$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json) Hash identifier: zLtQ/2q/ouxJRfc2iqb+aaNzKJ2BhyEjixembxuA294= Subject key identifier: 6C:25:AB:B7:0D:A0:D4:E3:95:9A:21:2B:65:10:A6:C6:BA:8D:44:31 Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft Manifest number: 3B Signing time: Sat 23 Aug 2025 07:46:09 +0000 Manifest this update: Sat 23 Aug 2025 07:46:08 +0000 Manifest next update: Sat 30 Aug 2025 07:46:08 +0000 Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: yRayRn9X7e36ZGUsItS81FXVEQ2yQPzB1ZQe4PTREW8=) 2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: 4xMCpId57nfxz7XEfKoBdilLfSUib+cCTUbVdicWXMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824 Validity Not Before: Aug 23 07:46:08 2025 GMT Not After : Aug 30 07:46:08 2025 GMT Subject: CN=68a971c1-781a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:58:6f:ba:d3:81:cc:16:cc:cb:9a:b7:32: 85:2c:16:da:f9:3e:b9:aa:09:8b:87:8d:f2:a7:1b: 3c:68:47:13:ff:9d:6f:84:35:53:78:a5:dd:96:8b: 67:b3:55:9f:dc:e6:f2:54:c4:60:63:7a:f5:ac:60: 0c:6a:36:e4:48:88:76:eb:43:34:6f:e5:61:87:5d: ae:ea:15:c3:81:e0:ad:5f:94:31:c7:62:f4:d4:0d: ef:0d:94:db:f1:35:4a:a1:2a:3d:99:b8:f6:02:c1: b5:f3:fe:ce:27:61:9d:39:8a:7e:2f:93:4a:57:c1: f2:28:f0:ec:e2:e5:8e:02:a5:35:6d:ed:fb:73:89: d2:ad:68:2a:f4:a6:a5:00:ed:ea:8b:53:23:71:0f: 57:d8:93:2c:fe:75:c6:b3:c5:ba:bc:8a:e8:f9:a0: de:bd:1b:2b:39:b8:39:79:22:89:c3:d6:a6:f5:a2: bc:06:3a:b4:c9:a2:36:85:94:42:41:6f:aa:10:87: 50:65:d2:82:3b:c8:35:06:86:47:fe:12:64:ec:5b: 4e:82:78:9e:4c:5e:41:34:04:24:48:e4:8e:31:24: 10:cd:38:25:1e:83:2f:2d:65:0a:de:b7:4e:4e:16: ff:3e:40:16:84:4d:02:92:49:de:41:77:a8:85:4f: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:25:AB:B7:0D:A0:D4:E3:95:9A:21:2B:65:10:A6:C6:BA:8D:44:31 X509v3 Authority Key Identifier: keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:38:60:5e:dc:d2:0b:94:fa:6e:f1:4b:cb:89:ef:8d:44:f8: 22:c5:40:83:7d:4d:2d:2c:6f:da:62:87:8e:18:8b:a9:aa:45: 87:e5:fc:fc:a9:17:c8:b7:bf:b6:3a:d9:37:fe:78:fc:8c:8c: 24:cd:ec:f2:78:2c:d2:ea:03:ae:b9:31:00:b5:2f:38:07:c3: 44:4a:19:93:65:44:2b:04:50:19:cd:a0:85:05:00:0c:5d:7f: 82:b4:b3:ce:90:68:54:a2:42:86:48:37:28:18:fd:bf:eb:6f: db:5b:28:d2:a0:3d:e2:bf:84:5c:e1:8b:31:45:a7:ca:ff:15: a2:55:c1:2f:a1:14:17:27:14:33:dd:59:27:09:93:c6:cc:67: 0c:66:6f:b9:b2:f2:98:db:59:de:88:f3:e3:94:2c:0d:fa:06: 05:75:71:95:80:0e:6c:4c:33:80:ef:de:ca:4f:a5:cb:2c:3a: 9d:b9:42:cf:29:53:43:a4:60:f2:4b:01:b2:89:1a:36:8d:4a: 4d:80:61:0f:e8:84:05:7e:59:12:b3:7a:93:b5:ad:0d:a7:8d: 3e:12:1b:ca:03:80:32:6c:2d:75:d2:32:cc:ce:18:c0:0a:5e: 3d:00:a1:37:ef:06:87:7f:45:e0:00:62:0e:b1:91:2e:34:65: b0:70:d5:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTY1QjExMC8GA1UEBRMoM0UwNjI4OTZGNzk2MTQwQzY0MDU1RTQ3RDQ1MzA4NDgy M0E3MDgyNDAeFw0yNTA4MjMwNzQ2MDhaFw0yNTA4MzAwNzQ2MDhaMBgxFjAUBgNV BAMTDTY4YTk3MWMxLTc4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4/FhvutOBzBbMy5q3MoUsFtr5PrmqCYuHjfKnGzxoRxP/nW+ENVN4pd2Wi2ez VZ/c5vJUxGBjevWsYAxqNuRIiHbrQzRv5WGHXa7qFcOB4K1flDHHYvTUDe8NlNvx NUqhKj2ZuPYCwbXz/s4nYZ05in4vk0pXwfIo8Ozi5Y4CpTVt7ftzidKtaCr0pqUA 7eqLUyNxD1fYkyz+dcazxbq8iuj5oN69Gys5uDl5IonD1qb1orwGOrTJojaFlEJB b6oQh1Bl0oI7yDUGhkf+EmTsW06CeJ5MXkE0BCRI5I4xJBDNOCUegy8tZQret05O Fv8+QBaETQKSSd5Bd6iFT+0LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbCWrtw2g 1OOVmiErZRCmxrqNRDEwHwYDVR0jBBgwFoAUPgYolveWFAxkBV5H1FMISCOnCCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjVCLzdGNEJFOUEyMjZG NDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4a0JWNUgxRk1JU0NPbkND US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdZb2x2ZVdGQXhrQlY1SDFGTUlTQ09uQ0NRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NjVCLzdGNEJFOUEyMjZGNDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4 a0JWNUgxRk1JU0NPbkNDUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEE4YF7c0guU+m7xS8uJ741E+CLFQIN9TS0sb9pih44Yi6mqRYfl/Pyp F8i3v7Y62Tf+ePyMjCTN7PJ4LNLqA665MQC1LzgHw0RKGZNlRCsEUBnNoIUFAAxd f4K0s86QaFSiQoZINygY/b/rb9tbKNKgPeK/hFzhizFFp8r/FaJVwS+hFBcnFDPd WScJk8bMZwxmb7my8pjbWd6I8+OULA36BgV1cZWADmxMM4Dv3spPpcssOp25Qs8p U0OkYPJLAbKJGjaNSk2AYQ/ohAV+WRKzepO1rQ2njT4SG8oDgDJsLXXSMszOGMAK Xj0AoTfvBod/ReAAYg6xkS40ZbBw1Sw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:57:30 2025 by rpki-client