$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: xMUntrNOcKJY94AIJ+OtrK3tSCUA+gVgXVCXjvEzXGA= Subject key identifier: 48:BB:A2:C2:CD:A3:B8:EB:20:78:42:A7:AB:53:8D:FC:E4:BA:35:7D Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 02E3 Signing time: Tue 01 Jul 2025 01:57:23 +0000 Manifest this update: Tue 01 Jul 2025 01:57:22 +0000 Manifest next update: Tue 08 Jul 2025 01:57:22 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: wtQ+r0RLnkEdNluyGgsDI/39j45of+9V8Y7rRk5uO/s=) 2: E6054D96F3CB11ECA86DCE60C4F9AE02.roa (hash: PELmNyhpg0raHsA7GFw1TRNGLjn8BhP7w+wplytqqsg=) 3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Jul 1 01:57:22 2025 GMT Not After : Jul 8 01:57:22 2025 GMT Subject: CN=68634082-d0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:01:c3:b8:ed:4d:e6:54:87:e1:3d:b2:58: 79:4a:0e:e8:cf:ff:12:31:62:a6:60:f8:50:3e:c7: 84:5d:64:5e:36:04:af:84:cd:3f:f0:89:a9:90:10: 82:c2:cb:3b:b4:9d:61:de:6a:84:c6:54:f1:e8:e4: 9c:c5:c5:ee:90:42:ac:bc:ad:84:47:db:d3:9e:55: 35:99:aa:a8:47:bf:a4:50:bf:af:7e:b1:04:c1:fa: 20:b8:07:9e:48:f2:09:e9:7f:7d:1f:7a:69:fc:c4: 9d:5f:fc:10:8b:83:91:be:39:0c:10:d8:a0:81:c2: 9a:d5:31:a3:a6:90:58:ea:29:c0:fa:7e:cb:dd:1d: eb:ae:a8:9a:5e:98:e3:d9:3c:83:b7:ca:f7:38:76: 09:a6:a0:62:18:c8:72:bf:03:a0:2e:b1:0f:e6:51: 04:9d:d2:27:ba:5b:22:ba:80:23:45:94:4f:5a:73: 50:05:13:70:fd:88:87:f0:9c:7e:2e:d3:ba:09:d2: a8:ec:23:6b:17:64:6a:6d:c5:45:92:4d:c6:ac:b5: fa:99:70:06:27:a0:3a:25:8f:d9:23:5a:6d:5d:93: 55:4a:fc:42:16:36:84:48:f9:32:2e:13:0e:55:50: 15:cf:e6:e5:3f:59:8a:74:97:e0:67:a7:b3:e9:37: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BB:A2:C2:CD:A3:B8:EB:20:78:42:A7:AB:53:8D:FC:E4:BA:35:7D X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ca:2f:c2:04:2c:b8:14:64:a5:15:df:b6:a0:1c:d5:bf:4f: 9a:ea:89:fe:61:ea:65:e8:16:98:63:2d:ea:27:08:73:ca:90: e4:43:8e:78:01:23:10:2e:66:fd:ee:5c:8b:b7:8d:10:69:b7: 9a:ef:43:fe:20:9c:27:8c:eb:48:35:8d:4d:94:69:4f:54:e4: 8b:74:4c:d8:45:d4:b7:00:53:b7:56:9f:83:97:ee:41:0f:54: c4:4f:50:7d:88:fb:79:1c:1c:cd:41:21:64:31:cd:9b:b0:83: a4:9d:74:f0:34:d0:06:f4:6f:e0:06:e8:4a:cd:8e:0f:06:e8: a7:18:39:39:20:f0:27:d4:2c:d1:55:a0:f3:09:bf:65:59:a4: 95:d4:60:39:6e:82:46:0b:fc:a5:76:46:14:e6:fb:20:5f:b7: 9a:39:46:9e:01:da:a5:b2:60:5e:44:5e:e6:ea:f2:08:29:a0: c5:bf:13:13:2c:66:bc:4f:69:5a:dc:4c:72:0e:42:56:17:3d: b3:71:d0:ee:9f:2c:49:29:32:21:45:58:d6:ea:2c:1d:14:d0: 07:e9:f3:ea:76:f0:53:ff:68:20:4d:15:79:bd:15:03:c4:a0: da:c5:c2:4b:bc:3c:7b:6b:69:40:50:9c:a4:b9:06:c8:dc:cd: 1c:49:d8:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwNzAxMDE1NzIyWhcNMjUwNzA4MDE1NzIyWjAYMRYwFAYD VQQDEw02ODYzNDA4Mi1kMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9YBw7jtTeZUh+E9slh5Sg7oz/8SMWKmYPhQPseEXWReNgSvhM0/8ImpkBCC wss7tJ1h3mqExlTx6OScxcXukEKsvK2ER9vTnlU1maqoR7+kUL+vfrEEwfoguAee SPIJ6X99H3pp/MSdX/wQi4ORvjkMENiggcKa1TGjppBY6inA+n7L3R3rrqiaXpjj 2TyDt8r3OHYJpqBiGMhyvwOgLrEP5lEEndInulsiuoAjRZRPWnNQBRNw/YiH8Jx+ LtO6CdKo7CNrF2RqbcVFkk3GrLX6mXAGJ6A6JY/ZI1ptXZNVSvxCFjaESPkyLhMO VVAVz+blP1mKdJfgZ6ez6TexMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi7osLN o7jrIHhCp6tTjfzkujV9MB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKyi/CBCy4FGSlFd+2oBzVv0+a6on+Yepl6BaYYy3qJwhzypDkQ454 ASMQLmb97lyLt40Qabea70P+IJwnjOtINY1NlGlPVOSLdEzYRdS3AFO3Vp+Dl+5B D1TET1B9iPt5HBzNQSFkMc2bsIOknXTwNNAG9G/gBuhKzY4PBuinGDk5IPAn1CzR VaDzCb9lWaSV1GA5boJGC/yldkYU5vsgX7eaOUaeAdqlsmBeRF7m6vIIKaDFvxMT LGa8T2la3ExyDkJWFz2zcdDunyxJKTIhRVjW6iwdFNAH6fPqdvBT/2ggTRV5vRUD xKDaxcJLvDx7a2lAUJykuQbI3M0cSdic -----END CERTIFICATE-----Generated at Tue Jul 1 20:31:10 2025 by rpki-client