$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: +NueN7ClSZrpt0NEGwOecxrpM7QB7lFOlbhkHD259S4= Subject key identifier: AF:0D:D1:4F:A8:C9:B6:CD:F9:63:DE:69:67:DE:6B:71:A5:3F:D4:51 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01EB Signing time: Mon 21 Jul 2025 02:39:49 +0000 Manifest this update: Mon 21 Jul 2025 02:39:49 +0000 Manifest next update: Mon 28 Jul 2025 02:39:49 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: 9jx4gHwVaMe31b2YOxFYC17CVYi/l0VxL+x1RCU9cFE=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Jul 21 02:39:49 2025 GMT Not After : Jul 28 02:39:49 2025 GMT Subject: CN=687da875-1b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:9d:70:bf:a6:d6:ee:2f:d1:d8:be:1a:f2: 4b:63:ab:ff:0c:16:e0:eb:a5:d5:18:3e:50:61:c4: 61:3e:9e:5b:2a:f5:f8:2a:27:73:81:bf:b4:d7:23: b5:90:8d:f9:ac:d9:a1:af:a2:6c:37:de:25:d0:ca: 4c:0e:07:67:d8:fe:e0:76:0c:34:60:f1:57:06:75: a3:92:50:a3:7e:97:92:f4:af:e2:0e:b5:0c:0c:e3: 92:22:1c:5c:38:50:cb:dc:e4:50:42:0f:a2:3f:8b: b1:45:bc:f1:47:f3:13:a0:cc:f0:76:ac:6c:7b:b4: ac:83:0c:43:6c:7b:51:c7:ce:af:40:f7:f5:dc:ad: 0a:87:28:94:0c:bf:1f:d0:6b:d8:b3:1b:1a:4d:c0: 8d:73:77:3d:f2:dd:c4:3e:e7:db:26:66:b1:a7:a4: e5:cc:c7:68:39:86:98:71:48:ff:f7:2f:93:09:1e: 5c:23:1a:cc:04:36:bc:04:4b:03:08:3e:db:fa:b2: e1:f3:3f:94:aa:82:64:ac:fc:f2:d1:1c:78:c6:3d: 90:9d:c0:fb:57:b0:74:0e:71:77:98:c3:7f:9c:3f: b7:3e:92:5a:09:8b:5f:0e:02:2b:89:1a:67:ac:11: 22:7c:c8:92:a0:75:38:c8:a7:a6:f9:3b:c8:7b:65: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0D:D1:4F:A8:C9:B6:CD:F9:63:DE:69:67:DE:6B:71:A5:3F:D4:51 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c9:0f:79:09:34:b4:d3:a9:84:ed:d2:f7:ea:08:28:77:65: 5f:3f:78:4e:f6:2e:d4:03:01:03:9d:e6:56:a7:a9:8e:3d:2f: 54:b6:19:b4:f6:54:6b:db:48:d6:92:0e:84:a1:da:91:5e:99: 0e:8a:db:bd:cc:51:e0:0d:35:be:7a:03:bc:3e:2c:23:0f:f8: 16:19:67:5c:b3:98:55:96:ea:4a:33:6b:48:ff:00:fe:ea:82: 92:2a:ef:a7:92:31:2b:50:71:4d:51:7b:53:a0:97:7c:92:b0: 84:7b:17:2c:4c:94:2f:4f:6b:de:db:ea:92:e5:14:76:2e:c7: 3a:98:be:9a:cf:32:8c:de:eb:be:38:78:fd:74:ef:ba:82:75: 38:3d:34:f8:fd:89:db:b0:75:65:4e:bb:14:a2:bf:fb:f4:6f: 03:86:2d:c4:42:45:b5:84:12:a0:f2:80:98:d4:b1:97:73:09: 7b:75:c0:b0:38:86:66:2d:d6:49:0a:e4:c4:7a:0b:e1:f8:b7: 19:df:de:6a:11:d1:ab:fd:32:2a:7d:79:69:01:b1:b9:b6:2f: e7:ba:7b:8a:50:42:c6:f3:25:3f:af:de:6f:65:7f:53:22:4a: 31:0a:64:f1:75:c1:2b:6c:39:d5:e6:62:76:7b:5c:db:b8:36: 74:9c:26:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNzIxMDIzOTQ5WhcNMjUwNzI4MDIzOTQ5WjAYMRYwFAYD VQQDEw02ODdkYTg3NS0xYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ISdcL+m1u4v0di+GvJLY6v/DBbg66XVGD5QYcRhPp5bKvX4Kidzgb+01yO1 kI35rNmhr6JsN94l0MpMDgdn2P7gdgw0YPFXBnWjklCjfpeS9K/iDrUMDOOSIhxc OFDL3ORQQg+iP4uxRbzxR/MToMzwdqxse7SsgwxDbHtRx86vQPf13K0KhyiUDL8f 0GvYsxsaTcCNc3c98t3EPufbJmaxp6TlzMdoOYaYcUj/9y+TCR5cIxrMBDa8BEsD CD7b+rLh8z+UqoJkrPzy0Rx4xj2QncD7V7B0DnF3mMN/nD+3PpJaCYtfDgIriRpn rBEifMiSoHU4yKem+TvIe2VLCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8N0U+o ybbN+WPeaWfea3GlP9RRMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJyQ95CTS006mE7dL36ggod2VfP3hO9i7UAwEDneZWp6mOPS9Uthm0 9lRr20jWkg6EodqRXpkOitu9zFHgDTW+egO8PiwjD/gWGWdcs5hVlupKM2tI/wD+ 6oKSKu+nkjErUHFNUXtToJd8krCEexcsTJQvT2ve2+qS5RR2Lsc6mL6azzKM3uu+ OHj9dO+6gnU4PTT4/YnbsHVlTrsUor/79G8Dhi3EQkW1hBKg8oCY1LGXcwl7dcCw OIZmLdZJCuTEegvh+LcZ395qEdGr/TIqfXlpAbG5ti/nunuKUELG8yU/r95vZX9T IkoxCmTxdcErbDnV5mJ2e1zbuDZ0nCZz -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:46 2025 by rpki-client