$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft File: PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json) Hash identifier: 8yB9VEdlepv+q0daXWORxwRW2dBHzcjDyU7bthi1UVA= Subject key identifier: A3:32:49:10:9D:79:CD:C2:AB:B5:3A:17:89:51:1F:A2:14:03:C4:83 Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 Certificate issuer: /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft Manifest number: 77 Signing time: Tue 01 Jul 2025 07:33:19 +0000 Manifest this update: Tue 01 Jul 2025 07:33:18 +0000 Manifest next update: Tue 08 Jul 2025 07:33:18 +0000 Files and hashes: 1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: 03mq2UbG9uyo9WTKd9nY1yfN2mZcvvEGFd0QBGJe9zM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Validity Not Before: Jul 1 07:33:18 2025 GMT Not After : Jul 8 07:33:18 2025 GMT Subject: CN=68638f3e-93f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:1c:15:7d:ae:91:76:a5:00:11:eb:df:d3: 2d:87:10:6d:3d:e6:e3:96:90:79:aa:40:33:f8:1b: e7:73:a5:2d:be:16:f5:ff:75:f1:b3:d9:83:69:da: 82:f0:81:46:f1:02:c4:03:ff:b9:16:98:1f:21:95: f2:46:25:c0:a6:08:b5:4b:68:90:06:47:b4:96:e4: 48:1a:18:c7:2d:fb:fd:d0:85:c0:57:36:24:10:ec: 7e:95:25:74:60:54:ce:c4:dd:d8:03:b1:44:78:9c: ca:df:aa:d2:86:10:fd:55:7e:68:1c:96:89:bf:61: 4d:cb:6f:32:a3:8f:8f:8c:14:94:30:ff:fb:0e:a7: 9e:a8:99:14:85:61:a5:66:d7:dd:e9:0a:8e:ad:0a: e6:e5:6e:11:ac:fe:6f:2e:1e:6b:e5:5e:31:8c:d1: 50:88:f1:49:20:e2:05:45:a0:94:b6:5d:10:32:1a: 16:26:a3:b7:73:9f:f3:a7:16:72:02:bc:d8:57:b0: 0a:cf:56:95:29:92:6b:f3:92:e7:31:60:f1:f7:ee: f5:87:b0:34:2d:0b:19:76:89:4b:fb:26:12:31:c1: db:f2:80:ed:6d:6f:b9:c3:cc:73:ae:e7:40:78:ca: c4:76:82:25:e2:c1:4f:c1:33:43:21:cd:b4:7c:55: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:49:10:9D:79:CD:C2:AB:B5:3A:17:89:51:1F:A2:14:03:C4:83 X509v3 Authority Key Identifier: keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e3:e2:ba:f8:e6:2f:c9:e2:3a:5f:5b:88:0a:24:12:2d:1a: b2:b5:ac:32:a7:42:cb:13:9f:44:fc:6e:86:7d:45:05:bb:0a: 2f:c6:55:83:d1:81:1c:2b:d6:02:2c:2b:7b:e0:67:4e:1d:9a: 05:99:bc:04:38:73:1a:b5:37:8a:25:1c:91:d7:18:26:7a:69: c9:ca:87:b3:b6:dd:1c:84:7a:27:52:d7:d3:86:07:ca:4f:d3: 49:b0:d5:1b:e1:af:a4:71:ca:23:33:f8:2b:0b:0b:a5:a0:bf: f1:90:5f:88:36:7d:bb:75:1a:8c:98:be:19:91:ce:98:eb:87: 0b:87:5b:e6:2a:bd:52:3f:fd:32:9e:cb:87:2e:df:47:0a:cb: 03:b0:90:6b:d8:44:94:86:35:13:89:df:4b:08:76:88:b4:1c: e5:fa:2a:3f:37:17:94:0e:d0:22:22:21:5f:50:13:41:09:ed: 64:b5:f5:05:5b:54:2d:3e:03:b2:56:1b:c4:2f:11:b3:25:9b: 80:32:45:7a:6a:35:7e:b1:d1:b4:c9:5e:d9:a8:98:91:2e:41: 79:62:6b:64:2f:df:19:50:26:3d:ea:aa:0e:45:1f:40:35:7c: f1:9c:99:e4:32:e6:df:c7:51:a4:4b:af:cd:05:ae:58:df:ff: 8e:59:25:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjBFMjExMC8GA1UEBRMoM0RFQThCMUJCODcyREQxMjZDQTY0N0NDMzc1QzIwNzYw MjQwQzM4NTAeFw0yNTA3MDEwNzMzMThaFw0yNTA3MDgwNzMzMThaMBgxFjAUBgNV BAMTDTY4NjM4ZjNlLTkzZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYmhwVfa6RdqUAEevf0y2HEG095uOWkHmqQDP4G+dzpS2+FvX/dfGz2YNp2oLw gUbxAsQD/7kWmB8hlfJGJcCmCLVLaJAGR7SW5EgaGMct+/3QhcBXNiQQ7H6VJXRg VM7E3dgDsUR4nMrfqtKGEP1Vfmgclom/YU3LbzKjj4+MFJQw//sOp56omRSFYaVm 193pCo6tCublbhGs/m8uHmvlXjGM0VCI8Ukg4gVFoJS2XRAyGhYmo7dzn/OnFnIC vNhXsArPVpUpkmvzkucxYPH37vWHsDQtCxl2iUv7JhIxwdvygO1tb7nDzHOu50B4 ysR2giXiwU/BM0MhzbR8VboLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUozJJEJ15 zcKrtToXiVEfohQDxIMwHwYDVR0jBBgwFoAUPeqLG7hy3RJspkfMN1wgdgJAw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMEUyLzM0OERFMUNFQTI1 RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JKc3BrZk1OMXdnZGdKQXc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGVxTEc3aHkzUkpzcGtmTU4xd2dkZ0pBdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MEUyLzM0OERFMUNFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JK c3BrZk1OMXdnZGdKQXc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnj4rr45i/J4jpfW4gKJBItGrK1rDKnQssTn0T8boZ9RQW7Ci/GVYPR gRwr1gIsK3vgZ04dmgWZvAQ4cxq1N4olHJHXGCZ6acnKh7O23RyEeidS19OGB8pP 00mw1Rvhr6RxyiMz+CsLC6Wgv/GQX4g2fbt1GoyYvhmRzpjrhwuHW+YqvVI//TKe y4cu30cKywOwkGvYRJSGNROJ30sIdoi0HOX6Kj83F5QO0CIiIV9QE0EJ7WS19QVb VC0+A7JWG8QvEbMlm4AyRXpqNX6x0bTJXtmomJEuQXlia2Qv3xlQJj3qqg5FH0A1 fPGcmeQy5t/HUaRLr80Frljf/45ZJSs= -----END CERTIFICATE-----Generated at Tue Jul 1 20:46:09 2025 by rpki-client