$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: lBvwQPRTyOExz0dixeaMV2RvCUHYjlo+PhfSd3DgP2M= Subject key identifier: 8D:E6:7C:C5:E4:30:19:03:CD:03:30:89:51:44:7C:8F:2F:67:88:26 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01C9 Signing time: Tue 13 May 2025 02:14:02 +0000 Manifest this update: Tue 13 May 2025 02:14:02 +0000 Manifest next update: Tue 20 May 2025 02:14:02 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: RS+0S62on2HdXf4e1WmIII2ALbOg9lN7xZRUpxlPFr0=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: May 13 02:14:02 2025 GMT Not After : May 20 02:14:02 2025 GMT Subject: CN=6822aaea-cdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:12:95:4d:44:7d:e2:b2:55:ea:4f:4c:af: b5:44:02:9c:6d:7b:3d:b2:17:dc:57:60:dc:fb:27: 82:c8:ee:5a:d4:89:44:6e:36:60:13:cf:9f:ed:3a: 1b:d2:72:b6:c6:ac:c9:72:20:45:f9:ec:4a:51:99: 4d:d0:b1:85:3e:e2:07:5e:6a:fb:b3:a3:d7:ba:d4: 79:fc:7f:fc:46:9a:9c:34:81:b4:51:73:bc:c1:8c: 2c:21:ae:8a:ba:88:00:fa:e2:94:b2:6d:9c:6f:5b: 89:bb:96:4c:6e:d0:94:c2:33:ae:fb:2f:ef:ee:02: fd:0b:a3:b3:93:d9:de:8b:32:c0:fe:28:cc:66:27: 15:66:6c:8d:3b:08:57:c5:ff:23:ce:bf:01:1c:e5: 25:97:57:9e:6e:61:00:dd:3a:d5:a4:00:c0:cf:a3: 1d:0f:b8:bc:bf:a1:e1:58:14:8e:dc:af:56:ac:1d: fe:dd:91:ab:99:6a:63:04:44:c0:71:55:9c:dc:5b: 2a:63:d3:14:aa:cd:4b:77:de:cf:d7:b8:b4:64:42: e6:ed:6b:83:4b:18:d5:85:b0:5d:dd:60:a1:67:5d: 61:cb:f5:b0:11:14:a8:bc:40:e1:b8:8e:4a:b6:d8: da:05:64:86:69:5a:b3:6e:07:03:ef:93:43:74:0f: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:7C:C5:E4:30:19:03:CD:03:30:89:51:44:7C:8F:2F:67:88:26 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:b0:5c:51:a6:c5:a3:91:ec:90:4b:63:a9:4a:93:be:e8: 5a:c0:e0:fa:09:91:d8:44:fc:bd:86:51:32:52:9c:37:21:e0: 4e:7d:28:68:2a:1e:99:e4:ef:10:d1:0f:e6:4d:15:5b:b8:df: a8:ba:9d:9a:6d:31:80:d8:4f:e0:da:0a:5c:5e:90:b3:fb:8d: 5a:a4:d2:16:5a:8c:74:ac:8b:17:cb:e4:8c:97:aa:c6:4b:19: be:8b:2e:66:ce:80:df:e5:6b:fa:5a:01:d3:2f:4b:0a:c5:24: c2:b9:c4:83:87:a5:71:39:f4:95:95:94:7c:a3:10:c3:85:b6: ea:8f:47:6d:60:22:71:14:89:a3:68:a7:47:46:1e:0c:99:f5: 4f:a4:fd:1d:d3:ef:77:cd:b2:df:9b:dd:7b:9e:88:5b:4d:92: 7b:e2:a7:5e:ed:28:c3:0e:e0:bd:1c:f6:9b:19:1a:fc:5a:04: 29:20:93:4e:42:73:89:3c:a9:c2:bc:a2:8a:4e:40:85:2a:bc: fa:33:1a:e2:9e:91:7f:1b:b0:09:32:0d:8f:ea:3b:d8:7c:d9: ed:83:7b:05:7d:7f:b2:b5:40:46:3a:74:9d:15:b4:08:a7:0d: 51:0e:48:86:b0:e6:df:65:ed:dd:81:7e:25:c6:24:21:c1:23: 50:60:c0:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNTEzMDIxNDAyWhcNMjUwNTIwMDIxNDAyWjAYMRYwFAYD VQQDEw02ODIyYWFlYS1jZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcgSlU1EfeKyVepPTK+1RAKcbXs9shfcV2Dc+yeCyO5a1IlEbjZgE8+f7Tob 0nK2xqzJciBF+exKUZlN0LGFPuIHXmr7s6PXutR5/H/8RpqcNIG0UXO8wYwsIa6K uogA+uKUsm2cb1uJu5ZMbtCUwjOu+y/v7gL9C6Ozk9neizLA/ijMZicVZmyNOwhX xf8jzr8BHOUll1eebmEA3TrVpADAz6MdD7i8v6HhWBSO3K9WrB3+3ZGrmWpjBETA cVWc3FsqY9MUqs1Ld97P17i0ZELm7WuDSxjVhbBd3WChZ11hy/WwERSovEDhuI5K ttjaBWSGaVqzbgcD75NDdA+a5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3mfMXk MBkDzQMwiVFEfI8vZ4gmMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+P7BcUabFo5HskEtjqUqTvuhawOD6CZHYRPy9hlEyUpw3IeBOfSho Kh6Z5O8Q0Q/mTRVbuN+oup2abTGA2E/g2gpcXpCz+41apNIWWox0rIsXy+SMl6rG Sxm+iy5mzoDf5Wv6WgHTL0sKxSTCucSDh6VxOfSVlZR8oxDDhbbqj0dtYCJxFImj aKdHRh4MmfVPpP0d0+93zbLfm917nohbTZJ74qde7SjDDuC9HPabGRr8WgQpIJNO QnOJPKnCvKKKTkCFKrz6MxrinpF/G7AJMg2P6jvYfNntg3sFfX+ytUBGOnSdFbQI pw1RDkiGsObfZe3dgX4lxiQhwSNQYMAt -----END CERTIFICATE-----Generated at Wed May 14 17:37:25 2025 by rpki-client