$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json) Hash identifier: kKJ3FsYWrJnGk1p2NPKzjPmL0AKA3UGrlf6gr/yoiyc= Subject key identifier: 44:09:C4:05:17:30:1B:F2:7F:78:BD:30:96:55:CB:19:D1:38:D3:48 Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft Manifest number: 01A4 Signing time: Thu 03 Jul 2025 03:22:05 +0000 Manifest this update: Thu 03 Jul 2025 03:22:05 +0000 Manifest next update: Thu 10 Jul 2025 03:22:04 +0000 Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: 5HQXg3ns1sEr9499D1eYJQpCmQt/hdvNZd/MhFcukxk=) 2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Validity Not Before: Jul 3 03:22:05 2025 GMT Not After : Jul 10 03:22:04 2025 GMT Subject: CN=6865f75d-749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:80:c0:b3:46:ad:85:30:04:b6:51:64:bd: d3:df:05:3f:f8:9d:b1:a5:11:1c:6c:68:ce:f1:b2: 96:14:4b:cc:e1:7e:21:ed:a8:41:3a:50:a9:77:b5: fc:5b:60:e3:d6:e5:9c:18:a1:4e:f4:54:93:aa:91: e5:08:50:a4:1d:49:a4:04:d2:9f:0c:a2:48:ed:4c: 26:03:86:85:33:9b:56:8a:23:b1:b0:41:08:55:7a: ea:d5:83:b8:8d:fa:02:aa:5e:af:4d:dc:7a:b6:58: dd:cd:b2:56:8c:de:0f:a5:ee:e0:96:4d:0d:a3:24: 07:53:61:05:4f:00:12:a9:e4:b6:7e:72:1c:26:03: 5a:7b:fd:43:7e:52:67:99:6e:98:db:0d:1e:ac:ef: af:67:83:7b:70:ce:45:05:e3:a5:43:5e:03:86:62: 22:91:97:7d:3a:9c:9f:c9:ab:20:c1:77:f4:0b:c1: 69:31:f1:e8:92:9b:71:53:52:82:61:fe:d7:87:42: 45:61:f6:c4:5f:23:76:ac:e1:74:77:8c:85:f2:9e: 3b:99:c5:45:1b:3f:90:86:3e:8e:b8:93:bb:53:13: d3:65:cb:6d:9b:16:e5:f9:85:96:9d:6e:03:ff:7b: 29:bb:00:cb:32:1b:57:c2:35:5b:d3:5f:8c:73:ad: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:09:C4:05:17:30:1B:F2:7F:78:BD:30:96:55:CB:19:D1:38:D3:48 X509v3 Authority Key Identifier: keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fb:21:d8:9c:82:27:0d:52:3f:83:5e:b2:e6:90:1e:1e:9d: 3f:91:8e:e7:21:7e:a5:7b:30:25:87:48:4c:f9:b0:f2:33:08: c6:3e:01:ab:4c:10:b0:1b:85:7c:0d:7e:1a:37:d3:98:ca:3a: e3:a1:44:db:10:cd:e4:e8:36:f7:ba:93:cf:73:ec:b1:7d:80: e9:37:3b:dc:b8:91:90:50:d3:ec:bb:c2:0a:15:b6:3c:47:10: 57:e3:cd:dd:9e:88:e3:ec:00:00:f2:09:b3:77:ed:89:17:17: ee:62:de:0d:f5:73:ca:1f:3d:b4:b9:e7:1d:85:99:23:68:73: 09:c6:f3:91:b0:56:6b:4f:47:af:fb:f7:c4:06:d5:62:ed:0a: 2d:58:00:fa:52:25:fa:2e:67:74:fd:9f:03:22:97:e7:22:d1: dc:70:94:28:45:d6:2b:e4:10:f4:1a:78:14:38:3b:f8:3e:07: 61:e2:c0:4f:29:f4:c4:f5:65:95:e4:65:30:2a:af:b6:c3:47: 4f:d2:23:c1:32:ca:de:d1:d6:15:35:2f:19:27:de:11:a7:4d: 1f:de:3b:87:66:89:15:79:03:47:9c:61:a9:21:6c:fb:35:ee: e8:d8:d1:e1:74:35:77:b3:77:ae:93:59:b8:b8:01:44:22:6f: 66:35:d9:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBREUxMTAvBgNVBAUTKEE2MEY4REE0NzhCRDc3MkY0RjJCM0U0Qzc5RDVDMTgx RERFNTY4OTMwHhcNMjUwNzAzMDMyMjA1WhcNMjUwNzEwMDMyMjA0WjAYMRYwFAYD VQQDEw02ODY1Zjc1ZC03NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTuAwLNGrYUwBLZRZL3T3wU/+J2xpREcbGjO8bKWFEvM4X4h7ahBOlCpd7X8 W2Dj1uWcGKFO9FSTqpHlCFCkHUmkBNKfDKJI7UwmA4aFM5tWiiOxsEEIVXrq1YO4 jfoCql6vTdx6tljdzbJWjN4Ppe7glk0NoyQHU2EFTwASqeS2fnIcJgNae/1DflJn mW6Y2w0erO+vZ4N7cM5FBeOlQ14DhmIikZd9OpyfyasgwXf0C8FpMfHokptxU1KC Yf7Xh0JFYfbEXyN2rOF0d4yF8p47mcVFGz+Qhj6OuJO7UxPTZcttmxbl+YWWnW4D /3spuwDLMhtXwjVb01+Mc60FOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQJxAUX MBvyf3i9MJZVyxnRONNIMB8GA1UdIwQYMBaAFKYPjaR4vXcvTys+THnVwYHd5WiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREFERS83MDk4RjREQ0Qy OTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5OVBLejVNZWRYQmdkM2xh Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnLU5wSGk5ZHk5UEt6NU1lZFhCZ2QzbGFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REFERS83MDk4RjREQ0QyOTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5 OVBLejVNZWRYQmdkM2xhSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw+yHYnIInDVI/g16y5pAeHp0/kY7nIX6lezAlh0hM+bDyMwjGPgGr TBCwG4V8DX4aN9OYyjrjoUTbEM3k6Db3upPPc+yxfYDpNzvcuJGQUNPsu8IKFbY8 RxBX483dnojj7AAA8gmzd+2JFxfuYt4N9XPKHz20uecdhZkjaHMJxvORsFZrT0ev +/fEBtVi7QotWAD6UiX6Lmd0/Z8DIpfnItHccJQoRdYr5BD0GngUODv4Pgdh4sBP KfTE9WWV5GUwKq+2w0dP0iPBMsre0dYVNS8ZJ94Rp00f3juHZokVeQNHnGGpIWz7 Ne7o2NHhdDV3s3euk1m4uAFEIm9mNdmc -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:24 2025 by rpki-client