$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: hqruSGGSnukeZmVWOAhTAAk9+gB8CykRpG4+3ZKeQ/s= Subject key identifier: 5D:75:DF:CD:F2:3E:EE:7C:1D:5D:E2:A1:6C:01:F5:A0:D9:9A:6E:CD Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: 01D1 Signing time: Sun 27 Jul 2025 03:08:29 +0000 Manifest this update: Sun 27 Jul 2025 03:08:29 +0000 Manifest next update: Sun 03 Aug 2025 03:08:29 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: GMOCvqIlJhkR4MqpM6+rcm3fxs+2PSdSpQ7p5Cus41M=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 1FbgogUKsuIfXEKaTsa4RV0e3CNtC1HQdrvDxgG3fiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Jul 27 03:08:29 2025 GMT Not After : Aug 3 03:08:29 2025 GMT Subject: CN=6885982d-01c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:4e:15:41:03:84:23:c8:01:b2:47:80:56: 1b:51:3b:9b:1b:fe:cc:78:de:84:b3:07:9e:67:3d: 48:ad:83:3f:fd:45:71:cd:21:c2:c1:27:45:e8:85: 04:d0:ba:a0:76:c3:69:f6:36:70:94:ad:40:5f:04: 67:bb:32:ce:dc:4d:54:a2:23:4d:6e:8e:2e:3e:72: a0:ab:55:4e:99:63:29:af:ee:5f:1d:7f:ea:15:4d: d3:f5:60:c9:fe:8b:e0:94:63:0e:65:8a:e8:0d:7e: 91:32:69:df:83:6c:c5:05:ed:bb:a8:1f:50:d6:5d: ea:42:de:7b:bd:38:40:65:15:ab:6d:13:39:20:c6: 92:6f:12:e0:77:ba:37:8d:3d:a1:6e:1b:56:37:99: 98:70:b6:22:4f:39:a5:1b:1a:d9:69:97:d0:ac:1f: bf:99:60:c0:1d:8c:8a:d5:76:f2:22:c8:7e:9d:a7: eb:f9:99:d8:a2:40:e9:1b:d1:56:c6:3c:f5:4b:0a: b4:59:d0:c1:6b:a6:6c:62:1d:04:42:af:e7:7a:cd: 56:43:87:02:34:51:c9:83:4a:8f:f1:32:e3:dd:f8: 67:c6:ad:35:3a:0c:0b:9f:c6:97:52:6a:91:21:81: 6f:c3:1e:dc:dd:b2:9c:48:9f:e4:f5:c4:ac:4b:b8: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:75:DF:CD:F2:3E:EE:7C:1D:5D:E2:A1:6C:01:F5:A0:D9:9A:6E:CD X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:db:cd:29:d2:24:10:2d:3b:0d:31:7a:dd:42:61:1f:a1:66: 51:86:74:1d:dd:f3:d8:c4:7f:39:6b:f7:23:f9:a1:e1:8b:d6: 70:f3:01:d4:d1:99:85:52:14:bc:88:ae:b2:3a:d9:68:74:d1: 10:f1:e9:68:7e:94:8d:df:5a:b8:32:b3:36:94:88:27:76:d8: e2:ca:8e:fc:3b:f7:9d:b3:50:1c:8f:d2:9f:95:a5:ee:69:22: 04:c9:a5:20:81:7e:3f:5d:64:47:77:07:92:2f:ac:61:28:e5: 98:7a:a8:9f:60:d4:f8:76:00:a0:7d:3c:36:9f:5d:14:68:26: 88:2c:a4:9b:22:df:5b:d8:94:50:bc:2e:70:b6:58:04:8c:bd: ec:f8:3e:dc:e3:98:52:09:04:53:a4:28:47:bb:03:3f:e4:a8: 37:49:6f:b6:17:ee:df:bb:f8:da:28:69:a2:fc:09:f2:70:d8: 9f:4c:54:06:45:70:ee:05:38:12:27:1e:2a:65:ba:26:13:c9: 41:6c:f0:e5:a6:f3:34:51:82:e9:75:de:6a:c2:8c:27:1b:75: 1a:81:aa:fb:47:6c:1f:a1:94:44:73:55:60:44:47:f1:de:2b: e8:01:b1:de:d1:96:bc:8b:29:c0:50:53:95:81:4b:a4:0d:84: d7:68:c9:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjUwNzI3MDMwODI5WhcNMjUwODAzMDMwODI5WjAYMRYwFAYD VQQDEw02ODg1OTgyZC0wMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA025OFUEDhCPIAbJHgFYbUTubG/7MeN6EsweeZz1IrYM//UVxzSHCwSdF6IUE 0LqgdsNp9jZwlK1AXwRnuzLO3E1UoiNNbo4uPnKgq1VOmWMpr+5fHX/qFU3T9WDJ /ovglGMOZYroDX6RMmnfg2zFBe27qB9Q1l3qQt57vThAZRWrbRM5IMaSbxLgd7o3 jT2hbhtWN5mYcLYiTzmlGxrZaZfQrB+/mWDAHYyK1XbyIsh+nafr+ZnYokDpG9FW xjz1Swq0WdDBa6ZsYh0EQq/nes1WQ4cCNFHJg0qP8TLj3fhnxq01OgwLn8aXUmqR IYFvwx7c3bKcSJ/k9cSsS7hURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF11383y Pu58HV3ioWwB9aDZmm7NMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ280p0iQQLTsNMXrdQmEfoWZRhnQd3fPYxH85a/cj+aHhi9Zw8wHU 0ZmFUhS8iK6yOtlodNEQ8elofpSN31q4MrM2lIgndtjiyo78O/eds1Acj9KflaXu aSIEyaUggX4/XWRHdweSL6xhKOWYeqifYNT4dgCgfTw2n10UaCaILKSbIt9b2JRQ vC5wtlgEjL3s+D7c45hSCQRTpChHuwM/5Kg3SW+2F+7fu/jaKGmi/AnycNifTFQG RXDuBTgSJx4qZbomE8lBbPDlpvM0UYLpdd5qwownG3Uagar7R2wfoZREc1VgREfx 3ivoAbHe0Za8iynAUFOVgUukDYTXaMlI -----END CERTIFICATE-----Generated at Sun Jul 27 09:21:44 2025 by rpki-client