$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: 6fqN7QzKONrbkeU1dgt9CRQCPZpN7c8XuV93/Yy2Jb4= Subject key identifier: D5:49:3B:E4:C7:5E:0C:F8:54:6E:08:59:B5:35:45:33:3E:2D:F1:11 Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: 0108 Signing time: Sun 01 Jun 2025 04:41:55 +0000 Manifest this update: Sun 01 Jun 2025 04:41:55 +0000 Manifest next update: Sun 08 Jun 2025 04:41:55 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: D1gGbnochhn0NSfJqQi3RzvfWmDZlvPPbPbRiWq9qSg=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: 92n4boJHjJIj9KtZ2gabfQc0rIkNAgV+GGdiupr7NM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: Jun 1 04:41:55 2025 GMT Not After : Jun 8 04:41:55 2025 GMT Subject: CN=683bda13-96d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:42:51:26:ca:97:f6:e9:9c:41:b3:ed:6a:a1: 85:22:a8:80:d6:2d:41:aa:88:e2:ec:4c:f1:30:9c: c2:8f:3d:49:f9:ef:87:6a:d8:bf:34:1d:fa:3b:a9: 74:17:b0:da:1d:63:55:5d:b9:7a:f5:d4:9a:ef:24: e8:35:a0:40:07:5d:bc:29:90:e8:a4:b3:45:c7:0d: ae:41:dc:fc:15:80:c8:18:0a:e8:b0:c2:4c:3a:e2: c8:19:0a:67:de:5f:b8:bd:a3:93:4c:5c:40:d6:b8: 85:7a:6e:08:b9:27:bf:4d:b1:1e:c0:36:66:f1:df: 3e:53:1d:5f:d6:16:5f:2d:8e:8b:83:ed:64:74:07: af:dd:28:47:95:f0:30:24:12:7c:98:43:19:be:8c: f1:14:1b:29:a4:48:a3:10:ff:68:5d:f2:b0:94:ca: 06:0a:54:30:17:81:68:5f:6a:74:14:ff:d2:d1:64: d0:ea:63:5d:a0:85:eb:e3:e2:67:ae:57:16:d0:14: 54:c1:37:e1:24:eb:46:fa:dd:f2:3e:5a:02:e8:d5: de:94:a4:e2:3e:3d:df:26:64:dc:e1:29:60:cf:b7: fe:37:d3:af:d3:a4:1b:68:fa:3c:d6:9f:22:44:ca: 7a:85:7d:4b:dd:b9:c2:4d:19:24:d6:be:e1:2b:01: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:3B:E4:C7:5E:0C:F8:54:6E:08:59:B5:35:45:33:3E:2D:F1:11 X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:9d:d2:32:0c:d4:b9:28:bc:48:76:26:9c:3e:78:23:5c:97: 7c:40:bf:18:5f:fe:c7:3c:ca:2a:58:01:ea:e6:77:36:fa:44: fa:97:49:3f:2d:e7:36:10:6c:12:53:1d:92:91:e4:0e:bd:c7: 8d:6a:53:56:9a:d0:9a:b9:7a:cf:32:2a:b8:14:3e:06:ad:f2: ab:9e:47:a9:e7:5c:ef:0f:6e:eb:ae:ce:56:34:eb:63:63:12: b9:8e:40:c1:01:d8:60:27:8c:14:69:15:14:ea:be:7e:bc:2a: f4:5e:5f:70:92:1f:a0:48:fb:b1:f9:19:3a:50:3f:94:7a:9f: e0:01:00:d1:fd:c6:54:d1:85:4a:28:1a:7b:0b:c2:0e:1c:8e: 65:7d:f0:ea:91:6c:ac:c1:40:cc:a7:21:d4:86:2f:10:29:63: f4:a9:5a:bc:9c:ec:1d:b4:01:83:31:4b:e8:85:cf:6c:55:6f: 80:7a:bb:73:f2:ea:b5:74:8e:03:ec:5a:f9:b9:0f:1b:04:68: df:c3:a8:5b:6d:6b:7b:2a:90:53:a5:1a:63:a1:c4:fa:27:f8: 10:4e:d6:24:aa:6e:c6:13:90:08:a6:c6:7d:ec:f4:f9:8c:ec: 9b:63:6a:b3:28:0c:f4:7d:45:27:53:41:77:ff:38:f9:11:f0: e9:f3:fb:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF MUQ2NEM5NjgwHhcNMjUwNjAxMDQ0MTU1WhcNMjUwNjA4MDQ0MTU1WjAYMRYwFAYD VQQDEw02ODNiZGExMy05NmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UJRJsqX9umcQbPtaqGFIqiA1i1Bqoji7EzxMJzCjz1J+e+Hati/NB36O6l0 F7DaHWNVXbl69dSa7yToNaBAB128KZDopLNFxw2uQdz8FYDIGArosMJMOuLIGQpn 3l+4vaOTTFxA1riFem4IuSe/TbEewDZm8d8+Ux1f1hZfLY6Lg+1kdAev3ShHlfAw JBJ8mEMZvozxFBsppEijEP9oXfKwlMoGClQwF4FoX2p0FP/S0WTQ6mNdoIXr4+Jn rlcW0BRUwTfhJOtG+t3yPloC6NXelKTiPj3fJmTc4Slgz7f+N9Ov06QbaPo81p8i RMp6hX1L3bnCTRkk1r7hKwGiVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVJO+TH Xgz4VG4IWbU1RTM+LfERMB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI SWgxWWlqeFNZQmpoMWt5V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBindIyDNS5KLxIdiacPngjXJd8QL8YX/7HPMoqWAHq5nc2+kT6l0k/ Lec2EGwSUx2SkeQOvceNalNWmtCauXrPMiq4FD4GrfKrnkep51zvD27rrs5WNOtj YxK5jkDBAdhgJ4wUaRUU6r5+vCr0Xl9wkh+gSPux+Rk6UD+Uep/gAQDR/cZU0YVK KBp7C8IOHI5lffDqkWyswUDMpyHUhi8QKWP0qVq8nOwdtAGDMUvohc9sVW+Aertz 8uq1dI4D7Fr5uQ8bBGjfw6hbbWt7KpBTpRpjocT6J/gQTtYkqm7GE5AIpsZ97PT5 jOybY2qzKAz0fUUnU0F3/zj5EfDp8/t0 -----END CERTIFICATE-----Generated at Mon Jun 2 22:20:58 2025 by rpki-client