$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: 63zV8J4is+9TVlAEBuQvCCsamJMn7cifv3FvfhRwnxo= Subject key identifier: 1E:02:9D:F9:58:54:90:88:54:2E:D5:FE:9A:D0:B0:5E:1A:22:73:B1 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01D1 Signing time: Sat 31 May 2025 02:35:57 +0000 Manifest this update: Sat 31 May 2025 02:35:57 +0000 Manifest next update: Sat 07 Jun 2025 02:35:57 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: 7JGyBZqCHRhkDMqwzynb7/rM3utzTeHjPaic2TE8ExM=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: May 31 02:35:57 2025 GMT Not After : Jun 7 02:35:57 2025 GMT Subject: CN=683a6b0d-21f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:bf:55:e1:47:18:a9:dc:41:ce:3d:79:f5: 91:19:dd:c5:bc:e6:44:00:64:c4:bf:ad:9f:23:a2: 62:fb:ab:a1:b2:7d:96:4b:ae:ff:2e:5e:6a:b2:5a: aa:f1:ab:50:54:9f:ad:41:55:21:af:7e:10:22:d5: 38:6b:56:e0:db:ab:10:bc:f0:72:19:6e:86:fd:fd: e7:c8:06:0a:fd:13:e3:e0:de:8d:94:a6:80:83:01: 13:2c:72:9d:99:ac:3f:ca:0d:35:2d:30:38:4d:10: f4:e0:65:15:db:81:9b:90:09:fd:ba:f5:9c:2d:1e: 5c:7c:50:13:92:c5:e2:61:86:e2:ff:d0:20:c6:fb: 9b:11:49:37:ed:d0:97:5f:09:43:da:7f:08:e6:4d: 13:da:0a:b9:ef:07:c7:69:45:dd:96:3a:a3:c3:f4: 22:ef:19:28:44:06:cf:69:8d:c3:e4:06:d0:a4:d3: e1:db:74:84:38:0f:46:fb:c4:04:81:2d:ea:93:cf: 62:33:59:ae:29:db:04:68:10:41:29:5f:90:24:1d: 74:01:a3:e6:74:3c:ad:98:14:72:03:69:c5:1c:35: 2c:a6:54:06:c5:7e:02:17:5b:70:c0:ed:74:71:40: d8:35:1d:b9:ce:e0:f2:0d:16:e8:9c:5e:85:49:78: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:02:9D:F9:58:54:90:88:54:2E:D5:FE:9A:D0:B0:5E:1A:22:73:B1 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:07:18:ff:c8:9f:d0:4c:c0:9c:9c:7b:a2:82:26:8c:23:f1: cb:ff:8a:bd:60:37:e7:a3:47:fd:77:d0:a2:31:64:ad:f4:05: e4:a5:06:07:e2:cc:72:e9:d0:8c:92:03:a2:da:93:73:00:05: b9:57:e0:a6:69:f5:a4:8e:64:30:26:65:f5:3b:19:29:fc:b8: c6:11:96:2b:84:36:96:bf:32:6a:6a:55:74:04:fd:b4:67:e4: 61:bf:8b:4d:9c:e5:55:69:83:09:1d:05:40:76:7f:de:7e:a8: 44:93:2a:75:53:85:2c:76:d0:25:ec:4b:8b:d4:74:93:88:e8: 22:79:d5:ad:44:ee:57:32:e2:5a:4b:3f:34:4c:dc:d5:89:a7: 68:00:15:73:1a:80:c9:39:a9:f0:0a:3a:8c:aa:6d:93:90:61: 22:4f:0c:35:a7:e9:df:c7:05:b0:4f:53:5c:ab:14:ce:e1:f9: eb:66:79:85:41:5b:c9:2a:e5:a0:26:2e:1f:f8:55:fe:3f:3a: 77:7c:87:c2:9c:0e:26:ad:ba:95:3a:f6:df:7b:54:b8:90:ce: 37:7a:d0:17:eb:55:cd:01:d0:0c:81:62:ef:ed:11:61:3c:cb: 4c:c1:48:6c:97:67:00:f3:59:7f:0d:c6:dc:43:0c:4b:73:6d: 42:79:91:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNTMxMDIzNTU3WhcNMjUwNjA3MDIzNTU3WjAYMRYwFAYD VQQDEw02ODNhNmIwZC0yMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdy/VeFHGKncQc49efWRGd3FvOZEAGTEv62fI6Ji+6uhsn2WS67/Ll5qslqq 8atQVJ+tQVUhr34QItU4a1bg26sQvPByGW6G/f3nyAYK/RPj4N6NlKaAgwETLHKd maw/yg01LTA4TRD04GUV24GbkAn9uvWcLR5cfFATksXiYYbi/9AgxvubEUk37dCX XwlD2n8I5k0T2gq57wfHaUXdljqjw/Qi7xkoRAbPaY3D5AbQpNPh23SEOA9G+8QE gS3qk89iM1muKdsEaBBBKV+QJB10AaPmdDytmBRyA2nFHDUsplQGxX4CF1twwO10 cUDYNR25zuDyDRbonF6FSXjuKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4CnflY VJCIVC7V/prQsF4aInOxMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxBxj/yJ/QTMCcnHuigiaMI/HL/4q9YDfno0f9d9CiMWSt9AXkpQYH 4sxy6dCMkgOi2pNzAAW5V+CmafWkjmQwJmX1Oxkp/LjGEZYrhDaWvzJqalV0BP20 Z+Rhv4tNnOVVaYMJHQVAdn/efqhEkyp1U4UsdtAl7EuL1HSTiOgiedWtRO5XMuJa Sz80TNzViadoABVzGoDJOanwCjqMqm2TkGEiTww1p+nfxwWwT1NcqxTO4fnrZnmF QVvJKuWgJi4f+FX+Pzp3fIfCnA4mrbqVOvbfe1S4kM43etAX61XNAdAMgWLv7RFh PMtMwUhsl2cA81l/DcbcQwxLc21CeZGl -----END CERTIFICATE-----Generated at Sat May 31 17:26:14 2025 by rpki-client