$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: 50GnGuktiNn/PuTLMRlSkDYZXFOJnx71tNKIB2oX8MU= Subject key identifier: 3C:BA:89:BB:31:A0:25:4D:52:2A:C5:71:8F:4D:CD:7D:FF:E2:AD:3D Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 015C Signing time: Sat 19 Jul 2025 04:44:23 +0000 Manifest this update: Sat 19 Jul 2025 04:44:23 +0000 Manifest next update: Sat 26 Jul 2025 04:44:23 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: tgrqAimEDczWxaLySUId0qxu3ZMeYMXm+h6MSM92N4I=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Jul 19 04:44:23 2025 GMT Not After : Jul 26 04:44:23 2025 GMT Subject: CN=687b22a7-8542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:46:d0:ff:f9:e9:67:13:8f:b7:1e:63:ed: c2:90:cb:84:b2:d2:03:13:a7:0a:82:e2:d6:12:21: b9:73:92:7e:0f:a0:20:35:8c:be:8f:97:62:5e:5c: f4:6e:34:c7:b7:3f:96:ca:5c:79:3a:e9:d7:a5:16: 9e:dc:f7:5f:7c:d0:ec:ad:43:76:0f:0b:a7:eb:4a: d9:78:a5:35:64:03:fe:32:74:85:19:ea:6d:d0:52: 87:1d:73:91:94:f9:e5:b6:88:b3:30:3c:91:65:98: f2:2c:36:cc:1b:0f:24:14:c1:9f:02:94:93:98:3e: cd:ce:d4:de:0e:16:5b:94:25:2a:14:43:e2:a6:8a: fa:70:0f:da:c2:cb:23:f1:88:9e:dd:0f:31:6e:fb: 2a:a1:68:b5:5c:e3:73:d3:4b:b7:5a:ce:a1:67:81: e5:76:1e:69:e6:e0:db:36:f1:ad:23:d0:3e:89:34: 65:c8:87:9f:60:0b:27:b7:6c:48:de:82:0a:2d:00: 0e:0e:d5:1d:78:c7:88:fd:17:3b:5c:e7:13:78:c4: 71:32:75:16:ba:21:6a:c2:0b:c6:34:59:82:8f:c8: 93:11:1d:a4:a0:95:19:79:e0:05:3d:2f:ce:49:53: 7f:90:aa:9c:11:bb:87:d2:f0:54:81:51:d6:49:ec: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BA:89:BB:31:A0:25:4D:52:2A:C5:71:8F:4D:CD:7D:FF:E2:AD:3D X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1a:e4:4c:a5:c0:50:1d:7c:45:26:b1:04:03:2c:60:8c:dd: 1e:f2:94:e6:1f:bf:b9:f9:3d:88:92:a0:9e:b2:64:8b:73:b4: af:1b:82:cd:b3:c2:fd:13:e5:59:94:d5:80:5b:fc:f8:0b:79: 7f:99:d6:08:ab:e1:b6:dc:b0:14:01:d3:0d:ca:86:29:5c:12: 57:1a:3c:8d:ba:ff:ea:42:84:dd:57:a8:17:67:8a:ac:f7:94: b9:78:a2:fa:04:cb:75:75:20:2b:5a:4e:ba:9b:da:07:5e:bd: 36:cf:fa:ba:27:06:3d:5b:8b:1f:3a:1b:1a:ab:e4:e8:58:5b: 6a:74:e4:7d:00:f2:d5:58:c6:8e:16:93:90:b6:1b:81:9a:8b: 70:78:f2:45:57:1b:db:02:29:a6:ea:48:27:3a:4c:fc:ae:4d: ae:68:04:e7:51:ed:9e:80:8e:8b:24:62:85:f8:7c:00:81:92: 53:ca:a7:e7:19:ef:92:80:f1:6d:92:5e:cd:39:43:78:90:70: 46:db:eb:05:c0:cf:89:c7:a6:4d:4b:37:53:88:4e:e7:1c:0c: 08:1e:f2:55:fe:a7:39:ab:a0:e2:f5:d7:67:e4:09:08:4b:36: e7:eb:1c:84:08:0d:cb:7d:fb:07:65:8a:79:47:64:9b:5b:c2: 94:31:d6:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUwNzE5MDQ0NDIzWhcNMjUwNzI2MDQ0NDIzWjAYMRYwFAYD VQQDEw02ODdiMjJhNy04NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh5G0P/56WcTj7ceY+3CkMuEstIDE6cKguLWEiG5c5J+D6AgNYy+j5diXlz0 bjTHtz+Wylx5OunXpRae3PdffNDsrUN2Dwun60rZeKU1ZAP+MnSFGept0FKHHXOR lPnltoizMDyRZZjyLDbMGw8kFMGfApSTmD7NztTeDhZblCUqFEPipor6cA/awssj 8Yie3Q8xbvsqoWi1XONz00u3Ws6hZ4Hldh5p5uDbNvGtI9A+iTRlyIefYAsnt2xI 3oIKLQAODtUdeMeI/Rc7XOcTeMRxMnUWuiFqwgvGNFmCj8iTER2koJUZeeAFPS/O SVN/kKqcEbuH0vBUgVHWSewQiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy6ibsx oCVNUirFcY9NzX3/4q09MB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5GuRMpcBQHXxFJrEEAyxgjN0e8pTmH7+5+T2IkqCesmSLc7SvG4LN s8L9E+VZlNWAW/z4C3l/mdYIq+G23LAUAdMNyoYpXBJXGjyNuv/qQoTdV6gXZ4qs 95S5eKL6BMt1dSArWk66m9oHXr02z/q6JwY9W4sfOhsaq+ToWFtqdOR9APLVWMaO FpOQthuBmotwePJFVxvbAimm6kgnOkz8rk2uaATnUe2egI6LJGKF+HwAgZJTyqfn Ge+SgPFtkl7NOUN4kHBG2+sFwM+Jx6ZNSzdTiE7nHAwIHvJV/qc5q6Di9ddn5AkI Szbn6xyECA3LffsHZYp5R2SbW8KUMdbt -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:31 2025 by rpki-client