhSQAl2jgxLiZtrfLC+UltXq2AO f5PQYk/CxDdj23sWHR6TA5hETPkFX7jEPEoFWfVhjfLF+I5n9aNTlPEjfaRmxi/Z omHECZW83NlNfmCQ9sDY6s/ilRHV1Ddcoh/z16hYLAZ0kKlmUbp3FHXr+op8cpnW +hPK+BuknaWKJJaQUTC/0x1+3bxsXo5SZ+cmZFaiw6pigBpc2jjXNjmlFa3M6HqH 5Oc7+Wb6osJxwn0c6XJIhssHsMaouCU3Fj7DFL7gObEdEjxNhKIRlbT3bVeOhkA3 gqRWFKK/mbvi5UYHUNQ+OTbW/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8ptDlq jXrGnvTi/VR1FpIQyZKjMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH1bOtWimMdc/uOTj9ooH8ePbDwsspyf7uOvHLiVKFpZWoNPqc2yGf xJ92oZOPcxERUXmFqlwD0gKl77lYImn5tyKHd+R9lJzwmoh+Nd23jbEKkFyTp5Fq 7VTB/P/zF15u5vEFyC1vCCXI0MoIWZrm5wtvmOgxzn2mmxNzgnR1z4jkdQLlHqeV 1gh1Ik5+dG3MUS9XjU+YPC+louXT+p1Vdjyj1UapyHGoSQWGjjfNI1R3e0RcRNSU 7LHlj1C+j6A9pjvCQAQyoyv7KzM2EqdCukL4I0dYtI4wboFCuPNK6N2fIfPsQeF7 CC8Ckeb0G659HygpDvnQu3b8SqiL0AGR -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:06 2025 by rpki-client