$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: ymnILxCPV0iMQ4rd03uyibEOhmbOnkLT1vhDMkSuP1o= Subject key identifier: D0:BF:49:8B:75:D1:6A:CD:52:8A:B9:A6:DD:CE:9F:3E:9D:72:3F:A4 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01E2 Signing time: Thu 03 Jul 2025 02:46:43 +0000 Manifest this update: Thu 03 Jul 2025 02:46:42 +0000 Manifest next update: Thu 10 Jul 2025 02:46:42 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: C+89+qKUaV9L+WGWnd+p8FQFtyQ8KjZG/8Cgq/gQJ2M=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Jul 3 02:46:42 2025 GMT Not After : Jul 10 02:46:42 2025 GMT Subject: CN=6865ef13-0002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:35:15:f3:37:29:2d:cb:15:d5:93:c5:92: 0b:77:44:2f:5c:4a:be:58:93:78:5e:1d:1f:dc:e4: 6a:16:3a:2d:99:08:80:e7:2d:a3:58:6c:55:5a:35: 35:a4:02:32:03:61:6b:c6:c7:18:af:6e:b9:51:5c: 55:30:81:ca:cd:39:1b:b8:d3:6b:84:15:33:03:05: cf:67:9e:80:44:a6:97:5a:f6:2a:61:44:51:a9:1c: cc:94:0a:fb:97:15:55:1a:a3:4c:fc:f0:24:e1:20: cb:b8:36:b3:18:dc:08:92:d5:6f:6a:ad:73:8c:36: 49:20:d1:83:f6:51:05:a0:cd:e6:da:48:54:40:dd: a4:61:3e:13:d1:f7:65:eb:99:ed:b6:d9:a2:36:f9: 28:5a:73:e8:f3:f1:53:96:14:15:54:e3:2b:a6:fc: 54:01:39:a7:85:df:b4:51:8e:90:03:0a:1b:e3:a5: e3:2f:c4:ba:a0:ad:84:4a:46:33:2c:85:75:37:1b: 9a:7d:62:fd:e1:1f:3f:9f:ba:4d:aa:db:8f:57:8b: 11:4b:02:ec:7d:b1:9f:ff:a9:3f:78:f4:fe:5a:09: f9:bb:8a:0b:6d:94:1c:a2:bd:c6:02:38:7b:4f:d2: e1:8e:82:7c:9e:f5:f4:4c:71:99:72:5a:ac:fa:7e: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BF:49:8B:75:D1:6A:CD:52:8A:B9:A6:DD:CE:9F:3E:9D:72:3F:A4 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3c:bd:5d:8c:52:29:d8:38:9c:06:61:c4:85:96:4c:e5:37: 5b:68:8a:bb:d6:2c:4d:0a:ce:fa:e9:38:6f:7d:94:9f:30:01: 28:7d:03:b8:06:da:e8:9d:be:9e:52:3c:3b:81:5e:f7:cf:8d: 20:7d:60:f0:5b:95:0e:f5:df:1a:b0:9a:52:b4:7c:b0:c7:4a: f8:3f:13:a8:5e:47:67:05:c4:2f:92:d9:b4:1e:05:6c:d8:ee: 9a:ef:d8:ec:24:21:c0:e2:08:ba:56:42:c0:3e:84:08:dd:78: 46:ce:7a:43:ff:db:28:a8:57:ae:5a:6e:65:4d:4e:91:87:d0: 62:3b:0d:4e:a0:db:6d:f3:fd:db:88:ab:6b:12:32:5d:22:be: ba:2b:34:a5:d4:e1:9c:90:15:da:89:d8:9c:4e:a8:d3:6b:6a: 74:f7:fa:1d:5a:b7:89:e1:22:75:7d:7e:ea:0e:06:bf:d0:32: fb:34:11:04:b7:7a:c2:4b:3d:1f:a3:b3:95:9c:f6:cb:87:2f: a5:6e:c4:46:77:c3:2c:55:9b:47:07:99:c4:96:e5:5b:53:5b: 8f:7a:2b:4b:70:0a:ad:8c:1e:06:34:6b:58:48:cc:97:f2:ad: f5:f3:98:cf:a4:9c:ec:dd:38:53:ff:1e:43:91:30:57:f2:5e: a9:63:bc:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNzAzMDI0NjQyWhcNMjUwNzEwMDI0NjQyWjAYMRYwFAYD VQQDEw02ODY1ZWYxMy0wMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDY1FfM3KS3LFdWTxZILd0QvXEq+WJN4Xh0f3ORqFjotmQiA5y2jWGxVWjU1 pAIyA2FrxscYr265UVxVMIHKzTkbuNNrhBUzAwXPZ56ARKaXWvYqYURRqRzMlAr7 lxVVGqNM/PAk4SDLuDazGNwIktVvaq1zjDZJINGD9lEFoM3m2khUQN2kYT4T0fdl 65ntttmiNvkoWnPo8/FTlhQVVOMrpvxUATmnhd+0UY6QAwob46XjL8S6oK2ESkYz LIV1NxuafWL94R8/n7pNqtuPV4sRSwLsfbGf/6k/ePT+Wgn5u4oLbZQcor3GAjh7 T9LhjoJ8nvX0THGZclqs+n57gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC/SYt1 0WrNUoq5pt3Onz6dcj+kMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtPL1djFIp2DicBmHEhZZM5TdbaIq71ixNCs766ThvfZSfMAEofQO4 Btronb6eUjw7gV73z40gfWDwW5UO9d8asJpStHywx0r4PxOoXkdnBcQvktm0HgVs 2O6a79jsJCHA4gi6VkLAPoQI3XhGznpD/9soqFeuWm5lTU6Rh9BiOw1OoNtt8/3b iKtrEjJdIr66KzSl1OGckBXaidicTqjTa2p09/odWreJ4SJ1fX7qDga/0DL7NBEE t3rCSz0fo7OVnPbLhy+lbsRGd8MsVZtHB5nEluVbU1uPeitLcAqtjB4GNGtYSMyX 8q3185jPpJzs3ThT/x5DkTBX8l6pY7xv -----END CERTIFICATE-----Generated at Fri Jul 4 14:33:15 2025 by rpki-client