$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json) Hash identifier: zaqUqLMVfGbCeQzIWgqgbaS8wE2OouD7Z0L50BoKZJs= Subject key identifier: FF:E9:FF:51:04:8E:3F:3C:04:5C:E8:9D:54:95:33:E7:16:F5:2F:6D Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft Manifest number: 1F Signing time: Sun 29 Jun 2025 06:53:23 +0000 Manifest this update: Sun 29 Jun 2025 06:53:22 +0000 Manifest next update: Sun 06 Jul 2025 06:53:22 +0000 Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: eeMdCl7KJhJVMgw7NW55LEdbDlY0tsVisfAuVLnnuNo=) 2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: 4xMCpId57nfxz7XEfKoBdilLfSUib+cCTUbVdicWXMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824 Validity Not Before: Jun 29 06:53:22 2025 GMT Not After : Jul 6 06:53:22 2025 GMT Subject: CN=6860e2e2-cdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:2b:7e:19:b9:a6:be:06:56:44:ef:dc:42: 27:0b:db:c2:93:3a:21:02:83:26:07:64:4d:77:3e: 81:69:92:f2:f3:ea:d1:72:4b:5a:14:a5:24:c8:fc: 47:98:f0:09:d3:50:0e:aa:81:7f:7c:6e:a6:a3:ea: a2:ad:b3:96:e4:7f:73:f5:90:b0:21:d8:d5:cd:e9: 24:f4:c9:e8:44:f4:d8:74:98:db:b3:40:d9:b8:ee: 20:12:01:ea:94:93:50:82:31:2a:45:45:f4:2a:38: 49:13:f5:a5:2c:60:0f:1b:b3:5a:36:ed:f2:3d:60: 63:d5:8d:99:aa:e8:ec:66:01:72:ba:f1:c1:ec:d9: 3e:21:30:4f:82:c0:b2:1e:1a:75:75:0a:e3:b2:27: 34:bf:2f:7b:ec:fa:d1:14:82:0d:1e:38:bc:b1:77: 12:e8:3d:95:14:09:ff:54:7a:b8:0e:07:d7:2c:6b: 32:be:06:9c:67:2c:5d:56:49:c8:02:09:b6:8d:fc: 5f:cc:09:da:4f:f0:eb:0c:d7:21:90:83:31:23:45: 6b:d2:03:d1:fb:89:e2:5a:19:18:5e:4d:d4:2e:b1: a1:2a:d8:55:5a:f4:df:1b:d7:b4:66:82:75:94:3b: 9c:c0:0b:14:1d:e1:ce:80:a7:7f:7c:cf:73:26:ce: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E9:FF:51:04:8E:3F:3C:04:5C:E8:9D:54:95:33:E7:16:F5:2F:6D X509v3 Authority Key Identifier: keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:54:9b:4f:1d:74:ca:f6:df:76:50:bc:ab:95:c1:55:a8:81: 40:59:b5:61:d4:fb:e7:8c:0a:6a:c3:67:7d:92:3d:4f:cd:df: 9c:15:67:eb:87:91:46:96:9e:a4:a0:2d:69:53:ba:22:38:f6: d4:f9:ef:15:3a:65:dd:f6:a6:3d:69:a9:00:5c:9b:92:4d:5e: 20:f6:7d:2b:03:1a:77:4f:a1:83:7b:c3:cd:06:90:c4:bf:46: dc:e5:56:05:cc:a2:f4:7b:37:c5:97:7b:60:01:30:00:4a:f5: c0:49:9b:b3:a1:1a:04:c8:a1:df:a5:ce:eb:1c:d6:be:e8:7b: 02:59:8f:81:d5:5e:04:9f:28:5b:32:5f:01:be:8c:59:a8:70: f1:a7:e5:25:91:39:ea:2f:0a:dd:9a:fd:22:af:09:08:ef:de: 4e:a7:e9:0f:40:29:6e:a6:8b:9b:c5:5f:71:29:bf:93:97:3d: c7:bc:0d:5b:51:be:c1:81:6b:34:41:b4:48:24:1c:80:15:9d: e5:f7:b7:1b:dd:9a:aa:82:1d:af:18:b8:22:1e:59:40:22:c1: 53:21:bb:27:13:bc:de:69:b7:e9:5a:26:4b:d3:09:cf:d3:cf: 68:47:ce:c3:da:ab:96:3d:5d:7e:47:35:36:87:82:d4:e3:5f: e8:b2:03:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTY1QjExMC8GA1UEBRMoM0UwNjI4OTZGNzk2MTQwQzY0MDU1RTQ3RDQ1MzA4NDgy M0E3MDgyNDAeFw0yNTA2MjkwNjUzMjJaFw0yNTA3MDYwNjUzMjJaMBgxFjAUBgNV BAMTDTY4NjBlMmUyLWNkYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeHSt+GbmmvgZWRO/cQicL28KTOiECgyYHZE13PoFpkvLz6tFyS1oUpSTI/EeY 8AnTUA6qgX98bqaj6qKts5bkf3P1kLAh2NXN6ST0yehE9Nh0mNuzQNm47iASAeqU k1CCMSpFRfQqOEkT9aUsYA8bs1o27fI9YGPVjZmq6OxmAXK68cHs2T4hME+CwLIe GnV1CuOyJzS/L3vs+tEUgg0eOLyxdxLoPZUUCf9UergOB9csazK+BpxnLF1WScgC CbaN/F/MCdpP8OsM1yGQgzEjRWvSA9H7ieJaGRheTdQusaEq2FVa9N8b17RmgnWU O5zACxQd4c6Ap398z3MmzqbpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/+n/UQSO PzwEXOidVJUz5xb1L20wHwYDVR0jBBgwFoAUPgYolveWFAxkBV5H1FMISCOnCCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjVCLzdGNEJFOUEyMjZG NDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4a0JWNUgxRk1JU0NPbkND US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdZb2x2ZVdGQXhrQlY1SDFGTUlTQ09uQ0NRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NjVCLzdGNEJFOUEyMjZGNDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4 a0JWNUgxRk1JU0NPbkNDUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAERUm08ddMr233ZQvKuVwVWogUBZtWHU++eMCmrDZ32SPU/N35wVZ+uH kUaWnqSgLWlTuiI49tT57xU6Zd32pj1pqQBcm5JNXiD2fSsDGndPoYN7w80GkMS/ RtzlVgXMovR7N8WXe2ABMABK9cBJm7OhGgTIod+lzusc1r7oewJZj4HVXgSfKFsy XwG+jFmocPGn5SWROeovCt2a/SKvCQjv3k6n6Q9AKW6mi5vFX3Epv5OXPce8DVtR vsGBazRBtEgkHIAVneX3txvdmqqCHa8YuCIeWUAiwVMhuycTvN5pt+laJkvTCc/T z2hHzsPaq5Y9XX5HNTaHgtTjX+iyA2Y= -----END CERTIFICATE-----Generated at Mon Jun 30 14:51:09 2025 by rpki-client