$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: V5ZCzhA0oqmMpWwLO9ZjD0UvHhhhW4PWR5Gc/flmw6s= Subject key identifier: C2:7E:7E:B3:10:E4:F6:B1:23:1D:F3:4A:3D:B9:5D:F5:A8:39:FF:54 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: C5 Signing time: Mon 21 Jul 2025 05:58:28 +0000 Manifest this update: Mon 21 Jul 2025 05:58:28 +0000 Manifest next update: Mon 28 Jul 2025 05:58:27 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: 7Mf2Wx9zqRhmhnaIZa4tQ7He1LH1+cZg0DU+oDfeb2Q=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: Ls+MqXGV/peb18S4iXh7J0QZNFdZuOz4J59MYeTRfFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Jul 21 05:58:28 2025 GMT Not After : Jul 28 05:58:27 2025 GMT Subject: CN=687dd704-ad03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:1c:c6:68:79:6e:ef:a7:3b:b5:0e:5b:09: 15:94:ca:40:ba:43:bb:2b:ca:49:02:8a:d2:16:d1: 28:d6:7f:27:ba:c2:64:70:f1:4b:56:3f:59:41:e9: ac:90:30:6d:ea:98:42:61:e8:8b:dd:7b:51:1b:dd: 36:a7:46:24:e6:53:9b:a7:81:de:2f:dc:9b:e5:93: 7c:d3:d0:85:71:6d:17:35:57:fa:b2:2c:d4:ae:1c: 77:f0:ec:39:40:7b:4e:b6:90:81:c9:7a:f7:8b:1c: df:ee:88:a4:86:c6:f7:d0:c7:1a:fe:4c:ac:eb:6d: 2a:4e:70:eb:37:2d:bc:8d:3c:5e:90:b8:78:e6:a5: d6:4b:52:36:af:b5:98:31:ef:7e:1f:ae:b7:1b:24: e9:d7:4b:72:97:59:c7:37:51:3b:a6:5a:52:22:86: 6b:15:80:f4:f8:7b:d9:a8:b1:0b:f2:65:52:a0:f0: 0c:18:13:16:26:7c:d8:ee:b2:a1:ca:56:8e:6b:b4: 88:08:5f:76:07:53:88:3c:f5:99:8e:83:78:fa:71: d7:36:79:70:43:0a:99:e3:c5:e2:94:fa:ed:5b:ae: 6d:83:bd:5d:bf:16:9e:06:e1:df:f8:e5:bc:f4:4e: 82:08:b4:f8:c7:c2:25:45:39:ae:48:8f:16:ec:71: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:7E:B3:10:E4:F6:B1:23:1D:F3:4A:3D:B9:5D:F5:A8:39:FF:54 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:62:90:c0:0f:46:80:35:6c:ff:29:68:68:78:ef:1b:99:51: 9b:78:8a:3f:ae:ca:e2:63:85:6b:ad:ec:ba:31:55:a2:76:3d: 6e:99:70:b6:1e:e9:74:14:12:26:48:ce:98:75:1e:97:eb:2e: d7:fe:0a:d9:af:d1:75:35:03:b6:b1:08:09:4f:87:8e:7a:7e: 29:f6:26:f2:28:33:23:ad:ea:14:21:98:9e:c5:0c:35:e9:ca: f1:c5:10:60:95:31:d9:03:f6:37:9a:69:e8:7a:34:d9:cc:be: 04:8b:f3:f5:02:35:3e:c2:5e:6c:87:69:72:3c:82:db:0c:16: 9f:61:fa:f5:f1:b6:05:d3:38:b0:60:2e:9a:89:52:85:07:2d: 3c:37:6e:5d:fc:3e:d1:88:54:c9:4f:ed:6d:98:7e:a1:dd:b0: 48:8e:a2:45:0d:a6:e7:09:8c:ce:13:8f:cb:a8:ce:99:f1:54: 0e:c2:48:13:d4:3f:05:b5:00:de:59:a0:37:f6:2c:0d:17:da: 03:f5:4e:25:eb:6e:c1:eb:e0:00:74:23:81:22:97:78:a2:73: 15:bc:d5:60:64:45:65:49:94:7d:02:ff:7e:25:c7:27:95:d3: b6:05:c3:8e:84:4f:d7:97:0a:10:a0:d9:90:81:92:5c:c9:b1: 2c:09:32:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUwNzIxMDU1ODI4WhcNMjUwNzI4MDU1ODI3WjAYMRYwFAYD VQQDEw02ODdkZDcwNC1hZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjUcxmh5bu+nO7UOWwkVlMpAukO7K8pJAorSFtEo1n8nusJkcPFLVj9ZQems kDBt6phCYeiL3XtRG902p0Yk5lObp4HeL9yb5ZN809CFcW0XNVf6sizUrhx38Ow5 QHtOtpCByXr3ixzf7oikhsb30Mca/kys620qTnDrNy28jTxekLh45qXWS1I2r7WY Me9+H663GyTp10tyl1nHN1E7plpSIoZrFYD0+HvZqLEL8mVSoPAMGBMWJnzY7rKh ylaOa7SICF92B1OIPPWZjoN4+nHXNnlwQwqZ48XilPrtW65tg71dvxaeBuHf+OW8 9E6CCLT4x8IlRTmuSI8W7HHnwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ+frMQ 5PaxIx3zSj25XfWoOf9UMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLYpDAD0aANWz/KWhoeO8bmVGbeIo/rsriY4Vrrey6MVWidj1umXC2 Hul0FBImSM6YdR6X6y7X/grZr9F1NQO2sQgJT4eOen4p9ibyKDMjreoUIZiexQw1 6crxxRBglTHZA/Y3mmnoejTZzL4Ei/P1AjU+wl5sh2lyPILbDBafYfr18bYF0ziw YC6aiVKFBy08N25d/D7RiFTJT+1tmH6h3bBIjqJFDabnCYzOE4/LqM6Z8VQOwkgT 1D8FtQDeWaA39iwNF9oD9U4l627B6+AAdCOBIpd4onMVvNVgZEVlSZR9Av9+Jccn ldO2BcOOhE/XlwoQoNmQgZJcybEsCTJZ -----END CERTIFICATE-----Generated at Mon Jul 21 13:23:50 2025 by rpki-client