$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: znZfqCduGByK0aVXV6lv/ZgG9wm5tABq+NaDIAFG9SY= Subject key identifier: 01:A1:39:70:3B:06:D8:22:7C:09:56:31:11:21:72:AC:39:08:5B:19 Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 0307 Signing time: Tue 01 Jul 2025 02:07:55 +0000 Manifest this update: Tue 01 Jul 2025 02:07:55 +0000 Manifest next update: Tue 08 Jul 2025 02:07:55 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: Ji87zOIux3fhmOpzKtJ7ohdAz/y4votEuL2b1DxlI+w=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: fHu5/MPKlLCuXm6cY4db7lpTtm9fZVRYzzIdcMcSwUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: Jul 1 02:07:55 2025 GMT Not After : Jul 8 02:07:55 2025 GMT Subject: CN=686342fb-b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:70:b4:e2:b4:1a:1f:35:f3:bb:f9:66:aa: d6:06:96:3b:4c:0e:98:a8:15:57:c2:8d:0a:1b:c2: 20:c8:d8:cc:2b:23:8c:dd:80:0c:62:02:f5:a1:5d: 27:b9:79:59:6e:2b:26:ac:ce:5a:18:04:10:17:3d: 79:e1:28:a6:0e:e1:be:61:38:04:a4:5f:3f:cd:d7: 91:7b:22:43:f5:4c:ae:d9:2a:82:47:2c:75:51:17: bc:3f:c8:48:7a:3a:56:e6:d7:45:7b:c2:65:3e:74: 21:63:90:7e:92:c3:80:47:01:1f:08:42:87:11:b8: c2:d8:e3:76:94:e9:ba:05:35:3a:eb:68:47:ce:da: ec:7f:45:7b:02:16:de:dc:9b:9b:37:b8:38:3b:bd: 05:81:2c:27:97:db:bd:4a:ff:b1:df:79:9c:f5:8a: 89:d1:68:55:68:4d:16:6b:c2:a0:08:56:8d:b6:b8: 0a:56:0c:d5:c4:be:68:a3:67:b1:7a:a0:21:b6:61: b7:b0:78:fb:7c:97:fb:aa:52:e0:e6:30:c0:79:6b: 35:b2:82:12:34:46:a1:63:58:ac:72:d2:8a:fb:72: 3b:81:97:ba:67:19:34:d8:28:d5:37:f8:c7:a9:da: 33:af:32:da:cd:88:21:e6:5a:ac:c6:99:40:f4:9b: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:39:70:3B:06:D8:22:7C:09:56:31:11:21:72:AC:39:08:5B:19 X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:fe:c9:93:91:1a:0a:91:5b:bb:9e:af:34:82:c4:12:a0: 5f:ad:c1:ce:ad:ca:b7:89:d9:82:f0:dd:56:cf:b7:fe:cb:be: 6d:4d:c3:4e:62:5f:87:89:b3:75:39:1e:fb:34:8c:1c:ef:e1: a2:bf:14:a2:51:45:b6:d5:32:5a:80:29:a7:3d:1b:6b:1c:54: 94:67:b7:b4:b5:3f:8a:60:39:7c:31:1a:cb:6a:3c:31:b4:55: 54:d8:da:15:ab:76:c2:37:ae:cb:36:e4:29:9d:58:e8:be:06: 9f:01:70:fe:b3:26:6e:5e:3d:a5:6c:55:26:36:c2:b8:c1:b6: 6e:c5:ce:cf:80:92:c0:98:96:fc:12:5c:a6:a3:6a:53:16:6c: d3:9f:df:7f:52:3e:4a:b7:c7:c6:3a:ab:95:be:66:76:71:2a: ae:a8:f2:89:fb:f5:3e:8e:3b:8b:28:b8:31:fd:50:64:33:f0: db:89:46:bc:87:ca:b5:d6:ae:6d:e5:49:eb:cb:6b:2a:40:88: 06:17:8b:63:9c:a0:32:c2:b7:bc:19:fc:31:b4:d0:98:ba:13: 45:c9:dc:2c:38:20:7c:cd:3e:c1:b2:e1:68:57:82:81:a1:e3: 71:12:70:80:b4:42:cc:33:65:1e:fa:f3:e5:76:62:2d:e3:51: ba:20:c6:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjUwNzAxMDIwNzU1WhcNMjUwNzA4MDIwNzU1WjAYMRYwFAYD VQQDEw02ODYzNDJmYi1iMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOtwtOK0Gh8187v5ZqrWBpY7TA6YqBVXwo0KG8IgyNjMKyOM3YAMYgL1oV0n uXlZbismrM5aGAQQFz154SimDuG+YTgEpF8/zdeReyJD9Uyu2SqCRyx1URe8P8hI ejpW5tdFe8JlPnQhY5B+ksOARwEfCEKHEbjC2ON2lOm6BTU662hHztrsf0V7Ahbe 3JubN7g4O70FgSwnl9u9Sv+x33mc9YqJ0WhVaE0Wa8KgCFaNtrgKVgzVxL5oo2ex eqAhtmG3sHj7fJf7qlLg5jDAeWs1soISNEahY1isctKK+3I7gZe6Zxk02CjVN/jH qdozrzLazYgh5lqsxplA9JvOzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGhOXA7 BtgifAlWMREhcqw5CFsZMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Zf7Jk5EaCpFbu56vNILEEqBfrcHOrcq3idmC8N1Wz7f+y75tTcNO Yl+HibN1OR77NIwc7+GivxSiUUW21TJagCmnPRtrHFSUZ7e0tT+KYDl8MRrLajwx tFVU2NoVq3bCN67LNuQpnVjovgafAXD+syZuXj2lbFUmNsK4wbZuxc7PgJLAmJb8 Elymo2pTFmzTn99/Uj5Kt8fGOquVvmZ2cSquqPKJ+/U+jjuLKLgx/VBkM/DbiUa8 h8q11q5t5Unry2sqQIgGF4tjnKAywre8GfwxtNCYuhNFydwsOCB8zT7BsuFoV4KB oeNxEnCAtELMM2Ue+vPldmIt41G6IMYN -----END CERTIFICATE-----Generated at Wed Jul 2 16:24:17 2025 by rpki-client