$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json) Hash identifier: 2TYLQTNpHFOoaq8WH4oaSXgyRTktMpiNBycqiBiQAyg= Subject key identifier: F0:B8:73:33:06:FE:19:51:52:E4:09:1B:8F:A4:CF:F2:03:95:98:76 Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft Manifest number: 29E6 Signing time: Wed 02 Jul 2025 17:09:30 +0000 Manifest this update: Wed 02 Jul 2025 17:09:29 +0000 Manifest next update: Wed 09 Jul 2025 17:09:29 +0000 Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: GuUyMFI1p5/qUJfKzbwi2RIBiS/a4dsqkHNdqd4gYxE=) 2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: rZyJvAvO0YwkG/MbAGqJuB8AX+WqxTqTjs14toCdU2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E Validity Not Before: Jul 2 17:09:29 2025 GMT Not After : Jul 9 17:09:29 2025 GMT Subject: CN=686567ca-f948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:1c:63:4f:67:6e:44:10:27:d0:d2:75:03: d2:9d:a8:37:b1:24:fa:c0:29:69:1f:ca:0f:a3:a1: eb:51:02:be:5e:28:ea:41:91:66:41:24:e4:ff:19: f9:b7:a2:bb:ee:47:fe:ce:88:a1:01:87:82:4e:e2: 79:bb:f2:8f:96:1f:7f:55:22:15:87:d1:91:1a:a9: 1d:89:35:69:4e:ec:38:40:0e:b9:4b:25:d9:24:54: 2c:91:8c:a0:e8:45:7c:74:a3:88:4e:b0:19:c2:ce: 61:c8:de:c2:b9:97:b8:e2:83:ee:de:fe:e0:56:fe: 17:24:f4:5a:9c:67:08:34:ab:63:d0:94:0e:07:d0: e1:e0:97:1f:0b:62:75:fc:3c:62:ea:5d:7d:85:51: dc:c0:60:97:8b:11:34:e1:8e:34:bc:75:43:e7:cd: eb:53:aa:13:59:71:c8:fb:92:e7:66:3b:14:fd:a7: b0:c2:e5:f7:31:9f:c9:d3:c9:5d:00:16:87:12:84: 19:34:15:bb:bb:c9:64:1d:ea:fe:10:33:ad:48:3e: 07:2d:d0:fe:3c:e2:5c:b1:a1:42:8b:3a:6f:ab:b3: 07:9e:04:cc:b8:78:69:0c:17:bc:3f:c9:17:be:93: ba:aa:87:e2:ba:8c:ab:4b:54:07:d9:97:fb:21:e1: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:73:33:06:FE:19:51:52:E4:09:1B:8F:A4:CF:F2:03:95:98:76 X509v3 Authority Key Identifier: keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e6:ec:f4:52:fc:a4:40:50:e1:9e:c3:f1:27:d8:08:cc:61: f7:b7:b7:db:36:f0:62:70:79:bf:dd:cb:12:71:af:47:46:3b: 23:5a:55:52:02:5d:81:dc:8c:8d:02:e9:2f:4a:70:5f:6f:f1: 20:39:03:8b:d2:8e:b1:e1:64:7e:ef:79:4c:eb:58:81:a1:95: 6e:fc:9f:6f:17:29:37:36:70:2c:56:58:9b:24:9b:50:c9:75: 94:af:d0:78:da:36:75:ad:99:41:2c:46:90:a6:9d:8a:c3:2a: c8:53:9f:d5:a8:a9:11:6f:50:59:38:64:0b:23:e0:4c:5d:27: 93:0b:d5:c2:78:c8:3e:23:cb:ba:73:f4:32:23:02:83:3a:00: 20:f8:31:8a:6f:ca:6c:e0:89:a8:01:29:5c:0d:8e:ad:9a:98: df:75:dc:a9:7e:e7:5e:ba:df:7f:32:82:d7:f7:bf:88:c0:bc: 91:a6:12:76:8f:af:18:e7:7c:a7:95:90:b0:d0:83:e9:bf:9f: 68:a9:e6:12:f8:67:0c:d7:5e:8a:ce:b5:f7:95:d0:b6:3a:3c: da:3c:93:e8:03:b9:d0:9c:92:b7:9b:94:68:b8:ab:bb:72:e7: 18:88:fb:87:7b:a8:c8:81:c6:fd:bd:a2:47:06:76:7e:a9:44: d9:87:54:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1 NzhBMEVENUUwHhcNMjUwNzAyMTcwOTI5WhcNMjUwNzA5MTcwOTI5WjAYMRYwFAYD VQQDEw02ODY1NjdjYS1mOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogAcY09nbkQQJ9DSdQPSnag3sST6wClpH8oPo6HrUQK+XijqQZFmQSTk/xn5 t6K77kf+zoihAYeCTuJ5u/KPlh9/VSIVh9GRGqkdiTVpTuw4QA65SyXZJFQskYyg 6EV8dKOITrAZws5hyN7CuZe44oPu3v7gVv4XJPRanGcINKtj0JQOB9Dh4JcfC2J1 /Dxi6l19hVHcwGCXixE04Y40vHVD583rU6oTWXHI+5LnZjsU/aewwuX3MZ/J08ld ABaHEoQZNBW7u8lkHer+EDOtSD4HLdD+POJcsaFCizpvq7MHngTMuHhpDBe8P8kX vpO6qofiuoyrS1QH2Zf7IeFwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC4czMG /hlRUuQJG4+kz/IDlZh2MB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ cHppQ09QTHRNRlZYaWc3VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj5uz0UvykQFDhnsPxJ9gIzGH3t7fbNvBicHm/3csSca9HRjsjWlVS Al2B3IyNAukvSnBfb/EgOQOL0o6x4WR+73lM61iBoZVu/J9vFyk3NnAsVlibJJtQ yXWUr9B42jZ1rZlBLEaQpp2KwyrIU5/VqKkRb1BZOGQLI+BMXSeTC9XCeMg+I8u6 c/QyIwKDOgAg+DGKb8ps4ImoASlcDY6tmpjfddypfudeut9/MoLX97+IwLyRphJ2 j68Y53ynlZCw0IPpv59oqeYS+GcM116KzrX3ldC2OjzaPJPoA7nQnJK3m5RouKu7 cucYiPuHe6jIgcb9vaJHBnZ+qUTZh1RK -----END CERTIFICATE-----Generated at Thu Jul 3 14:38:55 2025 by rpki-client