$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: g9krVBphJZew7I/OJPwgEv38fPL0n3LNYzqibEmOAB4= Subject key identifier: C7:9D:7D:1F:60:1A:1A:08:C2:62:F5:4E:9F:A7:A0:91:2E:94:65:16 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 1164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 1150 Signing time: Wed 02 Jul 2025 17:26:57 +0000 Manifest this update: Wed 02 Jul 2025 17:26:56 +0000 Manifest next update: Wed 09 Jul 2025 17:26:56 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: MyJdD306KLZ72M8FAUSFz53lZv7yrGTiOEsDbOjdzEM=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Jul 2 17:26:56 2025 GMT Not After : Jul 9 17:26:56 2025 GMT Subject: CN=68656be1-6cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:99:59:47:ba:4a:87:e4:34:be:f1:d4:72: 44:6d:91:5c:18:d9:79:9b:93:65:af:67:51:dd:4c: 94:5f:06:61:91:3a:01:be:49:29:af:95:f1:95:31: 00:78:17:e3:0c:9a:06:ba:00:38:fd:f4:25:97:93: fe:24:b3:bf:2d:b5:78:98:f5:32:0f:e1:8f:90:c4: 64:a8:06:ea:c9:f8:8f:af:ef:c7:d6:0f:07:0d:dc: cc:c9:08:01:19:e6:fd:96:91:04:6e:8e:cf:5a:d7: a9:44:59:65:ef:6a:b6:02:d6:18:27:85:1c:0e:2e: 2f:76:7d:35:ff:b4:0f:21:03:73:03:75:f5:a0:a5: 59:40:f2:50:87:72:58:82:d5:45:2c:69:0e:ab:9c: b3:cc:0b:65:6a:c4:87:84:2d:e8:cf:35:b9:da:21: 7d:64:21:da:ea:03:39:5b:1c:5b:06:4c:d1:b5:99: 53:81:7d:15:b2:36:d1:68:84:ce:e6:df:46:21:f8: 27:93:72:07:d6:e3:7e:02:a7:c7:65:ff:e7:6c:68: ee:76:dd:7b:4d:e6:27:88:a4:77:c1:45:b7:2c:8e: 9f:27:ca:92:70:67:80:3f:5a:b9:b5:c2:b7:ef:a3: 94:63:73:25:e5:f1:a2:b2:71:d4:b8:49:41:12:e0: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:7D:1F:60:1A:1A:08:C2:62:F5:4E:9F:A7:A0:91:2E:94:65:16 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f5:ce:80:6d:7d:fa:c1:92:84:a2:fd:09:8b:86:2d:23:bb: a2:75:07:46:30:ef:a5:27:ba:03:83:e2:f6:3d:3f:ef:98:f3: d9:f1:12:64:6e:6d:e6:b0:50:70:00:4b:41:dc:c6:28:14:ab: aa:aa:55:b8:67:c6:03:ba:d3:6b:19:11:cc:85:ea:16:29:4f: 1a:96:48:78:09:72:8e:6d:b5:fb:d7:97:eb:c0:64:08:d9:e0: 92:12:c9:e4:6e:5b:91:c2:b5:30:e7:f4:db:da:b3:5e:5c:38: 85:34:0b:b4:e4:b1:68:d9:c2:0b:b8:d3:0f:f3:98:b8:8f:8b: 93:17:84:c5:e6:21:b5:d9:78:fd:c9:09:2f:78:4a:c1:da:02: 6d:76:af:fd:45:b4:01:71:0e:8b:c9:2f:e3:c3:b9:5a:a6:bc: 11:32:7f:27:b6:04:35:d1:d0:6c:00:6d:96:bc:d5:2f:f6:1a: db:73:25:fd:8e:af:af:cd:63:fc:17:58:ce:47:38:2d:f4:ea: 51:c0:c9:8b:2c:1f:38:90:04:47:d8:fa:8b:15:d1:49:8f:de: f6:8a:02:14:9e:00:b3:4a:7e:0b:cd:fd:d8:d7:a1:2e:8d:18: 3f:92:55:41:1f:d4:ca:fb:28:7f:72:c7:13:8b:ca:a9:7c:5b: cf:5a:85:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUwNzAyMTcyNjU2WhcNMjUwNzA5MTcyNjU2WjAYMRYwFAYD VQQDEw02ODY1NmJlMS02Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNmZWUe6SofkNL7x1HJEbZFcGNl5m5Nlr2dR3UyUXwZhkToBvkkpr5XxlTEA eBfjDJoGugA4/fQll5P+JLO/LbV4mPUyD+GPkMRkqAbqyfiPr+/H1g8HDdzMyQgB Geb9lpEEbo7PWtepRFll72q2AtYYJ4UcDi4vdn01/7QPIQNzA3X1oKVZQPJQh3JY gtVFLGkOq5yzzAtlasSHhC3ozzW52iF9ZCHa6gM5WxxbBkzRtZlTgX0VsjbRaITO 5t9GIfgnk3IH1uN+AqfHZf/nbGjudt17TeYniKR3wUW3LI6fJ8qScGeAP1q5tcK3 76OUY3Ml5fGisnHUuElBEuCgdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMedfR9g GhoIwmL1Tp+noJEulGUWMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA59c6AbX36wZKEov0Ji4YtI7uidQdGMO+lJ7oDg+L2PT/vmPPZ8RJk bm3msFBwAEtB3MYoFKuqqlW4Z8YDutNrGRHMheoWKU8alkh4CXKObbX715frwGQI 2eCSEsnkbluRwrUw5/Tb2rNeXDiFNAu05LFo2cILuNMP85i4j4uTF4TF5iG12Xj9 yQkveErB2gJtdq/9RbQBcQ6LyS/jw7laprwRMn8ntgQ10dBsAG2WvNUv9hrbcyX9 jq+vzWP8F1jORzgt9OpRwMmLLB84kARH2PqLFdFJj972igIUngCzSn4Lzf3Y16Eu jRg/klVBH9TK+yh/cscTi8qpfFvPWoUX -----END CERTIFICATE-----Generated at Fri Jul 4 14:23:45 2025 by rpki-client