$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json) Hash identifier: D+/ZNGfqJN9DVWKZO5eE3jhB1OMAFVKR3kGr40ubH9g= Subject key identifier: 98:42:7E:F3:60:E7:45:C0:7F:C2:E7:30:57:EF:76:8D:56:B1:4E:3B Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft Manifest number: 0486 Signing time: Tue 01 Jul 2025 00:33:52 +0000 Manifest this update: Tue 01 Jul 2025 00:33:51 +0000 Manifest next update: Tue 08 Jul 2025 00:33:51 +0000 Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: hWWUzwxzLoAtaK0eOSMVxwuZLZjmM0L9Qwf4CNqBSTY=) 2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B Validity Not Before: Jul 1 00:33:51 2025 GMT Not After : Jul 8 00:33:51 2025 GMT Subject: CN=68632cf0-ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:f7:63:98:0a:c4:d9:8e:07:03:25:5c:96: 05:da:6d:27:95:28:ad:99:c1:25:92:a6:93:9b:36: 34:f3:43:0f:51:9e:93:39:b0:16:14:26:0c:86:a5: 90:98:68:60:39:19:7d:13:bd:10:59:7f:1d:cb:38: 21:a7:0e:12:1c:e2:18:18:20:1e:8e:e2:4f:cf:ad: 33:e8:3c:16:3b:cd:71:2b:62:95:78:70:68:52:cc: cf:a4:3a:89:04:46:b5:b2:b8:82:e7:ce:c6:71:d9: 5a:f6:ef:42:8e:c9:cb:36:4d:d0:14:3e:9e:ee:f2: 27:30:9a:8b:1e:fc:d4:5a:35:1b:6d:2b:60:92:45: 06:b6:cb:b4:a1:eb:46:52:1e:d4:4e:28:4b:e1:d2: 5f:13:1c:c9:f2:b5:28:5f:fd:f2:be:de:b7:ed:bf: 7d:8d:4e:f2:e4:4a:a4:a1:b9:38:d3:fa:9d:cb:55: f3:c5:9a:95:08:b3:21:76:e4:71:85:27:e0:f2:11: ed:ce:03:45:58:e9:49:73:2e:74:32:9c:e8:36:a8: bc:70:c2:cd:47:fe:33:a5:fc:ea:70:d5:e6:fc:26: ed:64:b5:98:5c:ce:16:1c:ed:6e:3a:7f:dd:01:35: fa:8f:72:44:11:5b:3a:3c:3e:87:f5:cc:56:39:32: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:7E:F3:60:E7:45:C0:7F:C2:E7:30:57:EF:76:8D:56:B1:4E:3B X509v3 Authority Key Identifier: keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:03:74:ac:2c:fd:f5:1e:cf:72:fc:64:20:00:4d:11:ff: f8:66:c9:27:8c:67:c9:b2:20:49:6e:7a:43:95:49:3a:1f:ca: 16:4e:30:28:cd:6d:b7:4f:80:6b:07:31:c1:11:a4:3b:07:81: 63:93:9e:84:f9:9b:72:f6:ce:92:f8:00:5c:d4:03:0b:7d:63: 19:87:49:d9:b6:d6:12:78:59:ae:68:d5:f2:7b:9b:c5:61:fd: 58:0e:76:51:7f:91:1b:30:10:59:7b:af:f6:72:61:35:1d:97: 39:17:de:01:81:0f:c1:43:fe:96:8c:5c:7a:e0:2d:4e:b9:03: 2a:71:61:04:bb:b6:33:17:ce:07:fc:e1:59:3d:ee:97:79:b3: 09:bc:f6:4f:7f:f1:ee:7e:18:5e:02:11:b3:8e:de:ab:5c:ca: d9:91:20:8e:20:ce:55:e4:f8:9a:89:d9:fb:70:3a:28:0e:9b: c4:f2:67:08:a2:71:88:18:d9:9b:22:db:b2:4e:9f:d7:9c:44: 08:ec:fa:63:b6:30:55:d8:43:ca:b9:22:cb:aa:d1:80:78:d9: eb:45:28:8a:cb:af:b6:ce:59:f6:48:f0:55:64:28:ae:b2:fc: c9:92:be:9c:80:7c:c1:09:5c:44:9f:d7:a0:28:a8:a7:31:1d: 87:76:10:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx MDc3RTY1OUIwHhcNMjUwNzAxMDAzMzUxWhcNMjUwNzA4MDAzMzUxWjAYMRYwFAYD VQQDEw02ODYzMmNmMC1lY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi33Y5gKxNmOBwMlXJYF2m0nlSitmcElkqaTmzY080MPUZ6TObAWFCYMhqWQ mGhgORl9E70QWX8dyzghpw4SHOIYGCAejuJPz60z6DwWO81xK2KVeHBoUszPpDqJ BEa1sriC587Gcdla9u9CjsnLNk3QFD6e7vInMJqLHvzUWjUbbStgkkUGtsu0oetG Uh7UTihL4dJfExzJ8rUoX/3yvt637b99jU7y5Eqkobk40/qdy1XzxZqVCLMhduRx hSfg8hHtzgNFWOlJcy50MpzoNqi8cMLNR/4zpfzqcNXm/CbtZLWYXM4WHO1uOn/d ATX6j3JEEVs6PD6H9cxWOTIjyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhCfvNg 50XAf8LnMFfvdo1WsU47MB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2 OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3uAN0rCz99R7PcvxkIABNEf/4ZsknjGfJsiBJbnpDlUk6H8oWTjAo zW23T4BrBzHBEaQ7B4Fjk56E+Zty9s6S+ABc1AMLfWMZh0nZttYSeFmuaNXye5vF Yf1YDnZRf5EbMBBZe6/2cmE1HZc5F94BgQ/BQ/6WjFx64C1OuQMqcWEEu7YzF84H /OFZPe6XebMJvPZPf/HufhheAhGzjt6rXMrZkSCOIM5V5Piaidn7cDooDpvE8mcI onGIGNmbItuyTp/XnEQI7PpjtjBV2EPKuSLLqtGAeNnrRSiKy6+2zln2SPBVZCiu svzJkr6cgHzBCVxEn9egKKinMR2HdhBu -----END CERTIFICATE-----Generated at Wed Jul 2 19:19:24 2025 by rpki-client