$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json) Hash identifier: +f57SQnJJGW3Y3xtRE/7nHYhmt6rQ/lp3Q4/fh7PgvI= Subject key identifier: E1:33:F0:28:0F:C2:0C:AE:B3:BE:51:95:70:40:10:88:57:11:7F:FC Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft Manifest number: 10 Signing time: Sat 31 May 2025 07:36:55 +0000 Manifest this update: Sat 31 May 2025 07:36:55 +0000 Manifest next update: Sat 07 Jun 2025 07:36:55 +0000 Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: XNvNWHOWuRfOXtSYPlNA0UEqcoD39jTyW1eqWrS9uoc=) 2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: 4xMCpId57nfxz7XEfKoBdilLfSUib+cCTUbVdicWXMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824 Validity Not Before: May 31 07:36:55 2025 GMT Not After : Jun 7 07:36:55 2025 GMT Subject: CN=683ab197-e4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:ae:81:5f:6a:4e:40:a6:4a:d6:11:61:81: bf:c2:e1:fa:04:42:4e:cf:df:74:0b:05:6f:33:b3: b0:9d:db:f7:ac:8e:8f:6e:2b:81:e5:e1:f0:26:ff: 2f:83:c7:2c:d4:79:f2:87:ab:4d:d9:0b:c9:2d:d9: a6:9b:b1:cb:35:ed:56:0b:a4:66:8c:ef:dc:22:98: 6a:eb:d7:f1:df:cc:46:45:45:be:b3:a5:d4:77:02: bf:94:85:13:e6:27:d4:a4:59:f9:6c:bc:69:22:6c: 4a:b1:39:88:e7:67:dc:b7:53:18:38:2a:97:6c:25: 1c:d4:58:80:e0:fb:5d:33:57:4e:2d:de:67:98:cb: d1:13:63:9c:9c:da:b8:5d:b6:23:6c:8d:bb:6f:52: 4c:b5:6e:10:e2:82:f1:ef:e7:af:ab:97:08:bd:83: 0d:8b:6e:9f:7f:f8:23:c4:ac:7a:5c:8b:f9:15:d3: f7:73:02:8d:ea:e8:9c:a2:44:b1:4b:c0:1c:ee:c1: 35:74:72:7d:45:92:2f:ba:73:f3:7c:7d:bf:58:b1: 80:bf:be:ef:aa:ee:9c:ca:30:3b:c9:e8:81:51:8f: 39:ca:de:fd:b1:50:17:81:18:1a:b8:3b:b4:e3:a7: 9c:09:ae:89:1e:42:2b:85:e9:0e:a8:82:c2:d9:fd: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:33:F0:28:0F:C2:0C:AE:B3:BE:51:95:70:40:10:88:57:11:7F:FC X509v3 Authority Key Identifier: keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:58:e6:9a:27:b5:a3:c4:60:31:79:8b:e6:f4:f6:cd:bd:4f: e6:53:b1:fc:c0:bc:1b:47:50:cc:0e:a5:1d:a2:26:3a:59:99: 49:aa:9b:6f:d5:5e:76:5c:b3:18:28:76:3c:03:b1:63:62:4d: 1b:5a:e9:52:ee:48:7e:9d:ef:39:fb:8f:00:ed:9a:f2:44:50: 71:b2:3d:cd:92:35:e8:a1:f0:0b:b3:97:db:d5:4c:22:2e:15: 67:c6:a1:ac:1f:2b:2f:b0:26:f3:81:3a:1c:83:53:22:dd:4e: 96:db:f0:f0:a2:55:f7:39:81:f0:61:58:cc:6a:07:04:c1:b6: fe:41:bb:64:cd:e6:80:3c:36:77:f1:e5:42:c6:40:20:ef:38: 01:b2:a8:9f:69:2b:04:90:e3:96:9a:d1:1b:4a:e1:f9:75:46: c7:d3:0d:ea:68:db:f0:08:e0:85:f8:eb:40:ad:ba:ca:d4:0d: f3:72:b5:f1:d4:53:ba:46:f5:ca:68:c8:84:0a:74:c4:9a:1b: fa:e1:95:c2:e1:b9:64:86:1c:49:29:84:e0:f9:a7:7d:4a:f6: aa:ce:54:3a:1c:16:d9:82:a6:32:da:00:c2:9e:6d:48:fa:2e: 36:98:f7:63:cc:14:61:38:36:d6:2e:4e:dc:f3:d1:c8:3f:62: 2f:bb:00:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTY1QjExMC8GA1UEBRMoM0UwNjI4OTZGNzk2MTQwQzY0MDU1RTQ3RDQ1MzA4NDgy M0E3MDgyNDAeFw0yNTA1MzEwNzM2NTVaFw0yNTA2MDcwNzM2NTVaMBgxFjAUBgNV BAMTDTY4M2FiMTk3LWU0ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEQ66BX2pOQKZK1hFhgb/C4foEQk7P33QLBW8zs7Cd2/esjo9uK4Hl4fAm/y+D xyzUefKHq03ZC8kt2aabscs17VYLpGaM79wimGrr1/HfzEZFRb6zpdR3Ar+UhRPm J9SkWflsvGkibEqxOYjnZ9y3Uxg4KpdsJRzUWIDg+10zV04t3meYy9ETY5yc2rhd tiNsjbtvUky1bhDigvHv56+rlwi9gw2Lbp9/+CPErHpci/kV0/dzAo3q6JyiRLFL wBzuwTV0cn1Fki+6c/N8fb9YsYC/vu+q7pzKMDvJ6IFRjznK3v2xUBeBGBq4O7Tj p5wJrokeQiuF6Q6ogsLZ/Q/fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4TPwKA/C DK6zvlGVcEAQiFcRf/wwHwYDVR0jBBgwFoAUPgYolveWFAxkBV5H1FMISCOnCCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjVCLzdGNEJFOUEyMjZG NDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4a0JWNUgxRk1JU0NPbkND US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdZb2x2ZVdGQXhrQlY1SDFGTUlTQ09uQ0NRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NjVCLzdGNEJFOUEyMjZGNDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4 a0JWNUgxRk1JU0NPbkNDUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1Y5pontaPEYDF5i+b09s29T+ZTsfzAvBtHUMwOpR2iJjpZmUmqm2/V XnZcsxgodjwDsWNiTRta6VLuSH6d7zn7jwDtmvJEUHGyPc2SNeih8Auzl9vVTCIu FWfGoawfKy+wJvOBOhyDUyLdTpbb8PCiVfc5gfBhWMxqBwTBtv5Bu2TN5oA8Nnfx 5ULGQCDvOAGyqJ9pKwSQ45aa0RtK4fl1RsfTDepo2/AI4IX460CtusrUDfNytfHU U7pG9cpoyIQKdMSaG/rhlcLhuWSGHEkphOD5p31K9qrOVDocFtmCpjLaAMKebUj6 LjaY92PMFGE4NtYuTtzz0cg/Yi+7AM8= -----END CERTIFICATE-----Generated at Sat May 31 16:32:17 2025 by rpki-client