$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: 3hc/LbwLd9AcLk4Anj08l08ArRkuARNBAUYLKvwLqXw= Subject key identifier: C1:45:DE:F1:2C:6D:68:E1:9D:36:DA:46:9D:49:6D:38:67:83:9A:2C Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: E2 Signing time: Thu 03 Jul 2025 05:46:32 +0000 Manifest this update: Thu 03 Jul 2025 05:46:31 +0000 Manifest next update: Thu 10 Jul 2025 05:46:31 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: BKogVVJuzfNYFJFUY6srJ2BXxLP8FarRfG2tsZz30Ow=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Jul 3 05:46:31 2025 GMT Not After : Jul 10 05:46:31 2025 GMT Subject: CN=68661937-3177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:00:e5:49:f6:1b:8d:7d:dc:88:8c:bb:91: 46:92:e3:e1:0c:73:3c:39:a3:a9:67:84:91:0e:38: cc:46:cd:6e:a7:b1:b0:64:a7:6b:63:bc:3f:3e:d8: c1:ac:98:f5:40:b4:86:8d:38:9a:c3:d3:bc:bc:b6: 8d:43:74:98:c8:d3:ab:e4:70:07:6b:6e:9a:a4:9d: bc:89:ad:86:06:62:aa:fb:db:56:c7:95:05:a2:21: 88:33:da:07:12:35:8c:e2:9a:ef:46:6e:ae:bf:5e: b1:9d:77:e9:a1:6d:05:33:ec:ba:75:70:b7:aa:d0: 69:97:05:50:f9:bb:75:00:91:80:44:98:9a:16:d3: 9e:d2:9d:00:d5:f9:4f:2b:85:bc:27:ef:48:ac:fa: fb:5b:ea:37:4f:b3:db:df:0f:de:fe:fa:08:28:9a: 5e:c0:86:b4:8b:6f:77:89:db:c7:a7:ed:07:81:25: 4d:db:a9:6e:65:3c:f6:50:90:86:0b:57:18:4e:1b: 18:1a:2d:26:1d:b0:46:7c:b3:1b:05:95:51:70:5a: 20:da:8e:71:5a:40:45:02:1d:eb:f2:1f:51:f9:d2: 62:3a:ea:1d:97:31:80:9b:40:6b:fe:f9:d4:65:b8: de:dd:1f:eb:d8:65:25:e5:e7:ae:fb:8f:65:f9:7b: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:45:DE:F1:2C:6D:68:E1:9D:36:DA:46:9D:49:6D:38:67:83:9A:2C X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bd:02:e5:fc:dd:a3:6c:1b:e1:46:ea:e9:00:1d:49:21:6b: e3:79:a2:e1:88:e6:78:99:13:89:c0:f4:85:64:f3:4d:c9:ac: 22:66:3c:19:3d:3e:e7:9a:df:20:12:71:ba:cb:fd:22:0f:ac: ff:d6:a9:fa:06:83:b7:ee:84:9c:21:c0:71:32:9c:74:63:6a: 53:a5:f5:99:59:69:6c:5e:69:5d:91:b9:7d:f1:01:87:5b:b4: 5b:89:0f:c2:0f:34:1e:3b:31:6f:21:e6:f8:a2:52:c9:f5:71: c0:73:18:8f:be:7e:0e:18:07:b6:09:61:d0:8a:7b:a0:6e:44: e5:41:d7:1f:19:e1:fc:a2:11:d6:81:bb:3e:b8:d0:24:0a:05: 17:f9:49:ba:ef:40:f6:79:86:2a:9f:39:b3:27:cd:94:0a:ce: e0:19:ac:bb:50:5b:6a:9d:ad:6a:8e:21:ba:94:4c:17:72:8b: 9c:18:39:10:f0:96:5f:01:9c:e6:36:f3:1c:34:7c:61:fc:f8: 2a:97:e4:d7:c7:02:98:c0:be:39:4c:96:ad:cf:a7:c7:31:c6: c8:b9:86:40:75:4e:6a:99:11:26:07:48:37:e8:8b:c6:3d:f7: 3d:ec:6f:1f:d8:fa:71:bb:a2:00:6f:98:fc:d6:ce:48:3e:3a: 7c:22:28:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwNzAzMDU0NjMxWhcNMjUwNzEwMDU0NjMxWjAYMRYwFAYD VQQDEw02ODY2MTkzNy0zMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw78A5Un2G4193IiMu5FGkuPhDHM8OaOpZ4SRDjjMRs1up7GwZKdrY7w/PtjB rJj1QLSGjTiaw9O8vLaNQ3SYyNOr5HAHa26apJ28ia2GBmKq+9tWx5UFoiGIM9oH EjWM4prvRm6uv16xnXfpoW0FM+y6dXC3qtBplwVQ+bt1AJGARJiaFtOe0p0A1flP K4W8J+9IrPr7W+o3T7Pb3w/e/voIKJpewIa0i293idvHp+0HgSVN26luZTz2UJCG C1cYThsYGi0mHbBGfLMbBZVRcFog2o5xWkBFAh3r8h9R+dJiOuodlzGAm0Br/vnU Zbje3R/r2GUl5eeu+49l+XsMxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFF3vEs bWjhnTbaRp1JbThng5osMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPvQLl/N2jbBvhRurpAB1JIWvjeaLhiOZ4mROJwPSFZPNNyawiZjwZ PT7nmt8gEnG6y/0iD6z/1qn6BoO37oScIcBxMpx0Y2pTpfWZWWlsXmldkbl98QGH W7RbiQ/CDzQeOzFvIeb4olLJ9XHAcxiPvn4OGAe2CWHQinugbkTlQdcfGeH8ohHW gbs+uNAkCgUX+Um670D2eYYqnzmzJ82UCs7gGay7UFtqna1qjiG6lEwXcoucGDkQ 8JZfAZzmNvMcNHxh/Pgql+TXxwKYwL45TJatz6fHMcbIuYZAdU5qmREmB0g36IvG Pfc97G8f2Ppxu6IAb5j81s5IPjp8Iih6 -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:27 2025 by rpki-client