$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: I5XYqrGkbw0uX8LCiE8D/FQDWGFl3vi0ZzPEHgjg9eU= Subject key identifier: 3C:3D:53:6A:23:FD:69:83:A9:95:68:C6:CA:CE:B4:D4:A5:1E:93:8A Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 0466 Signing time: Thu 03 Jul 2025 00:29:26 +0000 Manifest this update: Thu 03 Jul 2025 00:29:25 +0000 Manifest next update: Thu 10 Jul 2025 00:29:25 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: /9GuQP8G6xFbEsaKdMP/NciMg6bBBLGP2eY1uWASQM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Jul 3 00:29:25 2025 GMT Not After : Jul 10 00:29:25 2025 GMT Subject: CN=6865cee5-6b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:f8:84:5d:c1:41:4d:67:f8:22:65:74:7f: 1a:bf:83:06:8c:28:2d:0d:c1:21:c3:d1:3b:5b:22: 57:b2:6d:28:64:fe:b2:0b:e9:09:6d:9a:18:25:c2: 09:0b:31:49:8e:6d:fa:89:73:f4:a4:6a:40:33:06: 3e:ab:40:eb:6b:ee:ae:02:29:b3:12:7b:dc:f9:24: 10:62:fd:68:64:53:ba:cf:64:b9:fb:19:92:69:e7: 3c:22:bb:a4:19:d6:33:b2:84:72:fc:2f:9e:f7:73: 75:42:21:aa:5a:c8:3d:52:f5:cd:65:7e:08:84:03: c6:31:d8:57:9d:5d:9a:f7:e8:15:11:14:2d:78:ba: 20:b7:12:81:9a:10:92:ad:e8:86:f4:23:ff:b0:5d: 2e:32:27:4b:74:a2:a5:59:b0:03:f9:c9:dd:56:af: f3:22:07:40:19:37:16:02:3b:06:47:1a:5b:da:5b: 4b:c0:f8:9e:7a:fe:2c:91:e6:eb:60:cc:83:f0:a9: 56:cf:e3:2b:dd:1c:d4:b4:ff:0a:27:b3:1c:d7:7b: 8c:8b:cc:dd:a9:c4:47:4c:a9:72:14:92:dc:e9:94: 30:b3:d4:0d:e3:d4:92:41:e5:38:0b:4d:1b:ab:9d: 71:61:61:2a:3c:9e:fc:bc:25:e9:17:4b:f5:69:5d: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3D:53:6A:23:FD:69:83:A9:95:68:C6:CA:CE:B4:D4:A5:1E:93:8A X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:90:fa:72:96:9d:48:20:0a:4a:60:11:2a:3b:95:c4:54:e7: 26:b3:8b:93:53:92:93:81:17:24:2e:38:bb:3f:0c:4e:7b:19: 87:df:49:5f:a3:08:d4:b8:41:78:39:f1:93:d7:77:42:6d:25: 21:49:1e:3c:05:b2:68:0e:c4:ae:6e:de:f8:d4:13:30:13:7d: bf:71:8c:3b:0d:ef:53:d8:c1:8a:89:28:1a:a5:67:7a:ad:5e: c1:a8:da:e0:1a:55:ae:d5:af:5f:df:9e:d6:db:5c:9f:87:f0: 1a:8d:85:9e:44:b4:f7:d3:5f:9b:5f:c1:5a:c7:58:bf:d2:21: 16:56:81:61:b5:a7:c3:cd:15:1e:af:9b:4e:89:39:77:b0:a2: 7b:f7:a4:22:d9:96:de:24:b6:78:fa:c5:b6:56:05:de:50:a0: 7c:f3:04:65:9b:2d:d6:b0:b2:86:6f:3d:12:bd:4c:d6:bf:a7: 18:1e:6e:a7:40:5b:49:ba:d6:d1:dc:0e:68:2b:b3:8e:f4:2d: 98:27:5e:2a:82:7c:ea:87:a6:b5:5a:08:18:07:70:ce:f6:67: 7f:3d:44:49:c1:f4:4f:14:98:37:c3:02:ea:65:4a:1d:f5:6d: a7:8c:42:b3:b4:71:3c:a1:da:d1:01:94:8c:b0:b4:03:ed:e5: ae:3f:82:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUwNzAzMDAyOTI1WhcNMjUwNzEwMDAyOTI1WjAYMRYwFAYD VQQDEw02ODY1Y2VlNS02YjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujz4hF3BQU1n+CJldH8av4MGjCgtDcEhw9E7WyJXsm0oZP6yC+kJbZoYJcIJ CzFJjm36iXP0pGpAMwY+q0Dra+6uAimzEnvc+SQQYv1oZFO6z2S5+xmSaec8Iruk GdYzsoRy/C+e93N1QiGqWsg9UvXNZX4IhAPGMdhXnV2a9+gVERQteLogtxKBmhCS reiG9CP/sF0uMidLdKKlWbAD+cndVq/zIgdAGTcWAjsGRxpb2ltLwPieev4skebr YMyD8KlWz+Mr3RzUtP8KJ7Mc13uMi8zdqcRHTKlyFJLc6ZQws9QN49SSQeU4C00b q51xYWEqPJ78vCXpF0v1aV1OcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw9U2oj /WmDqZVoxsrOtNSlHpOKMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUkPpylp1IIApKYBEqO5XEVOcms4uTU5KTgRckLji7PwxOexmH30lf owjUuEF4OfGT13dCbSUhSR48BbJoDsSubt741BMwE32/cYw7De9T2MGKiSgapWd6 rV7BqNrgGlWu1a9f357W21yfh/AajYWeRLT301+bX8Fax1i/0iEWVoFhtafDzRUe r5tOiTl3sKJ796Qi2ZbeJLZ4+sW2VgXeUKB88wRlmy3WsLKGbz0SvUzWv6cYHm6n QFtJutbR3A5oK7OO9C2YJ14qgnzqh6a1WggYB3DO9md/PURJwfRPFJg3wwLqZUod 9W2njEKztHE8odrRAZSMsLQD7eWuP4IV -----END CERTIFICATE-----Generated at Fri Jul 4 00:28:42 2025 by rpki-client