$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json) Hash identifier: Fx18kmcsrWWmvr91u0qZynaIs/6wiFk1DnSw0zOUUd4= Subject key identifier: 7A:1B:05:71:E9:12:A5:A4:50:9F:73:4C:44:D4:17:5C:40:4E:B2:EE Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft Manifest number: D0 Signing time: Sat 05 Apr 2025 04:59:37 +0000 Manifest this update: Sat 05 Apr 2025 04:59:37 +0000 Manifest next update: Sat 12 Apr 2025 04:59:37 +0000 Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: nkNEpNuSSsRi661UvKYq/eoWnI5Rz2IOHMMZLl8pdLE=) 2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=) 3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010 Validity Not Before: Apr 5 04:59:37 2025 GMT Not After : Apr 12 04:59:37 2025 GMT Subject: CN=67f0b8b9-f14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fe:d0:58:a0:83:26:62:8b:c2:1e:7e:39:78: bc:d1:de:98:0a:07:dc:41:aa:9c:78:7d:f6:4f:f6: 41:2d:fa:a0:61:5b:2c:4d:fd:6d:21:43:7e:84:87: 5d:4d:44:18:32:a5:b8:26:3e:da:c0:be:41:6a:83: 8d:c3:b7:af:84:a5:19:1b:95:ef:d7:62:59:48:97: 12:9a:76:f8:63:b7:18:a1:46:b1:40:62:2a:60:6f: 12:56:c0:5d:08:06:1c:f8:ec:c1:11:d6:4a:47:fd: 52:d4:a6:64:3a:45:e4:16:f1:fd:91:80:d5:34:2b: cf:9a:c6:8b:8d:d3:f1:08:65:2c:22:31:1f:75:be: 07:ca:a2:8f:54:d4:53:42:4f:b5:64:4c:33:d3:59: 24:29:b0:e0:78:2f:dd:f7:d9:5b:a2:a8:c2:13:c3: 85:d3:99:bf:f3:fb:4f:f2:42:73:be:92:aa:09:01: ad:a0:fd:10:76:a0:e9:51:bc:3c:89:d4:95:c3:c6: d2:6d:75:8e:49:79:90:36:48:59:5a:ba:3f:70:86: 0b:14:bf:89:eb:e5:bd:46:be:0c:82:24:15:01:d6: 48:98:70:af:98:ef:48:11:ca:d6:93:53:9e:00:17: 66:c1:3d:01:ee:a2:48:42:58:de:e4:58:5e:ef:75: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1B:05:71:E9:12:A5:A4:50:9F:73:4C:44:D4:17:5C:40:4E:B2:EE X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:9d:36:61:ea:d6:e2:34:48:46:86:fd:3c:95:5b:dd:f3: fd:98:7d:81:5a:3a:e4:6c:a2:c2:24:1f:4c:bb:2e:56:9b:39: 0c:a9:33:3c:50:eb:4c:f7:9e:fc:74:42:01:e2:0f:5c:b1:63: 13:b1:7a:e4:60:45:9f:19:b9:0e:bd:ba:64:0b:eb:06:38:34: 45:2b:84:89:81:5c:c1:eb:3b:0a:b6:74:5a:d4:d6:5b:96:c3: e9:9e:58:f6:ed:86:df:d6:37:3e:39:79:e3:34:0a:18:36:3a: a2:86:13:7c:89:26:1d:83:a8:16:82:ae:60:7a:df:d1:f4:49: 60:53:27:02:59:d3:e4:c3:c4:ed:af:ff:65:ba:2e:f3:8a:ff: 2d:f2:b9:5a:e0:1b:7c:1a:f5:a3:5c:64:87:bb:32:45:25:db: 48:bf:6f:87:b6:f5:cc:4a:6c:50:2e:e6:6f:98:4f:d6:11:b6: e2:fe:df:33:1a:15:f0:ce:2a:b0:f9:e2:7b:cc:cf:a5:ce:b5: 96:a0:df:d2:f2:75:78:0c:fc:c7:89:9b:79:47:fe:a8:d2:ca: 97:70:ae:a5:0b:54:f0:ac:13:72:ec:1d:88:53:3d:67:47:ad: 5e:f9:38:d5:57:15:ff:79:78:b0:65:49:4b:b7:84:f4:5e:10: 42:d3:5a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3 OTI1QkVGQ0YwHhcNMjUwNDA1MDQ1OTM3WhcNMjUwNDEyMDQ1OTM3WjAYMRYwFAYD VQQDEw02N2YwYjhiOS1mMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/7QWKCDJmKLwh5+OXi80d6YCgfcQaqceH32T/ZBLfqgYVssTf1tIUN+hIdd TUQYMqW4Jj7awL5BaoONw7evhKUZG5Xv12JZSJcSmnb4Y7cYoUaxQGIqYG8SVsBd CAYc+OzBEdZKR/1S1KZkOkXkFvH9kYDVNCvPmsaLjdPxCGUsIjEfdb4HyqKPVNRT Qk+1ZEwz01kkKbDgeC/d99lboqjCE8OF05m/8/tP8kJzvpKqCQGtoP0QdqDpUbw8 idSVw8bSbXWOSXmQNkhZWro/cIYLFL+J6+W9Rr4MgiQVAdZImHCvmO9IEcrWk1Oe ABdmwT0B7qJIQlje5Fhe73Vl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHobBXHp EqWkUJ9zTETUF1xATrLuMB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1 M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3 ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi cjVYSXd2VmM3RUY1SmI3ODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUxJ02YerW4jRIRob9PJVb3fP9mH2BWjrkbKLCJB9Muy5WmzkMqTM8 UOtM9578dEIB4g9csWMTsXrkYEWfGbkOvbpkC+sGODRFK4SJgVzB6zsKtnRa1NZb lsPpnlj27Ybf1jc+OXnjNAoYNjqihhN8iSYdg6gWgq5get/R9ElgUycCWdPkw8Tt r/9lui7ziv8t8rla4Bt8GvWjXGSHuzJFJdtIv2+HtvXMSmxQLuZvmE/WEbbi/t8z GhXwziqw+eJ7zM+lzrWWoN/S8nV4DPzHiZt5R/6o0sqXcK6lC1TwrBNy7B2IUz1n R61e+TjVVxX/eXiwZUlLt4T0XhBC01r4 -----END CERTIFICATE-----Generated at Sun Apr 6 00:18:37 2025 by rpki-client