$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: 2VGkiQ2VrUBrDVLtorIK/d8av+R0k8B9BArhc2M1n68= Subject key identifier: BF:9D:2D:4B:AE:CC:7C:4E:65:A4:90:AF:DA:6C:AB:B2:3B:CC:E4:94 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 0480 Signing time: Sat 23 Aug 2025 00:17:35 +0000 Manifest this update: Sat 23 Aug 2025 00:17:35 +0000 Manifest next update: Sat 30 Aug 2025 00:17:35 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: /qIGcOZ8/JvGswx2qTkiCUF/bPHmp2cEKtrgNfmv2nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Aug 23 00:17:35 2025 GMT Not After : Aug 30 00:17:35 2025 GMT Subject: CN=68a9089f-e0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:41:1e:b9:c4:3e:5a:d6:ad:d3:f6:af:54: 30:54:d7:c3:a0:37:2c:f5:c8:7e:1b:8b:ed:d0:c8: f2:7c:64:94:8d:11:5d:62:2f:ca:fa:03:a1:f5:8f: 3a:e8:f3:04:c5:7e:c2:ab:cc:df:9a:5b:98:a8:7c: fa:1c:24:4e:d7:c7:85:d7:78:a2:af:c7:c9:e1:00: 3f:24:e6:bc:d4:57:27:c3:9d:61:b1:6a:9c:e6:51: 37:8b:19:52:48:a5:9e:a4:b4:2b:82:0b:47:57:87: 44:41:85:1e:82:4d:57:72:0d:99:f3:4e:5b:69:b9: ee:85:4a:fd:ad:5c:8d:a2:6b:7f:34:fa:55:b2:33: cb:29:ad:c6:03:25:64:e9:57:cc:3c:44:57:b8:96: 40:2f:7d:70:39:f2:29:19:38:c0:30:22:05:72:43: c3:fb:36:ba:c0:5a:ef:37:1e:8c:62:f9:9b:98:ff: 94:cc:ee:c1:42:8e:98:4f:63:fa:e0:4d:a8:ed:74: a2:a3:0f:64:32:6b:79:be:ca:7b:cc:cd:10:68:21: 92:7d:45:38:09:0f:b6:f7:d9:b6:5c:8f:72:e4:e2: 3f:d1:d0:cc:e2:8a:ef:ad:d4:70:b3:08:73:a2:4b: 34:7c:99:39:94:c5:24:7b:4a:c4:3e:70:f8:60:5d: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:2D:4B:AE:CC:7C:4E:65:A4:90:AF:DA:6C:AB:B2:3B:CC:E4:94 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:33:14:14:da:80:a3:25:63:40:27:a4:80:13:08:33:39:9a: 3c:5b:a5:cd:65:5a:2d:2d:be:c8:fe:d7:ca:dc:61:b2:12:d9: 70:39:93:53:9c:1b:4a:d0:2d:db:c9:96:8e:5b:fd:3b:a2:3b: 81:d7:63:7f:41:b9:f8:48:50:1f:be:3c:10:31:10:60:8f:6c: 93:e2:52:59:b9:67:e7:87:a2:d7:a8:e6:22:30:fa:86:8f:ed: cc:fc:d4:00:24:84:13:75:0b:9f:a0:68:24:5e:4a:09:4d:5f: 5f:a2:5c:c4:a7:a3:01:91:7c:82:d4:c4:44:2d:34:55:33:c3: c3:1a:a3:fc:4f:87:3f:09:e0:62:6c:8c:ab:ce:10:bc:fa:85: 7d:91:20:18:7b:97:47:6e:6a:11:5b:dd:04:64:f0:17:83:5b: e0:8b:85:f0:c9:a4:f8:37:49:91:6b:90:91:b0:5e:14:42:0e: e0:c0:25:65:37:26:5e:1f:fd:76:76:50:c3:cd:e6:7e:25:b2: d9:d0:02:0c:18:09:b5:df:c4:03:e7:41:67:ac:82:d1:96:fc: cc:d8:a3:8f:6f:6b:49:75:40:e0:24:c5:69:fd:83:e0:df:0a: 86:02:23:c4:5a:dc:bd:af:36:d5:96:a7:7c:a8:0f:d9:e9:74: fe:cc:c0:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUwODIzMDAxNzM1WhcNMjUwODMwMDAxNzM1WjAYMRYwFAYD VQQDEw02OGE5MDg5Zi1lMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhdBHrnEPlrWrdP2r1QwVNfDoDcs9ch+G4vt0MjyfGSUjRFdYi/K+gOh9Y86 6PMExX7Cq8zfmluYqHz6HCRO18eF13iir8fJ4QA/JOa81Fcnw51hsWqc5lE3ixlS SKWepLQrggtHV4dEQYUegk1Xcg2Z805babnuhUr9rVyNomt/NPpVsjPLKa3GAyVk 6VfMPERXuJZAL31wOfIpGTjAMCIFckPD+za6wFrvNx6MYvmbmP+UzO7BQo6YT2P6 4E2o7XSiow9kMmt5vsp7zM0QaCGSfUU4CQ+299m2XI9y5OI/0dDM4orvrdRwswhz oks0fJk5lMUke0rEPnD4YF0ziQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+dLUuu zHxOZaSQr9psq7I7zOSUMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByMxQU2oCjJWNAJ6SAEwgzOZo8W6XNZVotLb7I/tfK3GGyEtlwOZNT nBtK0C3byZaOW/07ojuB12N/Qbn4SFAfvjwQMRBgj2yT4lJZuWfnh6LXqOYiMPqG j+3M/NQAJIQTdQufoGgkXkoJTV9folzEp6MBkXyC1MRELTRVM8PDGqP8T4c/CeBi bIyrzhC8+oV9kSAYe5dHbmoRW90EZPAXg1vgi4XwyaT4N0mRa5CRsF4UQg7gwCVl NyZeH/12dlDDzeZ+JbLZ0AIMGAm138QD50FnrILRlvzM2KOPb2tJdUDgJMVp/YPg 3wqGAiPEWty9rzbVlqd8qA/Z6XT+zMBk -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:40 2025 by rpki-client