$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: pAeB0osxMEpktybXGucg9gJbUkLXKyvP7VkN6eZhQtk= Subject key identifier: E5:48:8C:79:47:5D:BD:24:3C:61:9C:DE:79:09:15:07:AC:7B:FF:16 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 16D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 1FE0 Signing time: Mon 30 Jun 2025 16:48:55 +0000 Manifest this update: Mon 30 Jun 2025 16:48:54 +0000 Manifest next update: Mon 07 Jul 2025 16:48:54 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: D6l0cLEPNzOKVfA7CLDdiX+2wsZmzgFx5RZ4s3/GjZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5844 (0x16d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Jun 30 16:48:54 2025 GMT Not After : Jul 7 16:48:54 2025 GMT Subject: CN=6862bff6-0650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:cd:e7:5b:08:12:b5:89:88:ef:7d:86:b4: 28:1e:6f:11:41:a3:60:8f:ff:3f:54:54:47:d6:0b: 65:09:9c:a5:1c:9e:49:f6:81:1f:6f:5e:42:dd:a6: 9c:f0:01:8d:55:11:23:bd:07:6e:72:03:47:f6:25: 84:0f:33:19:6b:ef:84:8e:ab:68:a8:82:e5:f5:d8: 64:e8:5b:a3:fa:48:8a:5a:2b:f6:47:16:dd:a5:63: fa:c5:67:be:12:c2:31:12:42:95:e2:e5:93:c0:18: 9f:0e:87:1c:d3:f6:82:a1:6c:84:5d:e2:05:04:b2: 02:b6:f8:e7:f4:91:05:7b:f6:66:ca:67:9e:6c:6b: 8f:44:62:57:38:f4:cb:1d:ff:1e:77:cb:49:e1:c2: cb:88:85:f4:4d:35:ef:91:17:7f:0a:c7:37:bf:cc: 6a:98:7b:c0:33:d2:d6:8d:e1:fd:f1:ce:27:db:68: 9a:91:85:5a:c1:ad:bc:00:1c:b8:d0:a8:72:64:1d: 0b:f8:3f:25:55:75:dd:a5:16:f2:55:c9:b9:c7:ed: 6c:30:8d:6c:92:1e:3a:fc:92:cd:be:9f:65:38:38: 9c:14:2f:7c:14:3e:64:11:1d:af:02:fb:76:68:a6: b3:93:6c:92:8f:72:c2:1c:8d:1a:8f:17:94:97:a3: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:48:8C:79:47:5D:BD:24:3C:61:9C:DE:79:09:15:07:AC:7B:FF:16 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:36:47:e0:3f:1c:53:04:f4:96:c2:4d:33:1f:e7:d6:a4:32: 0d:c7:34:0c:23:2d:fe:97:1d:06:de:45:cf:e5:a9:57:86:27: 5e:9b:dc:ac:23:fc:e6:35:83:60:2d:d0:95:af:95:15:09:65: 72:8b:ea:30:e4:18:aa:b0:2f:62:fb:de:4f:07:04:7e:75:17: 5a:30:2d:08:86:b5:5a:d4:55:3f:64:26:a5:1a:58:df:08:6c: 31:82:f9:78:33:35:ef:b9:18:71:e2:7b:be:82:c1:c5:b0:69: f2:55:1a:da:6b:eb:9f:ab:26:61:ab:63:c7:a5:9f:0e:19:9a: 57:97:66:bc:ad:c7:e4:0b:3a:8d:2c:e2:02:65:e2:aa:da:a0: 65:55:d5:6e:e3:76:99:35:01:c8:d1:fb:ea:b8:2c:f1:65:60: 94:b4:64:06:67:40:e9:da:c8:99:cc:cd:07:28:bd:b5:02:03: a7:81:8f:5b:3f:17:5e:44:40:d3:13:ad:47:4e:1b:31:1d:55: 32:27:97:15:89:f2:00:0e:b5:88:13:64:44:19:76:f5:f9:6f: 9b:96:b2:25:e8:56:1c:67:8f:48:cd:9f:ac:f9:1b:93:61:07: 73:f8:58:6c:9e:b7:ce:6b:c1:cd:5d:59:0c:37:b7:90:a9:a0: 0e:2f:24:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUwNjMwMTY0ODU0WhcNMjUwNzA3MTY0ODU0WjAYMRYwFAYD VQQDEw02ODYyYmZmNi0wNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKPN51sIErWJiO99hrQoHm8RQaNgj/8/VFRH1gtlCZylHJ5J9oEfb15C3aac 8AGNVREjvQducgNH9iWEDzMZa++EjqtoqILl9dhk6Fuj+kiKWiv2RxbdpWP6xWe+ EsIxEkKV4uWTwBifDocc0/aCoWyEXeIFBLICtvjn9JEFe/ZmymeebGuPRGJXOPTL Hf8ed8tJ4cLLiIX0TTXvkRd/Csc3v8xqmHvAM9LWjeH98c4n22iakYVawa28ABy4 0KhyZB0L+D8lVXXdpRbyVcm5x+1sMI1skh46/JLNvp9lODicFC98FD5kER2vAvt2 aKazk2ySj3LCHI0ajxeUl6MlnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVIjHlH Xb0kPGGc3nkJFQese/8WMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENkfgPxxTBPSWwk0zH+fWpDINxzQMIy3+lx0G3kXP5alXhidem9ys I/zmNYNgLdCVr5UVCWVyi+ow5BiqsC9i+95PBwR+dRdaMC0IhrVa1FU/ZCalGljf CGwxgvl4MzXvuRhx4nu+gsHFsGnyVRraa+ufqyZhq2PHpZ8OGZpXl2a8rcfkCzqN LOICZeKq2qBlVdVu43aZNQHI0fvquCzxZWCUtGQGZ0Dp2siZzM0HKL21AgOngY9b PxdeREDTE61HThsxHVUyJ5cVifIADrWIE2REGXb1+W+blrIl6FYcZ49IzZ+s+RuT YQdz+FhsnrfOa8HNXVkMN7eQqaAOLySU -----END CERTIFICATE-----Generated at Tue Jul 1 08:40:15 2025 by rpki-client