$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json) Hash identifier: 5vS2cqnjw7S/pcIwvQwHugVzbahiSa8b+BZbxD7U7VI= Subject key identifier: 21:4C:5A:77:2D:87:08:DD:3A:AB:19:70:53:87:82:9F:9D:B3:7F:1B Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft Manifest number: 044A Signing time: Thu 03 Jul 2025 00:36:42 +0000 Manifest this update: Thu 03 Jul 2025 00:36:41 +0000 Manifest next update: Thu 10 Jul 2025 00:36:41 +0000 Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: l4XSh9uz+fGEt4EASEBO+8PglSNo1NowKr12/K2WLSY=) 2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: mDuBvAb87vc0xqlLuEIwzuSg0BaaCa9nDXGB49E/55o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A Validity Not Before: Jul 3 00:36:41 2025 GMT Not After : Jul 10 00:36:41 2025 GMT Subject: CN=6865d099-a712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:03:82:14:0b:c9:16:87:b2:33:e8:a5:62: 59:2a:56:91:f4:5b:a1:aa:07:1b:9d:b5:ff:bc:c3: 6d:bd:69:25:bf:1d:2e:3a:ac:9c:9d:c6:73:41:7b: f8:18:e4:9c:d2:eb:7f:01:96:55:9e:b5:79:e6:27: 92:be:e0:3f:ad:c0:39:21:f4:d2:f5:fe:e9:f3:61: 55:bb:94:46:ee:94:fc:6c:e3:8b:e7:61:b9:2c:9b: 15:a2:f3:17:96:5f:ef:c7:5c:7f:42:7d:d8:a7:7a: ce:a9:61:e7:11:16:26:7f:94:3a:22:00:aa:d9:37: 91:03:5d:7f:aa:a3:92:28:79:aa:7c:9e:8a:f8:e0: 2f:a7:8f:05:40:27:a3:f1:80:90:9a:59:00:0f:88: 5e:c8:35:ce:fb:56:bc:08:fa:c4:48:17:33:2f:1a: f2:10:96:9e:d1:7e:f7:08:90:13:61:5d:b4:d1:d8: f5:2a:a6:ea:e1:1d:45:81:6c:da:d7:88:ab:c8:42: e3:3a:6d:26:12:ae:d4:e0:aa:0b:43:44:3d:cf:60: 26:c2:68:1f:88:37:c2:ec:d8:86:a3:4c:59:3c:ba: 95:4f:fe:d3:48:0e:7a:d7:f5:95:f9:e0:cd:9f:c2: 59:63:a5:91:4a:c6:58:4a:06:26:c3:33:09:22:9b: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:5A:77:2D:87:08:DD:3A:AB:19:70:53:87:82:9F:9D:B3:7F:1B X509v3 Authority Key Identifier: keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:72:30:c5:f4:b0:b4:fe:67:5a:aa:bd:84:fd:89:a0:a5:f6: ce:b3:4a:62:45:4f:c1:f3:ef:05:9f:6d:a4:b9:43:0b:7c:32: 46:da:a4:2e:12:5c:3b:16:bf:e1:49:2b:62:0b:e7:04:93:80: 9e:1e:b6:92:9b:eb:bf:00:90:b1:7e:31:7f:6b:25:8d:8f:c7: 38:10:b3:a5:c0:d1:97:2d:ce:a8:50:eb:b4:de:36:fa:52:18: cc:b4:ff:68:54:ee:e0:a9:24:02:8c:b3:31:5c:90:88:63:0e: 7d:d9:7a:7e:82:68:e3:6b:30:f1:ec:36:18:f8:89:cb:8a:f7: 84:62:d4:7b:c8:12:c4:23:5f:ac:76:9c:b2:10:7e:c9:d6:77: ce:eb:2c:93:f3:a6:5b:1c:24:ee:8e:a9:9a:3b:a4:86:9f:48: 3b:3a:6e:20:9b:58:16:42:30:79:c8:16:13:2c:ae:fd:fd:b1: c3:8d:a9:3b:5a:1c:52:bd:8e:27:0a:33:44:fc:f8:c5:ea:72: 6b:5a:c4:da:72:73:27:33:0f:e6:12:7f:d6:a6:dd:4d:d8:dd: e0:ff:12:bd:6a:e3:41:5a:71:8b:c1:68:b0:d1:65:cb:db:da: 90:d8:c7:5b:6a:9f:b5:29:88:ac:7a:1c:d4:eb:3a:15:d7:19: 82:3e:2f:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG MTUwNzgwMUEwHhcNMjUwNzAzMDAzNjQxWhcNMjUwNzEwMDAzNjQxWjAYMRYwFAYD VQQDEw02ODY1ZDA5OS1hNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VwDghQLyRaHsjPopWJZKlaR9FuhqgcbnbX/vMNtvWklvx0uOqycncZzQXv4 GOSc0ut/AZZVnrV55ieSvuA/rcA5IfTS9f7p82FVu5RG7pT8bOOL52G5LJsVovMX ll/vx1x/Qn3Yp3rOqWHnERYmf5Q6IgCq2TeRA11/qqOSKHmqfJ6K+OAvp48FQCej 8YCQmlkAD4heyDXO+1a8CPrESBczLxryEJae0X73CJATYV200dj1Kqbq4R1FgWza 14iryELjOm0mEq7U4KoLQ0Q9z2AmwmgfiDfC7NiGo0xZPLqVT/7TSA561/WV+eDN n8JZY6WRSsZYSgYmwzMJIpuK/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFMWnct hwjdOqsZcFOHgp+ds38bMB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcjDF9LC0/mdaqr2E/YmgpfbOs0piRU/B8+8Fn22kuUMLfDJG2qQu Elw7Fr/hSStiC+cEk4CeHraSm+u/AJCxfjF/ayWNj8c4ELOlwNGXLc6oUOu03jb6 UhjMtP9oVO7gqSQCjLMxXJCIYw592Xp+gmjjazDx7DYY+InLiveEYtR7yBLEI1+s dpyyEH7J1nfO6yyT86ZbHCTujqmaO6SGn0g7Om4gm1gWQjB5yBYTLK79/bHDjak7 WhxSvY4nCjNE/PjF6nJrWsTacnMnMw/mEn/Wpt1N2N3g/xK9auNBWnGLwWiw0WXL 29qQ2Mdbap+1KYisehzU6zoV1xmCPi8J -----END CERTIFICATE-----Generated at Thu Jul 3 23:32:59 2025 by rpki-client