$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: uzkPMbbcD7zJ36vbDd7BviM1AnVzFeqXSCBcDo9GI1E= Subject key identifier: 79:D8:41:3E:6D:30:99:E8:55:E5:E3:8A:AD:00:EB:82:B6:AB:01:DF Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: BC Signing time: Thu 03 Jul 2025 06:06:55 +0000 Manifest this update: Thu 03 Jul 2025 06:06:55 +0000 Manifest next update: Thu 10 Jul 2025 06:06:55 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: SHV67DRyT4RBvSa4Zk1aUOcxtcdkUv7jhZkd64RTKDU=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: Ls+MqXGV/peb18S4iXh7J0QZNFdZuOz4J59MYeTRfFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Jul 3 06:06:55 2025 GMT Not After : Jul 10 06:06:55 2025 GMT Subject: CN=68661dff-7e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:08:d0:f9:d9:e4:ce:82:64:a9:7c:85:1f: 8e:de:27:1d:3b:e8:2d:cb:6d:d7:b3:0c:e7:2b:51: e7:21:62:93:c3:18:d5:5d:d4:d6:6f:06:23:2a:f4: 8b:2d:92:6a:0b:f9:b1:09:d1:ec:9c:8d:f1:a2:f0: d8:da:b8:da:16:53:95:9c:74:7a:e6:22:0e:52:df: a0:19:8f:1c:40:a7:3e:e6:0b:dd:62:36:8c:49:b2: 28:3b:73:05:9a:4d:2b:c3:10:a5:0c:de:85:15:4c: f8:54:05:63:fc:4a:f7:ef:3f:b7:a9:87:a9:82:2b: 5f:fe:62:ac:00:b3:c3:6f:18:0e:eb:de:ac:ee:e7: dd:44:51:d1:30:15:60:cb:16:61:34:d5:7d:8c:29: cc:82:17:93:d1:24:e7:d4:25:07:84:d3:73:84:b0: 8a:55:92:a4:8a:36:c6:7c:d0:33:51:5b:75:9d:60: 48:40:fc:5d:7e:06:06:ab:87:c4:f1:4e:74:a0:7a: ef:74:84:9f:58:0b:18:c8:cb:62:f3:6a:8d:38:d4: 5d:df:90:3b:33:bb:fb:52:b7:2a:2e:65:df:27:4f: f1:f2:5a:bb:9e:6a:e9:61:02:fe:e7:02:c4:78:17: 3d:d7:07:0b:6a:6b:b1:d4:96:eb:0a:3a:3c:4f:88: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:41:3E:6D:30:99:E8:55:E5:E3:8A:AD:00:EB:82:B6:AB:01:DF X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:65:e3:a7:6d:d3:92:28:63:75:03:b0:1d:2e:25:04:37:bd: 4c:50:33:08:dd:c6:28:b8:2f:79:51:85:87:a6:46:fd:6e:fd: 98:50:f3:9a:9a:ef:8f:a1:26:3a:25:5b:5c:f2:72:91:99:58: 4c:a8:a4:7d:94:c0:c0:24:80:a0:45:94:5b:48:38:d9:ee:0f: 52:f3:39:30:92:f6:71:4e:c6:3b:95:89:65:20:6d:54:00:f7: 71:86:5b:84:c4:0e:30:6f:15:53:2a:0c:63:4f:ad:62:63:13: 38:fe:73:36:3a:c2:53:10:12:23:63:db:76:9a:1d:f7:c5:fc: 0d:f3:0a:70:81:0e:26:39:c1:c3:77:e4:5c:c6:62:19:32:dd: 46:80:c8:6d:eb:d4:86:b2:fe:29:e8:a8:06:41:70:3a:54:d6: 7b:31:ca:fe:1c:e0:c1:68:0c:01:b8:da:ff:0d:e6:c7:64:d0: 1c:fd:d4:a6:51:54:ec:2f:49:5a:7a:3b:f3:ed:b2:8b:73:8e: e0:89:d8:d6:3d:d4:31:87:02:03:2f:21:0b:5f:55:9c:57:29: c2:71:5c:26:bc:eb:a6:00:c0:e1:f3:49:bc:66:2b:8a:7c:38: 7b:f5:d6:88:60:22:a1:a2:0d:7a:04:42:81:d3:9d:e1:87:df: 46:5d:db:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUwNzAzMDYwNjU1WhcNMjUwNzEwMDYwNjU1WjAYMRYwFAYD VQQDEw02ODY2MWRmZi03ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25sI0PnZ5M6CZKl8hR+O3icdO+gty23XswznK1HnIWKTwxjVXdTWbwYjKvSL LZJqC/mxCdHsnI3xovDY2rjaFlOVnHR65iIOUt+gGY8cQKc+5gvdYjaMSbIoO3MF mk0rwxClDN6FFUz4VAVj/Er37z+3qYepgitf/mKsALPDbxgO696s7ufdRFHRMBVg yxZhNNV9jCnMgheT0STn1CUHhNNzhLCKVZKkijbGfNAzUVt1nWBIQPxdfgYGq4fE 8U50oHrvdISfWAsYyMti82qNONRd35A7M7v7UrcqLmXfJ0/x8lq7nmrpYQL+5wLE eBc91wcLamux1JbrCjo8T4ifoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnYQT5t MJnoVeXjiq0A64K2qwHfMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEZeOnbdOSKGN1A7AdLiUEN71MUDMI3cYouC95UYWHpkb9bv2YUPOa mu+PoSY6JVtc8nKRmVhMqKR9lMDAJICgRZRbSDjZ7g9S8zkwkvZxTsY7lYllIG1U APdxhluExA4wbxVTKgxjT61iYxM4/nM2OsJTEBIjY9t2mh33xfwN8wpwgQ4mOcHD d+RcxmIZMt1GgMht69SGsv4p6KgGQXA6VNZ7Mcr+HODBaAwBuNr/DebHZNAc/dSm UVTsL0laejvz7bKLc47gidjWPdQxhwIDLyELX1WcVynCcVwmvOumAMDh80m8ZiuK fDh79daIYCKhog16BEKB053hh99GXdtU -----END CERTIFICATE-----Generated at Thu Jul 3 18:08:49 2025 by rpki-client