$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: NI3CD0ba3GH6EDi11GUPDlP6hx1ycI7oyN4VrlErinc= Subject key identifier: 51:A0:2E:29:72:43:17:6E:97:39:7D:5F:58:0D:69:84:4F:13:40:CE Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: 01ED Signing time: Fri 19 Sep 2025 03:08:07 +0000 Manifest this update: Fri 19 Sep 2025 03:08:06 +0000 Manifest next update: Fri 26 Sep 2025 03:08:06 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: qw7208fLH4GLsLYCT/jHGY2m/gKmkphXcvbUTKV6mr4=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 1FbgogUKsuIfXEKaTsa4RV0e3CNtC1HQdrvDxgG3fiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Sep 19 03:08:06 2025 GMT Not After : Sep 26 03:08:06 2025 GMT Subject: CN=68ccc917-401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:89:ca:b6:48:fb:19:7a:ea:27:fb:3e:55: ed:27:1c:27:a7:80:11:f9:51:16:e0:da:f1:fc:16: cd:e1:cb:49:37:06:fc:f4:d4:50:66:46:e8:c4:fe: d1:36:42:34:c7:d0:55:6b:95:cd:37:12:70:f2:7e: 1e:d4:5a:44:1a:20:09:b0:23:f2:c4:34:57:f0:8b: ac:51:c5:3f:45:91:f0:52:b2:46:73:86:de:83:3e: bc:48:e6:ce:cb:50:05:12:98:09:0f:64:f9:c3:cd: 08:55:93:58:f4:72:a8:0c:28:7e:80:81:0a:63:a8: fc:67:7c:e8:b2:6d:de:e8:f9:3c:ba:d9:a6:81:6d: e7:df:fd:88:dc:89:a6:5c:a5:e3:52:75:e3:89:38: 78:1c:9f:1b:86:50:0b:25:ce:6a:e6:6e:07:25:17: b3:61:b2:1f:ae:88:38:fa:f6:dc:21:9a:33:b3:f8: a7:88:95:cb:3c:53:81:1f:e9:aa:14:47:f6:ee:c2: bc:9e:59:61:4a:1f:ca:c9:37:c7:ae:32:d7:bb:52: 97:4b:f6:3c:90:6f:fc:0f:6e:46:8f:5d:31:db:ab: 73:98:26:5c:73:65:fd:57:0f:ec:4e:e8:d0:3f:6e: 25:9e:7b:2a:22:3b:a4:cd:58:27:35:63:ca:1e:52: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A0:2E:29:72:43:17:6E:97:39:7D:5F:58:0D:69:84:4F:13:40:CE X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:40:b4:c1:cd:18:d7:a1:94:fb:6f:22:6d:c1:3c:8a:f1:df: 99:35:e3:04:12:8a:51:ca:b0:35:fb:66:32:9c:92:41:a8:8b: 86:92:d9:e2:37:ed:7f:18:31:36:76:4c:aa:10:b3:38:2e:d0: c1:83:bc:65:c3:e9:0e:4f:af:9c:a4:f8:ca:ef:e3:8f:78:7d: 83:2a:b9:c8:9f:3c:16:50:9a:11:e4:50:20:38:63:8d:95:cc: fa:ab:39:f8:7c:d8:bd:b0:a3:b6:0a:0d:ff:fa:37:08:ea:b4: 71:69:95:62:19:02:f4:c2:ea:fd:99:0c:35:31:b6:bc:4b:18: ce:6c:3e:66:fa:de:37:70:6d:15:95:2e:ce:95:dc:b2:85:f6: 88:86:33:d3:28:40:37:16:5a:d0:ef:d6:41:7d:5e:10:69:21: 5d:11:2e:46:fb:b9:e0:f1:5c:0d:d4:4f:29:dd:ef:d7:f9:a7: 85:6e:f4:7f:63:e8:0e:2d:a1:12:fb:25:40:b2:62:73:11:5f: c7:67:3c:e7:0f:29:e2:c1:35:87:f7:41:7a:73:a2:2c:72:a5: 3c:85:b2:06:44:a6:dd:7b:0f:a7:73:27:2e:d4:0a:92:e7:cf: 03:25:06:f7:e2:1d:34:ca:4b:ae:c3:19:2d:fa:53:25:df:25: 03:9e:df:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjUwOTE5MDMwODA2WhcNMjUwOTI2MDMwODA2WjAYMRYwFAYD VQQDEw02OGNjYzkxNy00MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLWJyrZI+xl66if7PlXtJxwnp4AR+VEW4Nrx/BbN4ctJNwb89NRQZkboxP7R NkI0x9BVa5XNNxJw8n4e1FpEGiAJsCPyxDRX8IusUcU/RZHwUrJGc4begz68SObO y1AFEpgJD2T5w80IVZNY9HKoDCh+gIEKY6j8Z3zosm3e6Pk8utmmgW3n3/2I3Imm XKXjUnXjiTh4HJ8bhlALJc5q5m4HJRezYbIfrog4+vbcIZozs/iniJXLPFOBH+mq FEf27sK8nllhSh/KyTfHrjLXu1KXS/Y8kG/8D25Gj10x26tzmCZcc2X9Vw/sTujQ P24lnnsqIjukzVgnNWPKHlKVRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGgLily Qxdulzl9X1gNaYRPE0DOMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpQLTBzRjXoZT7byJtwTyK8d+ZNeMEEopRyrA1+2YynJJBqIuGktni N+1/GDE2dkyqELM4LtDBg7xlw+kOT6+cpPjK7+OPeH2DKrnInzwWUJoR5FAgOGON lcz6qzn4fNi9sKO2Cg3/+jcI6rRxaZViGQL0wur9mQw1Mba8SxjObD5m+t43cG0V lS7OldyyhfaIhjPTKEA3FlrQ79ZBfV4QaSFdES5G+7ng8VwN1E8p3e/X+aeFbvR/ Y+gOLaES+yVAsmJzEV/HZzznDyniwTWH90F6c6IscqU8hbIGRKbdew+ncycu1AqS 588DJQb34h00ykuuwxkt+lMl3yUDnt8W -----END CERTIFICATE-----Generated at Fri Sep 19 07:13:24 2025 by rpki-client