$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft File: PtImrpJ_g5gXgFRs42LzNp7bJLM.mft (raw, json) Hash identifier: ei7r1zF9CcgesHMfBhbzIB/vfj9QWFZCON0p/WV69vE= Subject key identifier: 2F:2C:70:16:5A:89:3A:EE:2A:68:24:89:3C:4E:CC:C0:69:0A:02:CE Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3 Certificate issuer: /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft Manifest number: 01D9 Signing time: Thu 03 Jul 2025 02:51:21 +0000 Manifest this update: Thu 03 Jul 2025 02:51:21 +0000 Manifest next update: Thu 10 Jul 2025 02:51:21 +0000 Files and hashes: 1: PtImrpJ_g5gXgFRs42LzNp7bJLM.crl (hash: 0LqDbSt1nQpQNsFSqybHAi2nQHgIWQE2MF+u9Ggbs3w=) 2: 3CD61DC8812D11ED9C04940EC4F9AE02.roa (hash: 4r+FPODWlYAg3R0bTGG1po2dllmEFZLNMXrI5xbY0sU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3 Validity Not Before: Jul 3 02:51:21 2025 GMT Not After : Jul 10 02:51:21 2025 GMT Subject: CN=6865f029-4d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:24:93:cf:7c:8a:ae:7b:a5:4b:4c:4a:93: 8b:db:48:52:0d:c4:1f:c0:18:94:91:53:74:4c:fb: 03:a9:36:c6:10:2a:e9:47:22:99:58:ad:c2:04:d3: 24:77:c1:65:ec:61:04:db:70:04:44:fa:66:11:75: 04:17:d4:81:b6:22:11:d6:fa:3e:3b:b5:40:d5:05: bd:3f:b3:e5:b8:ba:b3:4a:5a:3d:44:38:b0:a4:9a: 53:24:3b:04:af:9f:bd:27:31:31:8b:9c:e7:29:3c: 34:db:ab:fc:99:d4:e6:ef:43:36:aa:d7:fa:5c:b2: 82:24:4d:f8:52:6b:a5:3f:44:5c:a0:67:f1:79:1b: a9:b0:4e:64:71:cf:73:fb:99:c1:79:54:01:d6:3a: 3d:e0:82:ee:e6:38:db:95:a9:35:12:df:7a:95:51: 88:0b:37:eb:95:42:88:b5:9a:c9:bf:1e:45:23:ad: fb:8e:0a:04:18:71:0b:77:17:7d:1b:6e:33:02:50: f0:47:9a:5e:fa:e3:2b:72:57:7c:29:71:34:82:bb: f3:2d:ad:1d:17:85:a4:18:97:cc:3b:ca:35:48:80: 07:74:e9:d4:fe:90:6e:b0:a2:8f:c2:93:f3:ad:77: a5:b0:89:e3:2d:8d:33:97:85:ff:38:34:e2:07:aa: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2C:70:16:5A:89:3A:EE:2A:68:24:89:3C:4E:CC:C0:69:0A:02:CE X509v3 Authority Key Identifier: keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7c:87:ec:f4:77:eb:e3:5c:37:3f:da:79:59:ad:a7:db:af: b9:eb:bb:57:5f:ca:48:5f:90:ee:03:2b:6b:a4:53:8d:bb:f9: 05:e1:57:87:f3:3b:26:05:fd:c3:fd:da:6b:35:d4:8c:2d:36: f2:65:07:a7:03:71:dd:d7:5c:42:75:c9:69:49:bc:1b:15:ca: 4f:37:fc:99:dc:fe:1a:bb:a7:09:8b:3d:6a:eb:31:79:46:8c: 75:43:a8:ce:b1:41:9f:1a:9d:3d:0c:01:3d:7f:8e:56:1b:5d: 30:07:6c:c5:99:93:dd:28:6a:3b:a3:3b:d7:5b:7f:ca:4b:d6: f4:86:46:8d:4e:f9:c7:f8:5e:ef:1b:f2:41:8d:49:48:46:36: 49:6c:d0:12:fc:d3:6d:c5:90:35:bb:9b:3f:51:da:63:95:af: 9f:c9:08:91:aa:b0:66:ed:9e:72:ef:a2:98:08:5d:af:09:4b: b7:67:3d:73:6f:0f:ca:98:15:c8:7f:bf:a9:ec:12:55:4a:ab: 6e:f9:1d:fb:bf:d0:47:d0:dd:05:92:bb:55:a4:fc:3e:b5:31: e2:a1:ec:5a:65:57:84:9c:b7:dd:fd:a3:d1:13:88:2d:55:21: 12:44:02:0c:ef:17:f5:64:f2:1a:d4:be:d3:50:62:44:38:b5: 76:31:ab:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyREMxMTAvBgNVBAUTKDNFRDIyNkFFOTI3RjgzOTgxNzgwNTQ2Q0UzNjJGMzM2 OUVEQjI0QjMwHhcNMjUwNzAzMDI1MTIxWhcNMjUwNzEwMDI1MTIxWjAYMRYwFAYD VQQDEw02ODY1ZjAyOS00ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zIkk898iq57pUtMSpOL20hSDcQfwBiUkVN0TPsDqTbGECrpRyKZWK3CBNMk d8Fl7GEE23AERPpmEXUEF9SBtiIR1vo+O7VA1QW9P7PluLqzSlo9RDiwpJpTJDsE r5+9JzExi5znKTw026v8mdTm70M2qtf6XLKCJE34UmulP0RcoGfxeRupsE5kcc9z +5nBeVQB1jo94ILu5jjblak1Et96lVGICzfrlUKItZrJvx5FI637jgoEGHELdxd9 G24zAlDwR5pe+uMrcld8KXE0grvzLa0dF4WkGJfMO8o1SIAHdOnU/pBusKKPwpPz rXelsInjLY0zl4X/ODTiB6q3rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8scBZa iTruKmgkiTxOzMBpCgLOMB8GA1UdIwQYMBaAFD7SJq6Sf4OYF4BUbONi8zae2ySz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTJEQy81NjMyODdGNjgx MjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1Z1hnRlJzNDJMek5wN2JK TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0SW1ycEpfZzVnWGdGUnM0Mkx6TnA3YkpMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTJEQy81NjMyODdGNjgxMjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1 Z1hnRlJzNDJMek5wN2JKTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYfIfs9Hfr41w3P9p5Wa2n26+567tXX8pIX5DuAytrpFONu/kF4VeH 8zsmBf3D/dprNdSMLTbyZQenA3Hd11xCdclpSbwbFcpPN/yZ3P4au6cJiz1q6zF5 Rox1Q6jOsUGfGp09DAE9f45WG10wB2zFmZPdKGo7ozvXW3/KS9b0hkaNTvnH+F7v G/JBjUlIRjZJbNAS/NNtxZA1u5s/Udpjla+fyQiRqrBm7Z5y76KYCF2vCUu3Zz1z bw/KmBXIf7+p7BJVSqtu+R37v9BH0N0FkrtVpPw+tTHioexaZVeEnLfd/aPRE4gt VSESRAIM7xf1ZPIa1L7TUGJEOLV2MasP -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:52 2025 by rpki-client