$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: YXHUaTZuTfLc/iiWo2VNZwV5SAoseySt/TTrskN0tcQ= Subject key identifier: 4D:24:1F:86:61:A8:F2:CE:8C:6A:AA:DD:C6:4E:FA:3E:F9:D9:9F:DB Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 0154 Signing time: Thu 03 Jul 2025 04:43:52 +0000 Manifest this update: Thu 03 Jul 2025 04:43:52 +0000 Manifest next update: Thu 10 Jul 2025 04:43:52 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: RCkclj+XKzgbwvDuMJSVFGSI3D5UWriRIFh1kZx6Osw=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Jul 3 04:43:52 2025 GMT Not After : Jul 10 04:43:52 2025 GMT Subject: CN=68660a88-5e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:c0:6b:6b:fd:53:79:15:7f:e1:17:ea:ab: e0:3b:b3:3d:8f:d2:83:44:10:f5:2e:3b:61:86:f2: b0:6c:25:c6:db:bb:64:ef:0e:92:5b:d4:92:62:46: 90:1f:aa:ee:85:98:7f:d4:6a:95:d0:2b:d8:f0:e8: 3d:c1:1b:4c:f7:b6:3f:67:bd:29:c3:12:70:eb:11: f9:90:c1:97:19:0b:dd:c5:f2:e8:f3:73:78:2a:ea: f6:28:94:bc:46:0b:c9:34:aa:a5:a8:54:a1:73:be: 38:70:df:25:d1:9a:5f:aa:61:9f:f9:88:fa:e2:b3: 17:58:36:e5:bc:b5:06:d6:4e:7a:d0:2c:f0:2f:b1: 2b:80:80:e4:3a:0a:bc:54:79:0f:f2:bc:9d:69:c4: c1:1f:39:e7:2c:10:16:b8:a7:48:1f:64:79:01:f0: 5f:d9:f6:dc:cd:80:cf:90:3a:53:62:fa:12:0e:9d: 1f:63:6a:90:83:52:3c:36:31:c4:8b:a6:cc:a8:fa: d0:14:92:ba:87:b5:22:f3:e3:d7:4c:41:77:fb:47: bc:95:8c:b7:60:4c:2b:e5:b2:d4:28:b1:a1:85:95: c5:fc:5c:0b:cf:35:d2:13:ac:a4:72:60:d2:bb:eb: 43:d4:96:ad:99:3f:c7:c5:5c:d2:83:aa:ee:ef:4b: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:24:1F:86:61:A8:F2:CE:8C:6A:AA:DD:C6:4E:FA:3E:F9:D9:9F:DB X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8a:c6:a7:e1:b4:11:e7:9d:61:87:b0:2f:24:21:08:1a:cf: b4:36:20:df:e9:99:bb:5a:ec:0a:c9:d3:dc:81:99:28:f6:18: 6d:40:bf:f4:e1:0b:0c:d3:1c:26:c8:77:22:4c:36:70:7a:c3: bd:bd:37:d0:a7:c8:c2:5e:d9:2c:b8:23:e9:08:45:35:74:c7: 04:60:bf:3e:ba:6e:f8:5c:68:cc:15:1e:5b:4f:e9:c4:a4:ad: f7:fc:f8:4f:32:29:8e:f2:72:9d:b6:b9:44:9f:f2:0e:26:d7: 11:0d:3b:a7:3f:5c:32:a0:f6:fa:b0:bc:c1:b2:0a:06:f2:aa: 7b:0d:13:64:c2:8f:8f:d5:4f:6c:00:5a:5c:af:5c:58:52:4e: 30:77:71:67:dd:71:4e:59:6d:c5:77:4f:3d:86:e1:4e:45:4e: af:57:dd:0e:fd:b7:07:10:ab:47:ed:6a:73:f2:6c:eb:7c:09: 21:c9:b0:2f:61:58:95:59:8e:b0:ea:eb:c5:9f:a2:23:d2:97: 4c:c9:58:7d:af:b6:22:84:48:3b:f0:b4:60:d8:6d:c0:07:1e: 39:13:04:4d:4a:e8:aa:03:df:12:9c:7b:60:be:6e:7d:40:53: 45:60:51:84:67:63:f1:83:e2:12:cd:71:ed:4a:db:94:d0:da: e9:7a:50:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUwNzAzMDQ0MzUyWhcNMjUwNzEwMDQ0MzUyWjAYMRYwFAYD VQQDEw02ODY2MGE4OC01ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5bAa2v9U3kVf+EX6qvgO7M9j9KDRBD1LjthhvKwbCXG27tk7w6SW9SSYkaQ H6ruhZh/1GqV0CvY8Og9wRtM97Y/Z70pwxJw6xH5kMGXGQvdxfLo83N4Kur2KJS8 RgvJNKqlqFShc744cN8l0ZpfqmGf+Yj64rMXWDblvLUG1k560CzwL7ErgIDkOgq8 VHkP8rydacTBHznnLBAWuKdIH2R5AfBf2fbczYDPkDpTYvoSDp0fY2qQg1I8NjHE i6bMqPrQFJK6h7Ui8+PXTEF3+0e8lYy3YEwr5bLUKLGhhZXF/FwLzzXSE6ykcmDS u+tD1JatmT/HxVzSg6ru70uMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0kH4Zh qPLOjGqq3cZO+j752Z/bMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5isan4bQR551hh7AvJCEIGs+0NiDf6Zm7WuwKydPcgZko9hhtQL/0 4QsM0xwmyHciTDZwesO9vTfQp8jCXtksuCPpCEU1dMcEYL8+um74XGjMFR5bT+nE pK33/PhPMimO8nKdtrlEn/IOJtcRDTunP1wyoPb6sLzBsgoG8qp7DRNkwo+P1U9s AFpcr1xYUk4wd3Fn3XFOWW3Fd089huFORU6vV90O/bcHEKtH7Wpz8mzrfAkhybAv YViVWY6w6uvFn6Ij0pdMyVh9r7YihEg78LRg2G3ABx45EwRNSuiqA98SnHtgvm59 QFNFYFGEZ2Pxg+ISzXHtStuU0NrpelCH -----END CERTIFICATE-----Generated at Thu Jul 3 10:14:13 2025 by rpki-client