$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: vFSqLaCqjAcOD+87nISwfFjNRIE3XSWvaPTNGA4HT+w= Subject key identifier: D6:B6:A3:2A:A2:85:DB:85:29:68:01:BC:4C:38:E3:FB:67:20:B0:80 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 0104 Signing time: Sat 31 May 2025 04:40:26 +0000 Manifest this update: Sat 31 May 2025 04:40:25 +0000 Manifest next update: Sat 07 Jun 2025 04:40:25 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: dvzhAHs2TqZlnUIgpaps0vSVWWq7WFuGQ44rAKR6Ens=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: May 31 04:40:25 2025 GMT Not After : Jun 7 04:40:25 2025 GMT Subject: CN=683a8839-9cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:55:28:28:1d:a7:55:b6:6c:94:62:32:46: b8:67:fd:b9:b8:fe:b0:4d:0c:fb:f7:b8:35:6e:9b: eb:96:23:f1:51:ea:86:d4:80:28:71:3b:ff:0c:4c: 03:47:cf:53:3e:ff:84:17:1e:7f:7c:93:ba:89:af: 62:32:f1:03:1b:53:13:ba:44:3e:bb:c6:94:bd:ef: c4:a2:95:fc:33:56:8f:34:df:5c:61:43:c1:d3:e8: a0:9e:4e:4c:e0:ab:5a:a1:df:71:25:53:21:95:4e: 9b:c0:01:c8:da:9b:40:60:53:2a:85:73:e5:1c:b6: 99:f1:9f:c4:42:38:37:df:ad:4f:db:60:ac:79:b0: 62:e2:ce:3c:04:ff:c6:c1:35:9a:ae:bd:e9:1e:fd: 3b:a3:dd:6b:a3:56:13:c4:7a:77:e8:1a:e9:a6:94: 09:91:e0:92:8f:0f:41:e0:5a:db:1c:15:95:74:45: 55:96:aa:25:42:c5:48:74:49:d6:a9:88:8a:7f:a5: ec:49:cd:33:2e:f4:07:53:2d:12:fb:3e:0b:09:10: e3:1f:ea:e7:7a:b1:fb:c7:d9:7d:52:48:28:d2:ae: d9:ff:1b:0b:f2:47:9d:ad:6c:a3:79:b7:16:0d:4b: ae:2c:7d:f5:23:e7:63:a2:89:73:3b:84:d1:f9:46: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B6:A3:2A:A2:85:DB:85:29:68:01:BC:4C:38:E3:FB:67:20:B0:80 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a5:1b:f8:78:c6:15:31:13:c2:2f:cc:63:22:25:2d:64:1d: e5:0c:89:2d:5e:01:e6:7e:50:79:e5:4d:8e:3b:55:56:2f:ab: a3:9e:c7:83:36:f6:be:d6:ed:8e:c6:7d:ba:d6:30:27:fd:be: ac:66:5c:52:40:b7:6d:48:a3:5f:2b:06:4d:f1:c0:28:96:5c: d8:62:cd:68:c9:76:58:3a:1b:26:28:2a:85:bb:c8:bb:ac:2c: a2:32:10:fa:d7:08:c3:96:92:3b:57:f4:b2:76:38:77:4e:22: 46:fe:1d:11:5b:1e:9a:21:12:53:6e:af:6c:4f:d7:8d:20:c2: d0:da:91:5b:f3:34:24:d5:03:c4:67:79:b5:15:34:0c:5b:96: cb:92:d1:54:78:d5:39:25:f9:75:96:12:87:80:06:c0:6c:71: 63:2b:75:7b:e2:59:cc:ae:d0:92:6b:6f:6b:13:f4:52:9c:fc: 3e:02:cb:41:1b:56:bd:00:5c:ea:00:ea:ad:c2:15:bc:f3:a0: 5c:bb:25:b6:3c:54:e2:2a:c8:f5:5c:f4:94:42:d9:7d:95:ee: 99:da:36:ec:b5:e6:05:d0:e6:10:95:ba:8e:dc:56:7a:6e:34: 48:96:97:77:ab:8e:85:7b:12:87:17:42:72:71:71:3a:6f:aa: 0e:4f:ec:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUwNTMxMDQ0MDI1WhcNMjUwNjA3MDQ0MDI1WjAYMRYwFAYD VQQDEw02ODNhODgzOS05Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBFVKCgdp1W2bJRiMka4Z/25uP6wTQz797g1bpvrliPxUeqG1IAocTv/DEwD R89TPv+EFx5/fJO6ia9iMvEDG1MTukQ+u8aUve/EopX8M1aPNN9cYUPB0+ignk5M 4Ktaod9xJVMhlU6bwAHI2ptAYFMqhXPlHLaZ8Z/EQjg3361P22CsebBi4s48BP/G wTWarr3pHv07o91ro1YTxHp36BrpppQJkeCSjw9B4FrbHBWVdEVVlqolQsVIdEnW qYiKf6XsSc0zLvQHUy0S+z4LCRDjH+rnerH7x9l9Ukgo0q7Z/xsL8kedrWyjebcW DUuuLH31I+djoolzO4TR+UYmnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa2oyqi hduFKWgBvEw44/tnILCAMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLpRv4eMYVMRPCL8xjIiUtZB3lDIktXgHmflB55U2OO1VWL6ujnseD Nva+1u2Oxn261jAn/b6sZlxSQLdtSKNfKwZN8cAollzYYs1oyXZYOhsmKCqFu8i7 rCyiMhD61wjDlpI7V/Sydjh3TiJG/h0RWx6aIRJTbq9sT9eNIMLQ2pFb8zQk1QPE Z3m1FTQMW5bLktFUeNU5Jfl1lhKHgAbAbHFjK3V74lnMrtCSa29rE/RSnPw+AstB G1a9AFzqAOqtwhW886BcuyW2PFTiKsj1XPSUQtl9le6Z2jbsteYF0OYQlbqO3FZ6 bjRIlpd3q46FexKHF0JycXE6b6oOT+zN -----END CERTIFICATE-----Generated at Sat May 31 16:42:09 2025 by rpki-client